67f98bb6c0a3eac0c48e91df5475b4566f191687c0c0720a10c2a1460a609262

Sharing

Copy URL Twitter E-mail

General

Target
67f98bb6c0a3eac0c48e91df5475b4566f191687c0c0720a10c2a1460a609262
Size 219KB
Sample260801-ezezaaxfpd
SHA256 67f98bb6c0a3eac0c48e91df5475b4566f191687c0c0720a10c2a1460a609262
MD5 a3064f642afadff35aca0b5062807785
SHA1 bc7a7144a4459b81149a50971d8b24dc6a1b2b3a
SHA512 8da901f11c7d0c9b1f585026267c528d310e6c23d2d4d476580ad90562cea9dbbbbad669cb49b19c939f9a711937a426fe85c65f526c95e9a972597011dde280
SSDEEP 3072:AIHZ20SC98ZAQXan0hr8sFwSgTceEqtliZgh7aeAh+BQcJyLOxonlfamM2ptTK+:dHZpD8ZXJr8Uhkcb+llRNAhABEni8V/
TLSH
T190243920B581C032E3660B3059E4DAB5593EBD314BA4A4DFF3987FBA49305D35A3B61E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67f98bb6c0a3eac0c48e91df5475b4566f191687c0c0720a10c2a1460a609262

File Explorer

67f98bb6c0a3eac0c48e91df5475b4566f191687c0c0720a10c2a1460a609262

.exe 219KB

67f98bb6c0a3eac0c48e91df5475b4566f191687c0c0720a10c2a1460a609262

IMPHASH d4ca8a677be733a36ceb17926582ce0d
SHA256 67f98bb6c0a3eac0c48e91df5475b4566f191687c0c0720a10c2a1460a609262
MD5 a3064f642afadff35aca0b5062807785
SHA1 bc7a7144a4459b81149a50971d8b24dc6a1b2b3a
SHA512 8da901f11c7d0c9b1f585026267c528d310e6c23d2d4d476580ad90562cea9dbbbbad669cb49b19c939f9a711937a426fe85c65f526c95e9a972597011dde280
SSDEEP 3072:AIHZ20SC98ZAQXan0hr8sFwSgTceEqtliZgh7aeAh+BQcJyLOxonlfamM2ptTK+:dHZpD8ZXJr8Uhkcb+llRNAhABEni8V/
TLSH
T190243920B581C032E3660B3059E4DAB5593EBD314BA4A4DFF3987FBA49305D35A3B61E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

56395

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\weasel-hd2-private\weasel-hd2-private\output\WeaselSetup.pdb

kernel32

GetThreadUILanguage Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection SetEnvironmentVariableW WaitForSingleObject CloseHandle LoadLibraryW FreeLibrary GetFileAttributesW SizeofResource LockResource LoadResource FindResourceW FindResourceExW InitializeCriticalSectionEx DecodePointer DeleteCriticalSection RaiseException MultiByteToWideChar ExpandEnvironmentStringsW GetUserDefaultUILanguage lstrcmpiW LeaveCriticalSection EnterCriticalSection LoadLibraryExW GetCurrentThreadId SetThreadUILanguage SetThreadLocale Sleep GetExitCodeProcess SetLastError CreateFileW GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetSystemDirectoryW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose SetFilePointerEx LCMapStringW GetModuleFileNameW GetCurrentProcess GetModuleHandleW GetProcAddress DeleteFileW MoveFileExW CopyFileW HeapDestroy GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize ExitProcess GetLastError GetFileType WriteFile GetStdHandle GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread WriteConsoleW TlsFree TlsSetValue TlsGetValue GetStringTypeW GetSystemWow64DirectoryW IsDebuggerPresent OutputDebugStringW EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree LoadLibraryExA QueryPerformanceCounter ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetStartupInfoW GetCurrentProcessId RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc

user32

CheckRadioButton GetDlgItem MessageBoxExW SetWindowTextW EnableWindow SetWindowPos DialogBoxParamW MessageBoxW LoadStringW GetActiveWindow DestroyWindow CharNextW UnregisterClassW SetWindowLongW EndDialog SetFocus GetWindowTextLengthW GetWindowTextW IsDlgButtonChecked GetWindow GetWindowLongW MonitorFromWindow GetMonitorInfoW GetWindowRect GetParent GetClientRect MapWindowPoints

advapi32

RegGetValueW RegQueryValueExW FreeSid CheckTokenMembership AllocateAndInitializeSid RegDeleteValueW RegEnumKeyExW RegQueryInfoKeyW RegOpenKeyW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegDeleteKeyW RegCloseKey

shell32

SHParseDisplayName SHCreateShellItem ShellExecuteW ShellExecuteExW

ole32

CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoInitialize CoUninitialize CoCreateInstance

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

Sharing

General

Malware Config

Signatures

File Explorer

67f98bb6c0a3eac0c48e91df5475b4566f191687c0c0720a10c2a1460a609262

kernel32

user32

advapi32

shell32

ole32

oleaut32

comctl32

generic