fd674c4b37ebbb77e91d540141cd902e7d57d6ec26ea709d59292bb608394d5b

Sharing

Copy URL Twitter E-mail

General

Target
fd674c4b37ebbb77e91d540141cd902e7d57d6ec26ea709d59292bb608394d5b
Size 4.9MB
Sample260803-1eennscl5x
SHA256 fd674c4b37ebbb77e91d540141cd902e7d57d6ec26ea709d59292bb608394d5b
MD5 ebeb26996867a51829e7de383ba7ccc5
SHA1 42d4e30909db05b6fdb181439c5f5adda0b3b7c9
SHA512 138fe3b699241f174672f176e01f5cc75bfcbed79c26c0b36e82c519a2dd8581ef8fb65fa8edd7b70844b949132f47c3690c09f66c90896119f5120b105cc0d4
SSDEEP 49152:WXL2ssIONmeiiJ0NY4Q07fCo4lvM+pWigyD:RssIOseAynH4ig
TLSH
T1C6369E03E382E6B5D4B38CF476BA322F5E1D9F55033746D7A1243A62B8723E128366D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd674c4b37ebbb77e91d540141cd902e7d57d6ec26ea709d59292bb608394d5b

File Explorer

fd674c4b37ebbb77e91d540141cd902e7d57d6ec26ea709d59292bb608394d5b

.exe 4.9MB

fd674c4b37ebbb77e91d540141cd902e7d57d6ec26ea709d59292bb608394d5b

IMPHASH d608682c6e825d097721bb7d245e5a2b
SHA256 fd674c4b37ebbb77e91d540141cd902e7d57d6ec26ea709d59292bb608394d5b
MD5 ebeb26996867a51829e7de383ba7ccc5
SHA1 42d4e30909db05b6fdb181439c5f5adda0b3b7c9
SHA512 138fe3b699241f174672f176e01f5cc75bfcbed79c26c0b36e82c519a2dd8581ef8fb65fa8edd7b70844b949132f47c3690c09f66c90896119f5120b105cc0d4
SSDEEP 49152:WXL2ssIONmeiiJ0NY4Q07fCo4lvM+pWigyD:RssIOseAynH4ig
TLSH
T1C6369E03E382E6B5D4B38CF476BA322F5E1D9F55033746D7A1243A62B8723E128366D5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2592577

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery SetCurrentDirectoryA GetProcAddress LoadLibraryA FreeLibrary GetCurrentThread GetModuleFileNameA IsBadReadPtr lstrcmpiA TerminateProcess CreateToolhelp32Snapshot Module32First CreateFileW lstrlenA SetEndOfFile GetLocaleInfoW SetEnvironmentVariableA SetStdHandle IsBadCodePtr GetCurrentProcessId VirtualProtect CompareStringW CompareStringA IsValidCodePage Module32Next EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetOEMCP GetACP GetCurrentProcess GetLastError GetVersionExA GetTickCount CreateProcessA CloseHandle GlobalAlloc GlobalLock GlobalUnlock GlobalFree Sleep GetCurrentDirectoryA IsDebuggerPresent GetStringTypeW GetStringTypeA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetFileType GetStdHandle SetHandleCount GetTimeZoneInformation IsBadWritePtr VirtualAlloc GetModuleHandleA CreateDirectoryA VirtualFree HeapCreate HeapDestroy SetUnhandledExceptionFilter HeapSize TlsGetValue TlsSetValue TlsFree SetLastError TlsAlloc GetCPInfo LCMapStringW LCMapStringA HeapReAlloc MultiByteToWideChar CreateThread ExitThread GetCommandLineA CopyFileA DeleteFileA IsValidLocale GetFileAttributesA GetCurrentThreadId FindClose FindNextFileA FindFirstFileA QueryPerformanceCounter QueryPerformanceFrequency IsProcessorFeaturePresent WaitForSingleObject DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InterlockedExchange InitializeCriticalSection ReadFile WriteFile SetFilePointer GetFileSize FlushFileBuffers CreateFileA UnmapViewOfFile GetSystemInfo MapViewOfFile CreateFileMappingA GetVersion lstrlenW FormatMessageA InterlockedDecrement InterlockedIncrement WideCharToMultiByte GetSystemTimeAsFileTime RtlUnwind RaiseException HeapFree HeapAlloc ExitProcess GetLocalTime GetStartupInfoA

user32

LoadIconA SetRectEmpty SetCursor GetCursorPos GetClipboardData GetCaretBlinkTime SetCapture ReleaseCapture SetFocus InflateRect ShowWindow IntersectRect GetMenu AdjustWindowRectEx GetClientRect PostMessageA GetKeyState ChangeDisplaySettingsA PeekMessageA GetMessageA TranslateMessage DispatchMessageA GetDC UpdateWindow GetAsyncKeyState SetForegroundWindow SetCursorPos ClientToScreen OffsetRect MessageBoxA EnumDisplaySettingsA PostQuitMessage PtInRect OpenClipboard EmptyClipboard SetClipboardData CloseClipboard SendMessageA ReleaseDC DialogBoxParamA EndDialog GetWindowRect GetSystemMetrics SetWindowPos MoveWindow DefWindowProcA GetWindowLongA SystemParametersInfoA SetWindowLongA CreateWindowExA RegisterClassExA LoadCursorA IsIconic

gdi32

CreateCompatibleDC CreateCompatibleBitmap SelectObject SetBkColor SetTextColor TextOutA GetPixel DeleteObject DeleteDC CreateFontIndirectA GetClipBox GetDeviceCaps GetGlyphOutlineA GetTextMetricsA

advapi32

RegOpenKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

iphlpapi

GetAdaptersInfo

d3d8

Direct3DCreate8

dsound

ord11

winmm

timeGetTime

ws2_32

WSAStartup WSACleanup gethostbyname inet_addr setsockopt getsockopt closesocket bind htons htonl socket connect WSAGetLastError recv send shutdown

imm32

ImmReleaseContext ImmGetContext ImmAssociateContext

ole32

CoUninitialize CoCreateInstance CoInitializeEx

Name

.text

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

344KB

Virtual Size

341KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

168KB

Virtual Size

203KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

fd674c4b37ebbb77e91d540141cd902e7d57d6ec26ea709d59292bb608394d5b

kernel32

user32

gdi32

advapi32

iphlpapi

d3d8

dsound

winmm

ws2_32

imm32

ole32

generic