45410f228d208679c73c8c2fc23e7f927d761f7f86ede1ad627436b4a10b9e21

Sharing

Copy URL Twitter E-mail

General

Target
45410f228d208679c73c8c2fc23e7f927d761f7f86ede1ad627436b4a10b9e21
Size 4.4MB
Sample260803-m2fmlahj3x
SHA256 45410f228d208679c73c8c2fc23e7f927d761f7f86ede1ad627436b4a10b9e21
MD5 ae9f0587ddcc71ed8e181dd899375a5d
SHA1 bfc8c0f3e478bd81d7b0ed55dcdb8a15bf51f819
SHA512 8710df9b0ffa9d7e6ac42d87767a47da4c64ae0df51513c421a387daae2f832381faad7275d0370b3b3932c474dfdd55dcb950cf71dd4c177caf2ce7525f771c
SSDEEP 98304:l1zI2gjQr1qyUpkgrltIQaP/iF0QXdf5b:l6m1qyBil8vQXh
TLSH
T17226D063A2846079C962BD3C9A16E5EA70FD81310B73D1F35FEB5D2618F38E18821D76
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45410f228d208679c73c8c2fc23e7f927d761f7f86ede1ad627436b4a10b9e21

File Explorer

45410f228d208679c73c8c2fc23e7f927d761f7f86ede1ad627436b4a10b9e21

.exe 4.4MB

45410f228d208679c73c8c2fc23e7f927d761f7f86ede1ad627436b4a10b9e21

IMPHASH a0bf562246091f817b5d0fff18cca1ff
SHA256 45410f228d208679c73c8c2fc23e7f927d761f7f86ede1ad627436b4a10b9e21
MD5 ae9f0587ddcc71ed8e181dd899375a5d
SHA1 bfc8c0f3e478bd81d7b0ed55dcdb8a15bf51f819
SHA512 8710df9b0ffa9d7e6ac42d87767a47da4c64ae0df51513c421a387daae2f832381faad7275d0370b3b3932c474dfdd55dcb950cf71dd4c177caf2ce7525f771c
SSDEEP 98304:l1zI2gjQr1qyUpkgrltIQaP/iF0QXdf5b:l6m1qyBil8vQXh
TLSH
T17226D063A2846079C962BD3C9A16E5EA70FD81310B73D1F35FEB5D2618F38E18821D76
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

194138

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindClose FindFirstFileW FlushFileBuffers GetFullPathNameW GetVolumeInformationW GetCurrentProcess SetErrorMode FileTimeToLocalFileTime GetFileAttributesExW SystemTimeToTzSpecificLocalTime ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetUserDefaultUILanguage GetLocaleInfoW GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetConsoleMode GetConsoleOutputCP SetFilePointerEx GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW GetTimeZoneInformation LCMapStringW GetFileType GetStdHandle HeapQueryInformation GetCommandLineA GetModuleHandleExW ExitProcess RtlUnwind OutputDebugStringW GlobalFlags IsProcessorFeaturePresent LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection FileTimeToSystemTime GetPrivateProfileStringW GetSystemDefaultUILanguage lstrcmpA GetVersionExW CreateEventW SetEvent CompareStringW GlobalFindAtomW GlobalAddAtomW lstrcmpW GlobalDeleteAtom LoadLibraryA LoadLibraryExW FreeLibrary GetSystemDirectoryW EncodePointer FormatMessageW MulDiv LocalFree GlobalFree GlobalLock GlobalUnlock GlobalAlloc LoadLibraryW GetModuleHandleA InitializeCriticalSectionAndSpinCount SetLastError OutputDebugStringA GetACP LeaveCriticalSection GetPrivateProfileIntW EnterCriticalSection WritePrivateProfileStringW CopyFileW DeleteFileW Sleep GetCommandLineW TerminateProcess VirtualQueryEx ReadProcessMemory GetProcessId MapViewOfFile CreateFileMappingW CreateThread GetCurrentThread UnmapViewOfFile OpenFileMappingW CreateFileW DeviceIoControl WriteFile VirtualProtect VirtualFreeEx Module32NextW CreateRemoteThread GetModuleHandleW VirtualAllocEx GetProcAddress Module32FirstW CloseHandle GetExitCodeThread CreateToolhelp32Snapshot OpenProcess WaitForSingleObject GetModuleFileNameW WriteProcessMemory VirtualQuery WideCharToMultiByte GetProcessHeap GetCurrentProcessId DeleteCriticalSection DecodePointer HeapAlloc FindResourceW LoadResource RaiseException HeapReAlloc LockResource GetLastError MultiByteToWideChar HeapSize GetCurrentThreadId InitializeCriticalSectionEx HeapFree WriteConsoleW QueryPerformanceCounter SizeofResource

user32

SetDlgItemTextW MoveWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetWindow GetTopWindow GetClassLongW SetWindowLongW GetWindowLongW PtInRect CopyRect GetSysColor MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowTextLengthW RemovePropW GetPropW SetPropW GetScrollPos ValidateRect EndPaint BeginPaint GetForegroundWindow SetActiveWindow UpdateWindow SetMenu GetMenu GetKeyState GetFocus SetFocus GetDlgCtrlID GetDlgItem EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPos DestroyWindow IsChild GetActiveWindow CreateWindowExW GetClassInfoExW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos PeekMessageW DispatchMessageW RegisterWindowMessageW GetMenuItemCount GetWindowTextW GetParent SetWindowsHookExW FindWindowW GetMenuItemID GetSubMenu OffsetRect SetRectEmpty SendDlgItemMessageA GetSystemMenu GetSystemMetrics DrawIcon SetClassLongW RedrawWindow GetClientRect IsIconic IsWindowEnabled SetWindowTextW IsDialogMessageW DrawTextW DrawTextExW GrayStringW TabbedTextOutW GetDC ReleaseDC ClientToScreen CreateDialogIndirectParamW EndDialog GetCapture GetNextDlgTabItem EnumWindows UnhookWindowsHookEx UnregisterClassW CallNextHookEx SendMessageW MessageBoxW IsWindowVisible GetWindowRect GetLastActivePopup GetWindowThreadProcessId GetCursorPos SetForegroundWindow AppendMenuW InsertMenuW GetClassNameW LoadIconW DestroyMenu IsWindow ShowWindow TrackPopupMenu CreatePopupMenu PostMessageW RegisterClassW GetClassInfoW EnableWindow ReleaseCapture SetCursor SetCapture GetDesktopWindow CheckMenuItem EnableMenuItem SetMenuItemBitmaps LoadCursorW GetMenuCheckMarkDimensions LoadBitmapW CharUpperW InvalidateRect KillTimer SetTimer RealChildWindowFromPoint GetSysColorBrush PostQuitMessage TranslateMessage IsMenu GetMessageW WindowFromPoint SetMenuItemInfoW

gdi32

DeleteObject Escape GetClipBox GetStockObject PtVisible RectVisible RestoreDC SaveDC SelectObject SetMapMode TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateBitmap GetObjectW SetTextColor SetBkColor GetDeviceCaps DeleteDC

winspool.drv

OpenPrinterW ClosePrinter DocumentPropertiesW

advapi32

RegEnumValueW RegQueryValueW RegEnumKeyW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

shell32

ShellExecuteW Shell_NotifyIconW

shlwapi

StrCpyW PathFindExtensionW PathFindFileNameW PathIsUNCW PathStripToRootW PathFileExistsW

ole32

CoTaskMemFree CoUninitialize CoCreateGuid CoCreateInstance CoInitialize

oleaut32

SysAllocString VariantChangeType VariantClear VariantInit SysFreeString

iphlpapi

GetAdaptersInfo

wininet

InternetReadFile InternetOpenUrlW InternetCloseHandle HttpQueryInfoW InternetOpenW

oleacc

LresultFromObject CreateStdAccessibleObject

Sharing

General

Malware Config

Signatures

File Explorer

45410f228d208679c73c8c2fc23e7f927d761f7f86ede1ad627436b4a10b9e21

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

iphlpapi

wininet

oleacc

generic