fa8ce4707858d9c446062ccc87428d59006270491f5cd7c0b9a1b656c1402167

Sharing

Copy URL Twitter E-mail

General

Target
fa8ce4707858d9c446062ccc87428d59006270491f5cd7c0b9a1b656c1402167
Size 768KB
Sample260804-22nerszyct
SHA256 fa8ce4707858d9c446062ccc87428d59006270491f5cd7c0b9a1b656c1402167
MD5 05db90eda4f2534ebbdde414d3403121
SHA1 c9a22f1dbe5496741fbf59dc05c95e19bd775d46
SHA512 9a5864294fcd955596e9cdc7f27e29fc925486747f3d31d97492ea7a019f72c257abc86af125041d8fdb104ec0b3cf059eb566389116dd537aa288a04cb92d22
SSDEEP 3072:ulBhdem8pagE5KPFYbtClSvqOB9A0uPY+jC2gai8O4VEA6hHFssICmps7Inrc3lL:ultPOFZlGsNnoltPOFZlGsNn
TLSH
T1EEF44E556FFD8562F1F3AF356DB587912A3ABC61BE34C64E4B00256D8830B80DA74B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa8ce4707858d9c446062ccc87428d59006270491f5cd7c0b9a1b656c1402167

File Explorer

fa8ce4707858d9c446062ccc87428d59006270491f5cd7c0b9a1b656c1402167

.exe 768KB

fa8ce4707858d9c446062ccc87428d59006270491f5cd7c0b9a1b656c1402167

IMPHASH 9618827e7636ee4ad15298d7e1f584be
SHA256 fa8ce4707858d9c446062ccc87428d59006270491f5cd7c0b9a1b656c1402167
MD5 05db90eda4f2534ebbdde414d3403121
SHA1 c9a22f1dbe5496741fbf59dc05c95e19bd775d46
SHA512 9a5864294fcd955596e9cdc7f27e29fc925486747f3d31d97492ea7a019f72c257abc86af125041d8fdb104ec0b3cf059eb566389116dd537aa288a04cb92d22
SSDEEP 3072:ulBhdem8pagE5KPFYbtClSvqOB9A0uPY+jC2gai8O4VEA6hHFssICmps7Inrc3lL:ultPOFZlGsNnoltPOFZlGsNn
TLSH
T1EEF44E556FFD8562F1F3AF356DB587912A3ABC61BE34C64E4B00256D8830B80DA74B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comdlg32

GetOpenFileNameW GetSaveFileNameW

comctl32

CreateStatusWindowW CreateToolbarEx InitCommonControls

shell32

ShellAboutW

oleaut32

LoadTypeLib SysFreeString SysStringLen VariantChangeType VariantInit

ole32

CLSIDFromString CoCreateInstance CoCreateInstanceEx OleInitialize OleUninitialize StringFromGUID2

user32

CheckDlgButton CheckMenuItem CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW EmptyClipboard EnableMenuItem EndDialog GetCapture GetClientRect GetCursorPos GetDC GetDlgItem GetMenu GetMessageW GetWindowTextLengthW GetWindowTextW InvertRect IsDlgButtonChecked IsWindowVisible LoadAcceleratorsW LoadCursorW LoadStringW MessageBoxW MoveWindow OpenClipboard PostQuitMessage RegisterClassW ReleaseCapture ReleaseDC ScreenToClient SendMessageW SetCapture SetClipboardData SetCursor SetFocus SetWindowTextW ShowWindow TranslateAcceleratorW TranslateMessage UpdateWindow wsprintfW

advapi32

RegCloseKey RegCreateKeyW RegEnumKeyW RegEnumValueW RegGetValueW RegOpenKeyW RegQueryValueW RegSetValueExW

ucrtbase

__acrt_iob_func __p___argc __p___argv __stdio_common_vsprintf _configure_narrow_argv _crt_atexit _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type _strdup calloc exit free fwrite getenv malloc memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen wcscmp wcslen wcsncmp

kernel32

CloseHandle CreateFileW CreateProcessW FormatMessageW GetCommandLineA GetCurrentDirectoryW GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoA GetTickCount GetWindowsDirectoryW GlobalAlloc GlobalLock GlobalUnlock HeapAlloc HeapReAlloc LocalFree MultiByteToWideChar WideCharToMultiByte WriteFile lstrcmpW

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

fa8ce4707858d9c446062ccc87428d59006270491f5cd7c0b9a1b656c1402167

comdlg32

comctl32

shell32

oleaut32

ole32

user32

advapi32

ucrtbase

kernel32

ntdll

generic