55bae7197650b1fb1451dee5a28c4b42264826b50b7a8ed00b7487d83782a60b

Sharing

Copy URL Twitter E-mail

General

Target
55bae7197650b1fb1451dee5a28c4b42264826b50b7a8ed00b7487d83782a60b
Size 764KB
Sample260804-24wtxssfla
SHA256 55bae7197650b1fb1451dee5a28c4b42264826b50b7a8ed00b7487d83782a60b
MD5 43bae62b650345155c947d8d24a84e08
SHA1 161bb65331592250b8be60fa63160001e5dbe6c0
SHA512 d27d387c847fe3b4850af2313119db5905fa62b4063e2b65ff1e951d5ee87e4cbd7db05fd2d70959e7322abe9ddc876ea1860ae54e4c1473b01be16a37e2a23e
SSDEEP 12288:WJf2B5TxmlkveSuWI4ztdSJf2B5TlJf2B5T:TmWve
TLSH
T14BF48223A3EA9126F5B3877469774360BB7BB8104B35C2CF6641544E0EF6BC0DA74B26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55bae7197650b1fb1451dee5a28c4b42264826b50b7a8ed00b7487d83782a60b

File Explorer

55bae7197650b1fb1451dee5a28c4b42264826b50b7a8ed00b7487d83782a60b

.exe 764KB

55bae7197650b1fb1451dee5a28c4b42264826b50b7a8ed00b7487d83782a60b

IMPHASH c182814673930cb5a61baa3d63ef9312
SHA256 55bae7197650b1fb1451dee5a28c4b42264826b50b7a8ed00b7487d83782a60b
MD5 43bae62b650345155c947d8d24a84e08
SHA1 161bb65331592250b8be60fa63160001e5dbe6c0
SHA512 d27d387c847fe3b4850af2313119db5905fa62b4063e2b65ff1e951d5ee87e4cbd7db05fd2d70959e7322abe9ddc876ea1860ae54e4c1473b01be16a37e2a23e
SSDEEP 12288:WJf2B5TxmlkveSuWI4ztdSJf2B5TlJf2B5T:TmWve
TLSH
T14BF48223A3EA9126F5B3877469774360BB7BB8104B35C2CF6641544E0EF6BC0DA74B26
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

ExtractIconA ShellAboutA

comdlg32

GetOpenFileNameA

user32

ArrangeIconicWindows BeginPaint CheckDlgButton CheckMenuItem CheckRadioButton CloseWindow CreateIcon CreateWindowExW DefFrameProcW DefMDIChildProcW DefWindowProcW DestroyMenu DestroyWindow DialogBoxParamW DispatchMessageW DrawIcon EnableMenuItem EndDialog EndPaint GetClientRect GetDlgItemTextA GetIconInfo GetMessageW GetSubMenu GetWindowLongPtrW IsDlgButtonChecked IsIconic IsZoomed LoadAcceleratorsW LoadCursorW LoadIconW LoadMenuW LoadStringA MessageBoxA OpenIcon PostQuitMessage RegisterClassW SendDlgItemMessageA SendDlgItemMessageW SendMessageA SendMessageW SetDlgItemTextA SetMenu SetWindowLongPtrW SetWindowPos SetWindowTextA ShowWindow TranslateAcceleratorW TranslateMessage UpdateWindow WinHelpA wsprintfA

gdi32

DeleteObject GetObjectW GetStockObject

ucrtbase

__p___argc __p___argv __stdio_common_vsprintf __stdio_common_vsscanf _configure_narrow_argv _crt_atexit _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type exit memcpy memset strcmp strcpy strlen

kernel32

GetCommandLineA GetCurrentDirectoryA GetModuleHandleA GetPrivateProfileIntA GetPrivateProfileStringA GetStartupInfoA LocalAlloc LocalFree LocalLock LocalReAlloc OpenFile WinExec WritePrivateProfileStringA __chkstk _lclose _lcreat _llseek _lopen _lread _lwrite lstrcmpA lstrcmpiA

Sharing

General

Malware Config

Signatures

File Explorer

55bae7197650b1fb1451dee5a28c4b42264826b50b7a8ed00b7487d83782a60b

shell32

comdlg32

user32

gdi32

ucrtbase

kernel32

generic