08aba15fd33f8fd9dab0e5f505d78cd84eaa762aee5b6bde038c6188db570ce8

Sharing

Copy URL Twitter E-mail

General

Target
08aba15fd33f8fd9dab0e5f505d78cd84eaa762aee5b6bde038c6188db570ce8
Size 256KB
Sample260804-2xt2rafm7v
SHA256 08aba15fd33f8fd9dab0e5f505d78cd84eaa762aee5b6bde038c6188db570ce8
MD5 5d5e9d6af86d6d58b81d2851b6e288c9
SHA1 a2984ababe030fc52a1dd2ec943099e1e2c01f56
SHA512 9bf20b16d8897ff60be1462bd2c7e872556ea4686a4ce60ac27f6153adea79bd3b00c2bf917e43b3738f264b81d4a7d48c7288e81bd9a0537fbfffe7f3e32adf
SSDEEP 3072:qxyfN6CYCganZgk3/IcqhKG4W+4/+9TL2PoICeSsBF+KQYv9bpnie4WyZ1ERgldR:qxyfougkvznF46acZL4geLwx
TLSH
T18D441772A7E5C056E176C7309AF083927732BD510F20C9DFAB51175E68707E0EA3AB62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08aba15fd33f8fd9dab0e5f505d78cd84eaa762aee5b6bde038c6188db570ce8

File Explorer

08aba15fd33f8fd9dab0e5f505d78cd84eaa762aee5b6bde038c6188db570ce8

.exe 256KB

08aba15fd33f8fd9dab0e5f505d78cd84eaa762aee5b6bde038c6188db570ce8

IMPHASH 13014236042ba477e9696d60bf6200be
SHA256 08aba15fd33f8fd9dab0e5f505d78cd84eaa762aee5b6bde038c6188db570ce8
MD5 5d5e9d6af86d6d58b81d2851b6e288c9
SHA1 a2984ababe030fc52a1dd2ec943099e1e2c01f56
SHA512 9bf20b16d8897ff60be1462bd2c7e872556ea4686a4ce60ac27f6153adea79bd3b00c2bf917e43b3738f264b81d4a7d48c7288e81bd9a0537fbfffe7f3e32adf
SSDEEP 3072:qxyfN6CYCganZgk3/IcqhKG4W+4/+9TL2PoICeSsBF+KQYv9bpnie4WyZ1ERgldR:qxyfougkvznF46acZL4geLwx
TLSH
T18D441772A7E5C056E176C7309AF083927732BD510F20C9DFAB51175E68707E0EA3AB62
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20768

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

AdjustWindowRect BeginPaint CheckMenuItem CreateWindowExW DefWindowProcW DialogBoxParamW DispatchMessageW EndDialog EndPaint GetDC GetDlgItemInt GetDlgItemTextW GetMenu GetMessageW GetMonitorInfoW GetSystemMetrics IntersectRect LoadAcceleratorsW LoadBitmapW LoadCursorW LoadIconW LoadImageW LoadStringW MessageBoxW MonitorFromRect MoveWindow PostQuitMessage RedrawWindow RegisterClassExW ReleaseCapture ReleaseDC SendMessageW SetCapture SetDlgItemInt SetDlgItemTextW SetTimer ShowWindow TranslateAcceleratorW TranslateMessage UpdateWindow wsprintfW

gdi32

BitBlt CreateCompatibleDC DeleteDC DeleteObject GetStockObject SelectObject

advapi32

RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

InitCommonControls

ucrtbase

__acrt_iob_func __p___argc __p___wargv __stdio_common_vsprintf _configure_wide_argv _crt_atexit _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _strdup _time64 exit free fwrite getenv memmove rand srand strchr strcmp strcpy strcspn strlen wcslen

kernel32

DelayLoadFailureHook ExitProcess GetCommandLineW GetModuleHandleW GetProcAddress GetStartupInfoW GetTickCount HeapAlloc HeapReAlloc ResolveDelayLoadedAPI

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

08aba15fd33f8fd9dab0e5f505d78cd84eaa762aee5b6bde038c6188db570ce8

user32

gdi32

advapi32

comctl32

ucrtbase

kernel32

ntdll

generic