ff5cfe340ed511d99bd918e3275a15cb5d1630f76fd62a9bee53b59067bc7f63

Sharing

Copy URL Twitter E-mail

General

Target
ff5cfe340ed511d99bd918e3275a15cb5d1630f76fd62a9bee53b59067bc7f63
Size 360KB
Sample260804-3fagfstajg
SHA256 ff5cfe340ed511d99bd918e3275a15cb5d1630f76fd62a9bee53b59067bc7f63
MD5 bf9f95dc2b13790b167d6e51017d77d0
SHA1 404deaa8d8bd69fb9928b6c5d3339823a322c8cf
SHA512 0a02b270816d2da0c44038fbae7fc23e5642e055aa1fb993f904d04cf1c073a452234413bedefba82078a00109dc63736714af90f714542c6988c5439c0381b2
SSDEEP 3072:3xPvy+2Aa6qpBo9NxPvy+2Aa6qpBo9NxPvy+2Aa6qpBo9:w76qCm76qCm76qC
TLSH
T1BA742900BAE15575FCB906725D6BA37A1BAABA30CF309EC756410C9F0FA5BD08634367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff5cfe340ed511d99bd918e3275a15cb5d1630f76fd62a9bee53b59067bc7f63

File Explorer

ff5cfe340ed511d99bd918e3275a15cb5d1630f76fd62a9bee53b59067bc7f63

.exe 360KB

ff5cfe340ed511d99bd918e3275a15cb5d1630f76fd62a9bee53b59067bc7f63

IMPHASH 3d5403b81a82e04d9fb93560e7f76c31
SHA256 ff5cfe340ed511d99bd918e3275a15cb5d1630f76fd62a9bee53b59067bc7f63
MD5 bf9f95dc2b13790b167d6e51017d77d0
SHA1 404deaa8d8bd69fb9928b6c5d3339823a322c8cf
SHA512 0a02b270816d2da0c44038fbae7fc23e5642e055aa1fb993f904d04cf1c073a452234413bedefba82078a00109dc63736714af90f714542c6988c5439c0381b2
SSDEEP 3072:3xPvy+2Aa6qpBo9NxPvy+2Aa6qpBo9NxPvy+2Aa6qpBo9:w76qCm76qCm76qC
TLSH
T1BA742900BAE15575FCB906725D6BA37A1BAABA30CF309EC756410C9F0FA5BD08634367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

55216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

rpcrt4

UuidCreate

user32

AdjustWindowRect AppendMenuW BeginPaint ChangeDisplaySettingsExW ClientToScreen ClipCursor CopyIcon CreateDesktopW CreateIcon CreatePopupMenu CreateWindowExW DefWindowProcW DestroyIcon DestroyMenu DestroyWindow DispatchMessageW DrawCaptionTempW DrawFrameControl DrawIconEx DrawTextW EndPaint EnumDisplayDevicesW EnumDisplaySettingsExW ExitWindowsEx GetAncestor GetClientRect GetDC GetDesktopWindow GetForegroundWindow GetMenuInfo GetMenuItemCount GetMenuItemInfoW GetMessageW GetProcessWindowStation GetSystemMetrics GetThreadDesktop GetUserObjectInformationW GetWindow GetWindowLongW GetWindowRect GetWindowThreadProcessId InsertMenuItemW IntersectRect InvalidateRect IsIconic IsWindowEnabled IsWindowVisible KillTimer LoadCursorA LoadCursorW LoadIconW LoadStringW MessageBoxW MsgWaitForMultipleObjects PaintDesktop PeekMessageW PostMessageW PostQuitMessage RegisterClassExW RegisterClassW ReleaseDC SendMessageW SendNotifyMessageW SetCursor SetForegroundWindow SetMenuInfo SetMenuItemInfoW SetParent SetShellWindow SetThreadDesktop SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SubtractRect SystemParametersInfoW TrackPopupMenuEx TranslateMessage UnregisterClassW UpdateLayeredWindow UpdateWindow

gdi32

CreateCompatibleDC CreateDIBSection CreateFontIndirectW DeleteDC DeleteObject GetDeviceCaps GetTextExtentPointA GetTextExtentPointW GetTextMetricsW SelectObject SetBkMode SetTextColor

advapi32

RegCloseKey RegCreateKeyExW RegGetValueW RegOpenKeyW RegQueryValueExW RegSetValueExA RegSetValueExW

win32u

NtUserMessageCall

ucrtbase

__acrt_iob_func __p___argc __p___wargv __stdio_common_vsprintf __stdio_common_vswprintf _assert _configure_wide_argv _crt_atexit _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _strdup _wcsicmp _wcsnicmp calloc exit free fwrite getenv iswspace malloc memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen wcschr wcscmp wcscpy wcslen wcstoul

kernel32

CloseHandle CompareStringW CreateEventW CreateFileW CreateMutexW CreateProcessW CreateThread DuplicateHandle EnterCriticalSection ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetFullPathNameW GetModuleHandleW GetOverlappedResult GetProcAddress GetStartupInfoW GetTickCount HeapAlloc HeapReAlloc InitializeCriticalSectionEx IsBadStringPtrA IsBadStringPtrW LeaveCriticalSection LoadLibraryW MapViewOfFile MulDiv MultiByteToWideChar OpenProcess ReadDirectoryChangesW ResolveDelayLoadedAPI SetThreadDescription UnmapViewOfFile WaitForMultipleObjects WaitForSingleObject lstrcmpiW

ntdll

NtSetInformationProcess _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

ff5cfe340ed511d99bd918e3275a15cb5d1630f76fd62a9bee53b59067bc7f63

rpcrt4

user32

gdi32

advapi32

win32u

ucrtbase

kernel32

ntdll

generic