464c69e3a3e07234b2706a36c9a1dba0e5ec5ccca458750d8643ec6c493f82fd

Sharing

Copy URL Twitter E-mail

General

Target
464c69e3a3e07234b2706a36c9a1dba0e5ec5ccca458750d8643ec6c493f82fd
Size 393KB
Sample260804-jt2nbaan2x
SHA256 464c69e3a3e07234b2706a36c9a1dba0e5ec5ccca458750d8643ec6c493f82fd
MD5 e6b407b7da1ccc1a06c4d713f86fd323
SHA1 b694e6145e609b9df5c9e3b4ec38aab81784ce1a
SHA512 b1816c8c9fec07c2da34c64ea436f1eac4349ab3d3ef15d2eedcba6d11f425e3d0ce6b8fdcdf8ffe64cd13048a01070b3aaedcca68910cb931b02a7d1bf8dc4a
SSDEEP 6144:24JUEPS+nWdHSRoAbAyRrPOaenTfH8F7otl/zoMlweIga:2BA2WDPOaEf7plwzB
TLSH
T16284D5136ADCBCA2C5714231273B87EAD72DED600B91C5CF92C40AA5D97C5C37632B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
464c69e3a3e07234b2706a36c9a1dba0e5ec5ccca458750d8643ec6c493f82fd

File Explorer

464c69e3a3e07234b2706a36c9a1dba0e5ec5ccca458750d8643ec6c493f82fd

.exe 393KB

464c69e3a3e07234b2706a36c9a1dba0e5ec5ccca458750d8643ec6c493f82fd

IMPHASH 2bd93d27dd3ee58b2ef6298ca60bba44
SHA256 464c69e3a3e07234b2706a36c9a1dba0e5ec5ccca458750d8643ec6c493f82fd
MD5 e6b407b7da1ccc1a06c4d713f86fd323
SHA1 b694e6145e609b9df5c9e3b4ec38aab81784ce1a
SHA512 b1816c8c9fec07c2da34c64ea436f1eac4349ab3d3ef15d2eedcba6d11f425e3d0ce6b8fdcdf8ffe64cd13048a01070b3aaedcca68910cb931b02a7d1bf8dc4a
SSDEEP 6144:24JUEPS+nWdHSRoAbAyRrPOaenTfH8F7otl/zoMlweIga:2BA2WDPOaEf7plwzB
TLSH
T16284D5136ADCBCA2C5714231273B87EAD72DED600B91C5CF92C40AA5D97C5C37632B9A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39060

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\001_WorkCode\WD\WD_Main\src\uninst\Release\Uninst.pdb

winhttp

WinHttpCloseHandle WinHttpReceiveResponse WinHttpCrackUrl WinHttpOpenRequest WinHttpOpen WinHttpConnect WinHttpSetTimeouts WinHttpSendRequest

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

shlwapi

PathIsDirectoryW PathFindFileNameW PathFileExistsW PathAppendW SHDeleteKeyW PathIsRootW PathRemoveFileSpecW StrCmpNIW StrTrimA PathCombineW StrStrIA StrStrIW StrCmpIW

advapi32

RegEnumKeyExW RegOpenKeyExW GetTokenInformation OpenProcessToken RegQueryValueExW CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW RegGetValueW RegSetValueExW RegCreateKeyExW RegCloseKey

shell32

SHGetFolderPathW SHCreateDirectoryExW ShellExecuteW CommandLineToArgvW SHChangeNotify

ole32

CoUninitialize CoInitialize CoSetProxyBlanket CoCreateGuid CoInitializeEx CoInitializeSecurity CoCreateInstance

comctl32

InitCommonControlsEx

user32

PostMessageW DefWindowProcW MessageBoxW

kernel32

GetUserDefaultLCID EnumSystemLocalesW FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW FormatMessageW GetFileType WriteFile GetStdHandle GetModuleHandleExW ExitProcess WriteConsoleW LCMapStringW GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx DecodePointer RaiseException GetLastError HeapDestroy HeapAlloc CreateEventW HeapFree GetLocaleInfoW GetProcessHeap InitializeCriticalSectionEx DeleteCriticalSection FindResourceExW LoadResource LockResource SizeofResource FindResourceW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFullPathNameW RemoveDirectoryW SetFileAttributesW GetTempPathW CloseHandle GetCurrentProcessId TerminateProcess OpenProcess GetLocalTime GetTickCount GetModuleFileNameW QueryFullProcessImageNameW CopyFileW MoveFileExW WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW CreateMutexW SetCurrentDirectoryW GetCurrentDirectoryW GetSystemDirectoryW LocalFree TlsFree TlsSetValue TlsGetValue HeapSize IsValidLocale TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer SetLastError SwitchToThread SetEvent ResetEvent HeapReAlloc WaitForSingleObjectEx GetStringTypeW SetStdHandle FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection Sleep GetSystemWindowsDirectoryW GetVersionExW FreeLibrary FreeResource GetProcAddress LoadLibraryExW MultiByteToWideChar CreateFileW DeviceIoControl lstrcmpA RtlUnwind GetEnvironmentStringsW

oleaut32

VariantClear VariantInit SysAllocString SysStringLen SysFreeString

iphlpapi

GetAdaptersInfo

Sharing

General

Malware Config

Signatures

File Explorer

464c69e3a3e07234b2706a36c9a1dba0e5ec5ccca458750d8643ec6c493f82fd

winhttp

version

shlwapi

advapi32

shell32

ole32

comctl32

user32

kernel32

oleaut32

iphlpapi

generic