155a47684c3cdbab02a65930470601d005383cf3528f9c636b1d38a28204c52a

Sharing

Copy URL Twitter E-mail

General

Target
155a47684c3cdbab02a65930470601d005383cf3528f9c636b1d38a28204c52a
Size 259KB
Sample260804-l8tmcshd47
SHA256 155a47684c3cdbab02a65930470601d005383cf3528f9c636b1d38a28204c52a
MD5 e15c5d2e192f42ebaa8b8e877a227427
SHA1 fe3a07535bb6061405016651d1aab0552497ecf1
SHA512 009441956ac2d4b4a7908ec1050069c343584a69ce3a9c6b477957b4e06a6fdc7ff69db10e0ea73490fc1f94739dfeb7b4d83729a4d25290bef729763f3bd49a
SSDEEP 3072:E7CzSXavLWgte8G7FEO9C4vhTuPFmf25lPWdyKzirNyKECrydf:E+zSXavLvw97OOs+hTeFu2zjO
TLSH
T1A444C21366DC7CE2C035563033BB97E0CB2EED644AA1C98F96C406A9C97C59375327EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
155a47684c3cdbab02a65930470601d005383cf3528f9c636b1d38a28204c52a

File Explorer

155a47684c3cdbab02a65930470601d005383cf3528f9c636b1d38a28204c52a

.exe 259KB

155a47684c3cdbab02a65930470601d005383cf3528f9c636b1d38a28204c52a

IMPHASH 8d1648b99813827ac978234480195517
SHA256 155a47684c3cdbab02a65930470601d005383cf3528f9c636b1d38a28204c52a
MD5 e15c5d2e192f42ebaa8b8e877a227427
SHA1 fe3a07535bb6061405016651d1aab0552497ecf1
SHA512 009441956ac2d4b4a7908ec1050069c343584a69ce3a9c6b477957b4e06a6fdc7ff69db10e0ea73490fc1f94739dfeb7b4d83729a4d25290bef729763f3bd49a
SSDEEP 3072:E7CzSXavLWgte8G7FEO9C4vhTuPFmf25lPWdyKzirNyKECrydf:E+zSXavLvw97OOs+hTeFu2zjO
TLSH
T1A444C21366DC7CE2C035563033BB97E0CB2EED644AA1C98F96C406A9C97C59375327EA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25612

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\001_WorkCode\WD\WD_Main\Release\Uninst.pdb

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

advapi32

RegGetValueW CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW

shell32

CommandLineToArgvW

ole32

CoInitialize CoUninitialize

comctl32

InitCommonControlsEx

user32

MessageBoxW DefWindowProcW

kernel32

FreeEnvironmentStringsW GetEnvironmentStringsW MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP SetStdHandle GetStringTypeW SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode IsValidCodePage FindFirstFileExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CreateFileW GetFileType WriteFile GetStdHandle DecodePointer RaiseException GetLastError HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSectionEx DeleteCriticalSection FindResourceExW LoadResource LockResource SizeofResource FindResourceW FindClose FindNextFileW CloseHandle GetCurrentProcessId TerminateProcess WriteConsoleW GetModuleFileNameW WideCharToMultiByte CreateMutexW SetCurrentDirectoryW GetCurrentDirectoryW GetSystemDirectoryW LocalFree GetModuleHandleExW IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcess QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess

Sharing

General

Malware Config

Signatures

File Explorer

155a47684c3cdbab02a65930470601d005383cf3528f9c636b1d38a28204c52a

version

advapi32

shell32

ole32

comctl32

user32

kernel32

generic