e1d4750dd51740cc9a62b2f68c5025923e2407159389e8045deb76e97b5cfb63

Sharing

Copy URL Twitter E-mail

General

Target
e1d4750dd51740cc9a62b2f68c5025923e2407159389e8045deb76e97b5cfb63
Size 392KB
Sample260804-ltx18scl7w
SHA256 e1d4750dd51740cc9a62b2f68c5025923e2407159389e8045deb76e97b5cfb63
MD5 865483691a97b781e801648bd0185ec3
SHA1 91c4f12ceb1281232721b1c38af1ba502a19064f
SHA512 f48330f2e9518ca5e7ac13e0e102915d773a7c90639f464c3924ea51e0192975e1f640b907e11f87a10282b1c654c8e132a705d93fa75a6fa55affa7f9924fd9
SSDEEP 6144:PFBWlhNTiT0xKUORVR7nTl8Ht2P3NrDmgm4E5fKu7b:PFETir7nTmNjsEhb
TLSH
T1A484D4136ADCBCE2C5710231273B8BE6D72DED600B91C5CF92C41AA5D97C583B631BA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1d4750dd51740cc9a62b2f68c5025923e2407159389e8045deb76e97b5cfb63

File Explorer

e1d4750dd51740cc9a62b2f68c5025923e2407159389e8045deb76e97b5cfb63

.exe 392KB

e1d4750dd51740cc9a62b2f68c5025923e2407159389e8045deb76e97b5cfb63

IMPHASH fbdb87b9e60a4702165ee3f752cff71c
SHA256 e1d4750dd51740cc9a62b2f68c5025923e2407159389e8045deb76e97b5cfb63
MD5 865483691a97b781e801648bd0185ec3
SHA1 91c4f12ceb1281232721b1c38af1ba502a19064f
SHA512 f48330f2e9518ca5e7ac13e0e102915d773a7c90639f464c3924ea51e0192975e1f640b907e11f87a10282b1c654c8e132a705d93fa75a6fa55affa7f9924fd9
SSDEEP 6144:PFBWlhNTiT0xKUORVR7nTl8Ht2P3NrDmgm4E5fKu7b:PFETir7nTmNjsEhb
TLSH
T1A484D4136ADCBCE2C5710231273B8BE6D72DED600B91C5CF92C41AA5D97C583B631BA9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

37971

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\001_WorkCode\WD\WD_Main\Release\Uninst.pdb

winhttp

WinHttpCloseHandle WinHttpReceiveResponse WinHttpCrackUrl WinHttpOpenRequest WinHttpOpen WinHttpConnect WinHttpSetTimeouts WinHttpSendRequest

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

shlwapi

PathIsDirectoryW PathFindFileNameW PathFileExistsW PathAppendW SHDeleteKeyW PathIsRootW PathRemoveFileSpecW StrCmpNIW StrTrimA PathCombineW StrStrIA StrStrIW StrCmpIW

advapi32

RegEnumKeyExW RegOpenKeyExW GetTokenInformation OpenProcessToken RegQueryValueExW CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW RegGetValueW RegSetValueExW RegCreateKeyExW RegCloseKey

shell32

SHGetFolderPathW SHCreateDirectoryExW ShellExecuteW CommandLineToArgvW SHChangeNotify

ole32

CoUninitialize CoInitialize CoSetProxyBlanket CoCreateGuid CoInitializeEx CoInitializeSecurity CoCreateInstance

comctl32

InitCommonControlsEx

user32

PostMessageW DefWindowProcW MessageBoxW

kernel32

GetUserDefaultLCID EnumSystemLocalesW FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW SetEvent GetFileType WriteFile GetStdHandle GetModuleHandleExW ExitProcess WriteConsoleW LCMapStringW GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx DecodePointer RaiseException GetLastError HeapDestroy HeapAlloc ResetEvent HeapFree GetLocaleInfoW GetProcessHeap InitializeCriticalSectionEx DeleteCriticalSection FindResourceExW LoadResource LockResource SizeofResource FindResourceW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFullPathNameW RemoveDirectoryW SetFileAttributesW GetTempPathW CloseHandle GetCurrentProcessId TerminateProcess OpenProcess GetLocalTime GetTickCount GetModuleFileNameW QueryFullProcessImageNameW CopyFileW MoveFileExW WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW CreateMutexW SetCurrentDirectoryW GetCurrentDirectoryW GetSystemDirectoryW LocalFree TlsFree TlsSetValue TlsGetValue HeapSize IsValidLocale TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer SetLastError WaitForSingleObjectEx CreateEventW FormatMessageW HeapReAlloc SwitchToThread GetStringTypeW SetStdHandle FreeEnvironmentStringsW IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcess QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead InitializeCriticalSection Sleep GetSystemWindowsDirectoryW GetVersionExW FreeLibrary FreeResource GetProcAddress LoadLibraryExW MultiByteToWideChar CreateFileW DeviceIoControl lstrcmpA RtlUnwind GetEnvironmentStringsW

oleaut32

VariantClear VariantInit SysAllocString SysStringLen SysFreeString

iphlpapi

GetAdaptersInfo

Sharing

General

Malware Config

Signatures

File Explorer

e1d4750dd51740cc9a62b2f68c5025923e2407159389e8045deb76e97b5cfb63

winhttp

version

shlwapi

advapi32

shell32

ole32

comctl32

user32

kernel32

oleaut32

iphlpapi

generic