5a4ad05c934d79079ade564faa633f084239759626691085623373e5fa291f53

Sharing

Copy URL Twitter E-mail

General

Target
5a4ad05c934d79079ade564faa633f084239759626691085623373e5fa291f53
Size 392KB
Sample260804-ph1vjaba27
SHA256 5a4ad05c934d79079ade564faa633f084239759626691085623373e5fa291f53
MD5 828e39ab02d13ba5489ecb669b5344bc
SHA1 db5d370a5d5fe7232b8dbd51e555c34b83589cae
SHA512 34ff157fe76a0870fb1f87eaede2c65329653fc0aefa42d11dcf8440cd1f9e682b81e25b4e88dc2c612833300d8e704b54079dbfc7769c7b605ee3507fbc18b9
SSDEEP 6144:fNqXTd1PbUVdI2g+o+4SGqy/7QJ5Fm4z/ZMrR73l34No:9Vd2qy/k1cFyN
TLSH
T1E084C3136A9CBCE2C5710231273B8BE6D72DED600B91C5CF92C45A65D97C1C3B631BAA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a4ad05c934d79079ade564faa633f084239759626691085623373e5fa291f53

File Explorer

5a4ad05c934d79079ade564faa633f084239759626691085623373e5fa291f53

.exe 392KB

5a4ad05c934d79079ade564faa633f084239759626691085623373e5fa291f53

IMPHASH 74375d42a46178a5d5ac13e9cc7d8811
SHA256 5a4ad05c934d79079ade564faa633f084239759626691085623373e5fa291f53
MD5 828e39ab02d13ba5489ecb669b5344bc
SHA1 db5d370a5d5fe7232b8dbd51e555c34b83589cae
SHA512 34ff157fe76a0870fb1f87eaede2c65329653fc0aefa42d11dcf8440cd1f9e682b81e25b4e88dc2c612833300d8e704b54079dbfc7769c7b605ee3507fbc18b9
SSDEEP 6144:fNqXTd1PbUVdI2g+o+4SGqy/7QJ5Fm4z/ZMrR73l34No:9Vd2qy/k1cFyN
TLSH
T1E084C3136A9CBCE2C5710231273B8BE6D72DED600B91C5CF92C45A65D97C1C3B631BAA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

38306

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\001_WorkCode\WD\WD_Main\Release\Uninst.pdb

winhttp

WinHttpOpenRequest WinHttpSendRequest WinHttpCloseHandle WinHttpSetTimeouts WinHttpConnect WinHttpCrackUrl WinHttpOpen WinHttpSetOption WinHttpReceiveResponse WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

shlwapi

PathFindFileNameW PathFileExistsW PathAppendW PathIsDirectoryW PathIsRootW PathRemoveFileSpecW StrCmpNIW StrTrimA PathCombineW StrStrIA StrStrIW SHDeleteKeyW StrCmpIW

advapi32

RegEnumKeyExW RegOpenKeyExW GetTokenInformation OpenProcessToken RegQueryValueExW CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW RegGetValueW RegSetValueExW RegCreateKeyExW RegCloseKey

shell32

SHGetFolderPathW SHCreateDirectoryExW ShellExecuteW CommandLineToArgvW SHChangeNotify

ole32

CoUninitialize CoInitialize CoSetProxyBlanket CoCreateGuid CoInitializeEx CoInitializeSecurity CoCreateInstance

comctl32

InitCommonControlsEx

user32

DefWindowProcW MessageBoxW PostMessageW

kernel32

GetFileType WriteFile WriteConsoleW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FindFirstFileExW IsValidCodePage GetACP GetOEMCP SetEvent GetStdHandle GetModuleHandleExW ExitProcess TlsFree TlsSetValue TlsGetValue GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetStringTypeW SetStdHandle DecodePointer RaiseException GetLastError HeapDestroy ResetEvent HeapReAlloc LCMapStringW HeapSize GetProcessHeap InitializeCriticalSectionEx DeleteCriticalSection FindResourceExW LoadResource LockResource SizeofResource FindResourceW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFullPathNameW RemoveDirectoryW SetFileAttributesW GetTempPathW CloseHandle GetCurrentProcessId TerminateProcess OpenProcess GetLocalTime GetTickCount GetModuleFileNameW QueryFullProcessImageNameW CopyFileW MoveFileExW WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW CreateMutexW GlobalFree SetCurrentDirectoryW GetCurrentDirectoryW GetSystemDirectoryW LocalFree TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer HeapFree SetLastError RtlUnwind lstrcmpA DeviceIoControl WaitForSingleObjectEx CreateEventW FormatMessageW HeapAlloc SwitchToThread FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcess QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead InitializeCriticalSection Sleep GetSystemWindowsDirectoryW GetVersionExW FreeLibrary FreeResource GetProcAddress LoadLibraryExW MultiByteToWideChar CreateFileW GetCPInfo

oleaut32

VariantInit SysStringLen SysAllocString VariantClear SysFreeString

iphlpapi

GetAdaptersInfo

Sharing

General

Malware Config

Signatures

File Explorer

5a4ad05c934d79079ade564faa633f084239759626691085623373e5fa291f53

winhttp

version

shlwapi

advapi32

shell32

ole32

comctl32

user32

kernel32

oleaut32

iphlpapi

generic