7bf05c946fec0f2fe8aa68cf986f1532145f6bd40befb1d8fc158c838f5b1cde

Sharing

Copy URL Twitter E-mail

General

Target
7bf05c946fec0f2fe8aa68cf986f1532145f6bd40befb1d8fc158c838f5b1cde
Size 274KB
Sample260804-rnpessyzet
SHA256 7bf05c946fec0f2fe8aa68cf986f1532145f6bd40befb1d8fc158c838f5b1cde
MD5 12993ce63c0692b854d3454718f7f6b6
SHA1 ef5c9905dadcfbfaf1b06a5d284d5ce1bf00d997
SHA512 9f74074e774dc0bc8975d3aaf69ef7e066ddbf4c8be0ebb070bb661ee0ad3a5b3400a28145853c5f838bd3bae354d05b1d1ccb4c81b1f3715e8bffe709de5b70
SSDEEP 6144:+WUv6zAMlSPwKNlJu3Vd9gR4WHqAv5+8Et:+WUslSPwKD0Fd9Yth
TLSH
T1BE54D413A6DC7CE2C036463033BB87E5D72EED604B91C58F96C406A99A3C5937532BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bf05c946fec0f2fe8aa68cf986f1532145f6bd40befb1d8fc158c838f5b1cde

File Explorer

7bf05c946fec0f2fe8aa68cf986f1532145f6bd40befb1d8fc158c838f5b1cde

.exe 274KB

7bf05c946fec0f2fe8aa68cf986f1532145f6bd40befb1d8fc158c838f5b1cde

IMPHASH 8a001a60edc492f3384a4556acb713ff
SHA256 7bf05c946fec0f2fe8aa68cf986f1532145f6bd40befb1d8fc158c838f5b1cde
MD5 12993ce63c0692b854d3454718f7f6b6
SHA1 ef5c9905dadcfbfaf1b06a5d284d5ce1bf00d997
SHA512 9f74074e774dc0bc8975d3aaf69ef7e066ddbf4c8be0ebb070bb661ee0ad3a5b3400a28145853c5f838bd3bae354d05b1d1ccb4c81b1f3715e8bffe709de5b70
SSDEEP 6144:+WUv6zAMlSPwKNlJu3Vd9gR4WHqAv5+8Et:+WUslSPwKD0Fd9Yth
TLSH
T1BE54D413A6DC7CE2C036463033BB87E5D72EED604B91C58F96C406A99A3C5937532BE9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

35657

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\001_WorkCode\WD\WD_Main\Release\Uninst.pdb

winhttp

WinHttpCrackUrl WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpSetTimeouts

shlwapi

PathIsDirectoryW SHDeleteKeyW PathFindFileNameW PathFileExistsW PathAppendW PathRemoveFileSpecW PathIsRootW

advapi32

RegCloseKey RegSetValueExW RegGetValueW RegCreateKeyExW

shell32

SHGetFolderPathW SHChangeNotify CommandLineToArgvW ShellExecuteW SHCreateDirectoryExW

ole32

CoInitialize CoUninitialize

comctl32

InitCommonControlsEx

user32

MessageBoxW PostMessageW DefWindowProcW

kernel32

FreeEnvironmentStringsW GetEnvironmentStringsW MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP SetStdHandle GetStringTypeW SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode IsValidCodePage FindFirstFileExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CreateFileW GetModuleFileNameW GetFileType WriteFile GetStdHandle DecodePointer RaiseException GetLastError HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSectionEx DeleteCriticalSection FindResourceExW LoadResource LockResource SizeofResource FindResourceW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFullPathNameW RemoveDirectoryW SetFileAttributesW GetTempPathW CloseHandle GetCurrentProcessId TerminateProcess OpenProcess GetLocalTime GetTickCount WriteConsoleW QueryFullProcessImageNameW CopyFileW MoveFileExW WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW CreateMutexW SetCurrentDirectoryW GetCurrentDirectoryW GetSystemDirectoryW LocalFree GetModuleHandleExW ExitProcess LoadLibraryExW IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcess QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress

Sharing

General

Malware Config

Signatures

File Explorer

7bf05c946fec0f2fe8aa68cf986f1532145f6bd40befb1d8fc158c838f5b1cde

winhttp

shlwapi

advapi32

shell32

ole32

comctl32

user32

kernel32

generic