96464b373300c0342b4bf953be54f7406fe825a25952adb058b64ae2eb62e844

Sharing

Copy URL Twitter E-mail

General

Target
96464b373300c0342b4bf953be54f7406fe825a25952adb058b64ae2eb62e844
Size 276KB
Sample260804-rwkrkscc92
SHA256 96464b373300c0342b4bf953be54f7406fe825a25952adb058b64ae2eb62e844
MD5 928a94dee38d66a0f64334f3f98d34bc
SHA1 a58d841c9c6380de8aa939259a7373b2825975af
SHA512 95d3d10cddf83a6f34392f5ef5d428a3d54556678e34b5120b93cd8da3a107a6b524e32f9319e934f63ec7df95f25b67af4c7f6b7b12dcdeaf56bbe6aba9a292
SSDEEP 3072:EwDK5a/dr3ALJ6fWgf61ze7nhZoeIM5sSDk8/xCfVgwqD+D3yNTCrO:EwD+a/BU6Ok6BUnhueIMfDaDY5
TLSH
T1BA54D31366CD7CE2C036463037BB87E1D72DED600BA1C98F96C406A9997C593B532BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96464b373300c0342b4bf953be54f7406fe825a25952adb058b64ae2eb62e844

File Explorer

96464b373300c0342b4bf953be54f7406fe825a25952adb058b64ae2eb62e844

.exe 276KB

96464b373300c0342b4bf953be54f7406fe825a25952adb058b64ae2eb62e844

IMPHASH 8a001a60edc492f3384a4556acb713ff
SHA256 96464b373300c0342b4bf953be54f7406fe825a25952adb058b64ae2eb62e844
MD5 928a94dee38d66a0f64334f3f98d34bc
SHA1 a58d841c9c6380de8aa939259a7373b2825975af
SHA512 95d3d10cddf83a6f34392f5ef5d428a3d54556678e34b5120b93cd8da3a107a6b524e32f9319e934f63ec7df95f25b67af4c7f6b7b12dcdeaf56bbe6aba9a292
SSDEEP 3072:EwDK5a/dr3ALJ6fWgf61ze7nhZoeIM5sSDk8/xCfVgwqD+D3yNTCrO:EwD+a/BU6Ok6BUnhueIMfDaDY5
TLSH
T1BA54D31366CD7CE2C036463037BB87E1D72DED600BA1C98F96C406A9997C593B532BE9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

36686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\001_WorkCode\WD\WD_Main\Release\Uninst.pdb

winhttp

WinHttpCrackUrl WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpSetTimeouts

shlwapi

PathIsDirectoryW SHDeleteKeyW PathFindFileNameW PathFileExistsW PathAppendW PathRemoveFileSpecW PathIsRootW

advapi32

RegCloseKey RegSetValueExW RegGetValueW RegCreateKeyExW

shell32

SHGetFolderPathW SHChangeNotify CommandLineToArgvW ShellExecuteW SHCreateDirectoryExW

ole32

CoInitialize CoUninitialize

comctl32

InitCommonControlsEx

user32

MessageBoxW PostMessageW DefWindowProcW

kernel32

FreeEnvironmentStringsW GetEnvironmentStringsW MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP SetStdHandle GetStringTypeW SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode IsValidCodePage FindFirstFileExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CreateFileW GetModuleFileNameW GetFileType WriteFile GetStdHandle DecodePointer RaiseException GetLastError HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSectionEx DeleteCriticalSection FindResourceExW LoadResource LockResource SizeofResource FindResourceW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFullPathNameW RemoveDirectoryW SetFileAttributesW GetTempPathW CloseHandle GetCurrentProcessId TerminateProcess OpenProcess GetLocalTime GetTickCount WriteConsoleW QueryFullProcessImageNameW CopyFileW MoveFileExW WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW CreateMutexW SetCurrentDirectoryW GetCurrentDirectoryW GetSystemDirectoryW LocalFree GetModuleHandleExW ExitProcess LoadLibraryExW IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcess QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress

Sharing

General

Malware Config

Signatures

File Explorer

96464b373300c0342b4bf953be54f7406fe825a25952adb058b64ae2eb62e844

winhttp

shlwapi

advapi32

shell32

ole32

comctl32

user32

kernel32

generic