eb121e48627f51675212d841c6eda7482813d3d1d5c297938e59bee262397a9c

Sharing

Copy URL Twitter E-mail

General

Target
eb121e48627f51675212d841c6eda7482813d3d1d5c297938e59bee262397a9c
Size 272KB
Sample260804-sse8cs1tht
SHA256 eb121e48627f51675212d841c6eda7482813d3d1d5c297938e59bee262397a9c
MD5 be571abb7f96c12462ba67245873f3c7
SHA1 615708a4061b58afba38604326839019529bc369
SHA512 273b95e90f49ce4a94842d202ca085186e5c0cd22adbcd0de1fad61e532e40fe58571da9a21c893c1683b6177a1153cf7bd1a9c76317efa66b69026cd4ab4ad4
SSDEEP 3072:u7ic+WUd/06CkFl/JxBzTpFUCIezQExDxix5Vi/YE+fITgrpzyfsCrn:u7ifDd/IkFFVnDU/QQERxixb7ZmV
TLSH
T1AA44D413A6DC7CE2C036563033BB87E5D72EED604B91C58F96C406A9DA3C5837522BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb121e48627f51675212d841c6eda7482813d3d1d5c297938e59bee262397a9c

File Explorer

eb121e48627f51675212d841c6eda7482813d3d1d5c297938e59bee262397a9c

.exe 272KB

eb121e48627f51675212d841c6eda7482813d3d1d5c297938e59bee262397a9c

IMPHASH 1175acdfbf3ea59c05f32d47877c9bc0
SHA256 eb121e48627f51675212d841c6eda7482813d3d1d5c297938e59bee262397a9c
MD5 be571abb7f96c12462ba67245873f3c7
SHA1 615708a4061b58afba38604326839019529bc369
SHA512 273b95e90f49ce4a94842d202ca085186e5c0cd22adbcd0de1fad61e532e40fe58571da9a21c893c1683b6177a1153cf7bd1a9c76317efa66b69026cd4ab4ad4
SSDEEP 3072:u7ic+WUd/06CkFl/JxBzTpFUCIezQExDxix5Vi/YE+fITgrpzyfsCrn:u7ifDd/IkFFVnDU/QQERxixb7ZmV
TLSH
T1AA44D413A6DC7CE2C036563033BB87E5D72EED604B91C58F96C406A9DA3C5837522BE9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33904

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\001_WorkCode\WD\WD_Main\Release\Uninst.pdb

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

shlwapi

PathIsDirectoryW SHDeleteKeyW PathFindFileNameW PathFileExistsW PathAppendW PathRemoveFileSpecW PathIsRootW

advapi32

RegCloseKey RegSetValueExW RegGetValueW CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW RegCreateKeyExW

shell32

SHGetFolderPathW SHChangeNotify CommandLineToArgvW ShellExecuteW SHCreateDirectoryExW

ole32

CoInitialize CoUninitialize

comctl32

InitCommonControlsEx

user32

MessageBoxW PostMessageW DefWindowProcW

kernel32

FreeEnvironmentStringsW GetEnvironmentStringsW MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP SetStdHandle GetStringTypeW SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode IsValidCodePage FindFirstFileExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CreateFileW GetModuleFileNameW GetFileType WriteFile GetStdHandle DecodePointer RaiseException GetLastError HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSectionEx DeleteCriticalSection FindResourceExW LoadResource LockResource SizeofResource FindResourceW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFullPathNameW RemoveDirectoryW SetFileAttributesW GetTempPathW CloseHandle GetCurrentProcessId TerminateProcess OpenProcess GetLocalTime GetTickCount WriteConsoleW QueryFullProcessImageNameW CopyFileW MoveFileExW WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW CreateMutexW SetCurrentDirectoryW GetCurrentDirectoryW GetSystemDirectoryW LocalFree GetModuleHandleExW ExitProcess LoadLibraryExW IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcess QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress

Sharing

General

Malware Config

Signatures

File Explorer

eb121e48627f51675212d841c6eda7482813d3d1d5c297938e59bee262397a9c

version

shlwapi

advapi32

shell32

ole32

comctl32

user32

kernel32

generic