e607a4b4ff841ad3ce9ea245fc323cf894e047419a17cf2e4be45c0d91b18c2f

Sharing

Copy URL Twitter E-mail

General

Target
e607a4b4ff841ad3ce9ea245fc323cf894e047419a17cf2e4be45c0d91b18c2f
Size 344KB
Sample260805-r2ccdsbf96
SHA256 e607a4b4ff841ad3ce9ea245fc323cf894e047419a17cf2e4be45c0d91b18c2f
MD5 39574e86ff8c2996a5ab687ccc9b1ae8
SHA1 228cee0e6b97dc82b3e4c72af9d4363ce40d8413
SHA512 b9d30e67f06da44aaea7dab9cb889ef2c0ff3784092d38bf592dc06639b0673143f67c4a6aaad5a888f75141e5ebd9189c63c324be19738d4224d64a50ff54bd
SSDEEP 6144:YcAu0dkyuS3FkPHr975+jNDF07gk46uLAOTbzyaR:Iu0dkWar975+xaDuLZzyaR
TLSH
T1B4746C01A641E03AF9B305714FFD06AE453CBD200B1555EBE3C82EAE9EB56E2B931717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e607a4b4ff841ad3ce9ea245fc323cf894e047419a17cf2e4be45c0d91b18c2f

File Explorer

e607a4b4ff841ad3ce9ea245fc323cf894e047419a17cf2e4be45c0d91b18c2f

.exe 344KB

e607a4b4ff841ad3ce9ea245fc323cf894e047419a17cf2e4be45c0d91b18c2f

IMPHASH a158af869d1ee4143dc50b76d4d75bdc
SHA256 e607a4b4ff841ad3ce9ea245fc323cf894e047419a17cf2e4be45c0d91b18c2f
MD5 39574e86ff8c2996a5ab687ccc9b1ae8
SHA1 228cee0e6b97dc82b3e4c72af9d4363ce40d8413
SHA512 b9d30e67f06da44aaea7dab9cb889ef2c0ff3784092d38bf592dc06639b0673143f67c4a6aaad5a888f75141e5ebd9189c63c324be19738d4224d64a50ff54bd
SSDEEP 6144:YcAu0dkyuS3FkPHr975+jNDF07gk46uLAOTbzyaR:Iu0dkWar975+xaDuLZzyaR
TLSH
T1B4746C01A641E03AF9B305714FFD06AE453CBD200B1555EBE3C82EAE9EB56E2B931717
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

133936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

iphlpapi

GetAdaptersInfo

shlwapi

PathFileExistsW

kernel32

MultiByteToWideChar WideCharToMultiByte GetFileAttributesW GetLocalTime GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW GetProcessHeap GetModuleHandleW GetProcAddress DeleteFileW RemoveDirectoryW GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime LCMapStringW GetLocaleInfoW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess FindFirstFileW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead CopyFileW SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW EnumSystemLocalesW FindClose GetUserDefaultLCID IsValidLocale GetFileType GetACP WriteFile GetStdHandle GetModuleFileNameW GetModuleHandleExW ExitProcess HeapReAlloc HeapFree HeapAlloc LoadLibraryExW FreeLibrary GetLastError RtlUnwind RaiseException GetCurrentDirectoryW FlushFileBuffers WriteConsoleW FindNextFileW TerminateProcess CreateFileW

user32

LoadIconW LoadCursorW GetClassNameW SetWindowLongW GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC DestroyIcon SetForegroundWindow UpdateWindow TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics EnableWindow GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW CallWindowProcW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent MessageBoxW DispatchMessageW TranslateMessage GetMessageW GetDC DrawTextW

gdi32

EnumFontFamiliesExW GetStockObject SelectObject CreateFontW SetBkColor SetBkMode SetTextColor DeleteObject CreateSolidBrush

Name

.text

Size

229KB

Virtual Size

228KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

77KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e607a4b4ff841ad3ce9ea245fc323cf894e047419a17cf2e4be45c0d91b18c2f

shell32

comctl32

iphlpapi

shlwapi

kernel32

user32

gdi32

generic