5fca03c818161f8219eff9d1b0c86086b78df0151896c8c28bb55f3bfcea23a1

Sharing

Copy URL Twitter E-mail

General

Target
5fca03c818161f8219eff9d1b0c86086b78df0151896c8c28bb55f3bfcea23a1
Size 407KB
Sample260805-tzx77awxht
SHA256 5fca03c818161f8219eff9d1b0c86086b78df0151896c8c28bb55f3bfcea23a1
MD5 7510dc7c53ef484441e5ec19f3f908cb
SHA1 447afed9da102fc6f86539ab781745966cdeb784
SHA512 15aec9e21e54c3d98117d0f1f0bc1c188cb64c654a08cf74ee5359bf7a52d6eccfee72e9f861db848134101c1035e9d12e73eaf566ad26efe53bd51eee4e0e73
SSDEEP 12288:k3J72s0Jqsmkzw/LX50GW8B0OaMQc5fAzY:O72s0JqsTzw/LXXW8B0OaPA5
TLSH
T12494C82222527BDBD7E4D0718AD8A464C8CA6FE4C7F72DED7C487D3D50F84908B99A24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fca03c818161f8219eff9d1b0c86086b78df0151896c8c28bb55f3bfcea23a1

File Explorer

5fca03c818161f8219eff9d1b0c86086b78df0151896c8c28bb55f3bfcea23a1

.exe 407KB

5fca03c818161f8219eff9d1b0c86086b78df0151896c8c28bb55f3bfcea23a1

IMPHASH 4014ad44d45ff6e8e52d5946b33b7000
SHA256 5fca03c818161f8219eff9d1b0c86086b78df0151896c8c28bb55f3bfcea23a1
MD5 7510dc7c53ef484441e5ec19f3f908cb
SHA1 447afed9da102fc6f86539ab781745966cdeb784
SHA512 15aec9e21e54c3d98117d0f1f0bc1c188cb64c654a08cf74ee5359bf7a52d6eccfee72e9f861db848134101c1035e9d12e73eaf566ad26efe53bd51eee4e0e73
SSDEEP 12288:k3J72s0Jqsmkzw/LX50GW8B0OaMQc5fAzY:O72s0JqsTzw/LXXW8B0OaPA5
TLSH
T12494C82222527BDBD7E4D0718AD8A464C8CA6FE4C7F72DED7C487D3D50F84908B99A24
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User\build\WVDWS\WVDWS.pdb

user32

EnumWindows GetParent SetWindowLongPtrW GetWindowLongPtrW GetClassNameW GetWindowThreadProcessId LoadBitmapW GetWindowLongW MapWindowPoints MessageBoxW GetWindowRect GetClientRect GetWindowTextW SetWindowTextW RedrawWindow LoadIconW wsprintfW BeginPaint GetSystemMetrics EnableWindow KillTimer SetTimer IsWindowVisible SetWindowPos DestroyWindow CreateWindowExW RegisterClassW PostQuitMessage DefWindowProcW SendMessageW DispatchMessageW TranslateMessage GetMessageW EndPaint

gdi32

DeleteObject CreateFontW CreateCompatibleDC GetStockObject SelectObject SetBkMode StretchBlt SetStretchBltMode SetTextColor GetObjectW DeleteDC

shell32

ShellExecuteW

kernel32

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetUserDefaultUILanguage WritePrivateProfileStringW QueryFullProcessImageNameW GetModuleHandleW SetUnhandledExceptionFilter GetTickCount64 OpenProcess SetLastError GetLastError CloseHandle GetFileAttributesW UnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetPrivateProfileIntW InitializeSListHead IsDebuggerPresent GetModuleFileNameW GetStartupInfoW

vcruntime140

wcsrchr wcsstr memset __C_specific_handler __std_type_info_destroy_list __current_exception __current_exception_context memcpy

api-ms-win-crt-string-l1-1-0

wcscat_s

api-ms-win-crt-runtime-l1-1-0

_initterm_e exit _get_narrow_winmain_command_line _configure_narrow_argv _cexit _c_exit _exit _initterm _set_app_type _initialize_narrow_environment _register_thread_local_exe_atexit_callback _seh_filter_dll _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _crt_at_quick_exit terminate _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

5fca03c818161f8219eff9d1b0c86086b78df0151896c8c28bb55f3bfcea23a1

user32

gdi32

shell32

kernel32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic