f347f03046788797a9a4eb406509ffa7483278a2d2ba0cb6698d0499092a4656

Sharing

Copy URL Twitter E-mail

General

Target
f347f03046788797a9a4eb406509ffa7483278a2d2ba0cb6698d0499092a4656
Size 307KB
Sample260806-27a2mack2s
SHA256 f347f03046788797a9a4eb406509ffa7483278a2d2ba0cb6698d0499092a4656
MD5 86dd87cac8c5f7e844186d6bffd00baa
SHA1 c0e973458a0542990bec49369c007be19b57701f
SHA512 888119523993025bc39a232b90783a1329a8da857ce80a040c343aa4558f2c8e9aa2cbe88ed224830cf7af132514ec78b0158cf4bdb7a9008d1d7a7910df6a20
SSDEEP 6144:MQjkh4dR+ULRLSOyYTu3bOQbbbdjtG/XxCcokdF8UvmyomKp:sh4fFLRLSOyYTvPkm+
TLSH
T1DC640701EB9A8756DC710A38DEEDD7EC02B2E51CE9A29F0FE61C054B7563540CE96B0E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f347f03046788797a9a4eb406509ffa7483278a2d2ba0cb6698d0499092a4656

File Explorer

f347f03046788797a9a4eb406509ffa7483278a2d2ba0cb6698d0499092a4656

.exe 307KB

f347f03046788797a9a4eb406509ffa7483278a2d2ba0cb6698d0499092a4656

IMPHASH c237e8efdde9e503b5f2cf120ace438f
SHA256 f347f03046788797a9a4eb406509ffa7483278a2d2ba0cb6698d0499092a4656
MD5 86dd87cac8c5f7e844186d6bffd00baa
SHA1 c0e973458a0542990bec49369c007be19b57701f
SHA512 888119523993025bc39a232b90783a1329a8da857ce80a040c343aa4558f2c8e9aa2cbe88ed224830cf7af132514ec78b0158cf4bdb7a9008d1d7a7910df6a20
SSDEEP 6144:MQjkh4dR+ULRLSOyYTu3bOQbbbdjtG/XxCcokdF8UvmyomKp:sh4fFLRLSOyYTvPkm+
TLSH
T1DC640701EB9A8756DC710A38DEEDD7EC02B2E51CE9A29F0FE61C054B7563540CE96B0E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

82569

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ntdll

vDbgPrintExWithPrefix

comctl32

CreatePropertySheetPageA InitCommonControls PropertySheetA

comdlg32

GetOpenFileNameA PrintDlgW

kernel32

CloseHandle CreateFileA DeleteCriticalSection EnterCriticalSection GetCurrentDirectoryA GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentVariableA GetFileAttributesA GetLastError GetModuleHandleA GetProcAddress GetProcessHeap GetStartupInfoA GetSystemTimeAsFileTime GetTickCount HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryW LocalAlloc LocalFree LocalReAlloc MulDiv OpenFile QueryPerformanceCounter SearchPathA SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery _hread _lclose lstrcmpiA lstrcpynA

msvcrt

__dllonexit __getmainargs __initenv __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _assert _cexit _errno _fpreset _initterm _iob _lock _onexit _snprintf _stricmp _unlock _vsnprintf abort bsearch calloc exit fprintf free fwrite malloc memcmp memmove realloc signal sprintf strcat strchr strcmp strcpy strcspn strncmp strrchr vfprintf strtol

shell32

ShellAboutW ShellExecuteA

gdi32

BitBlt CloseEnhMetaFile CreateBitmap CreateCompatibleDC CreateDIBitmap CreateEnhMetaFileW CreateFontIndirectW DeleteDC DeleteEnhMetaFile DeleteObject GetEnhMetaFileBits GetTextExtentPointA GetTextMetricsW SelectObject SetBkColor SetTextColor TextOutA

user32

AdjustWindowRect BeginPaint CallWindowProcA CheckMenuItem ClientToScreen CreateIconFromResourceEx CreateWindowExA DefWindowProcA DestroyIcon DestroyMenu DestroyWindow DispatchMessageW EnableWindow EndPaint GetClientRect GetDC GetDlgItem GetMenu GetMessagePos GetMessageW GetParent GetSubMenu GetSystemMetrics GetWindow GetWindowLongA GetWindowLongW GetWindowRect InvalidateRect LoadAcceleratorsW LoadCursorW LoadIconW LoadImageW LoadMenuW LoadStringA LoadStringW MessageBoxA MessageBoxW MoveWindow PostMessageW PostQuitMessage RedrawWindow RegisterClassExA ReleaseDC ScreenToClient SendDlgItemMessageW SendMessageA SendMessageW SetActiveWindow SetCursor SetFocus SetWindowLongA SetWindowLongW SetWindowPos SetWindowTextA ShowWindow SystemParametersInfoW TrackPopupMenu TranslateAcceleratorW TranslateMessage wsprintfA

Name

.text

Size

81KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

75KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

128KB

Virtual Size

127KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

f347f03046788797a9a4eb406509ffa7483278a2d2ba0cb6698d0499092a4656

ntdll

comctl32

comdlg32

kernel32

msvcrt

shell32

gdi32

user32

generic