26e8b9f484595df4dcff9814572c6352b49f26a060c3eb88384e55f268c19300

Sharing

Copy URL Twitter E-mail

General

Target
26e8b9f484595df4dcff9814572c6352b49f26a060c3eb88384e55f268c19300
Size 123KB
Sample260806-3ethyashph
SHA256 26e8b9f484595df4dcff9814572c6352b49f26a060c3eb88384e55f268c19300
MD5 aa9994e3220997d7865b6412cd3e244a
SHA1 534d88a02a29a0e37865c9cb83432cb29051459c
SHA512 463a0fb7c3387c24c0c54dc725c3a41a068019d400efd4221f4024098496024fd569e3d70a52b4646cd4358ce11d91aaf188f41fd0086928f2007f1dc8283ece
SSDEEP 3072:O7edtTo1LTZtDh/vVy5qy78qR9dvHOi+:OYt0pDh/v0jdvHO
TLSH
T156C3D610EFC6E826FDB126B458F7C6B80279FC909A01CB4BA3C55D9F7D60E2158E2752
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26e8b9f484595df4dcff9814572c6352b49f26a060c3eb88384e55f268c19300

File Explorer

26e8b9f484595df4dcff9814572c6352b49f26a060c3eb88384e55f268c19300

.exe 123KB

26e8b9f484595df4dcff9814572c6352b49f26a060c3eb88384e55f268c19300

IMPHASH 2bbd078b5315b80dc099917628dc4802
SHA256 26e8b9f484595df4dcff9814572c6352b49f26a060c3eb88384e55f268c19300
MD5 aa9994e3220997d7865b6412cd3e244a
SHA1 534d88a02a29a0e37865c9cb83432cb29051459c
SHA512 463a0fb7c3387c24c0c54dc725c3a41a068019d400efd4221f4024098496024fd569e3d70a52b4646cd4358ce11d91aaf188f41fd0086928f2007f1dc8283ece
SSDEEP 3072:O7edtTo1LTZtDh/vVy5qy78qR9dvHOi+:OYt0pDh/v0jdvHO
TLSH
T156C3D610EFC6E826FDB126B458F7C6B80279FC909A01CB4BA3C55D9F7D60E2158E2752
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18773

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegEnumValueW RegOpenKeyExW RegQueryInfoKeyW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

comdlg32

GetOpenFileNameW

kernel32

DeleteCriticalSection EnterCriticalSection FormatMessageW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetFileAttributesW GetLastError GetModuleHandleA GetProcAddress GetStartupInfoW GetSystemTimeAsFileTime GetTickCount GetUserDefaultUILanguage InitializeCriticalSection LeaveCriticalSection LoadLibraryW LocalFree QueryPerformanceCounter SearchPathW SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcrt

__dllonexit __lconv_init __set_app_type __setusermatherr __wargv __wgetmainargs __winitenv _amsg_exit _cexit _fpreset _initterm _iob _lock _onexit _unlock _vsnwprintf _wcmdln abort calloc exit free fwrite malloc memmove memset signal strncmp vfprintf wcscmp wcsrchr

shell32

DragAcceptFiles DragFinish DragQueryFileW ShellAboutW ShellExecuteW

winmm

mciGetErrorStringW mciSendCommandW

user32

CharLowerBuffW CheckMenuItem CreateWindowExW DefWindowProcW DestroyAcceleratorTable DispatchMessageW EnableMenuItem GetClientRect GetMenu GetMenuItemInfoW GetMessageW GetSubMenu GetSystemMetrics GetWindowRect InsertMenuItemW KillTimer LoadAcceleratorsW LoadCursorW LoadIconW LoadImageW LoadStringW MessageBoxW MoveWindow PostMessageW PostQuitMessage RegisterClassExW SendMessageW SetParent SetProcessDefaultLayout SetTimer SetWindowTextW ShowWindow TranslateAcceleratorW TranslateMessage UpdateWindow

Name

.text

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

26e8b9f484595df4dcff9814572c6352b49f26a060c3eb88384e55f268c19300

advapi32

comctl32

comdlg32

kernel32

msvcrt

shell32

winmm

user32

generic