64cdc63c6978100c72423f2c303070162c8d23bb132996d42d25896ce2de0904

Sharing

Copy URL Twitter E-mail

General

Target
64cdc63c6978100c72423f2c303070162c8d23bb132996d42d25896ce2de0904
Size 2.7MB
Sample260807-dspdpswfpg
SHA256 64cdc63c6978100c72423f2c303070162c8d23bb132996d42d25896ce2de0904
MD5 e2633e11874d0d83cbacf50dc2c69208
SHA1 b8f26d861a7921a740597490cdbf277fc08bd300
SHA512 6d20f03d0f3cf8e908cbf4d4c441260249741fa1ebe4460a2375c0a2fb252903ca0acdb4232e333a6aec165e51b9c7e4c1d2e647513457ae87a55676e95f8487
SSDEEP 49152:naxmt1EtUd8uQURrU5WEafcxk9etef9jDmiFnUNr800Ih5oOJywUbGO:ax6EtHjURgoEYdl9jDjU+00wVUb1
TLSH
T1DDD533D6A2B20A0DEA90ED794255EF42C9DA1F2F7B3C36395F383C58EC7E7851204865
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

installer

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64cdc63c6978100c72423f2c303070162c8d23bb132996d42d25896ce2de0904

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

64cdc63c6978100c72423f2c303070162c8d23bb132996d42d25896ce2de0904

.exe 2.7MB

64cdc63c6978100c72423f2c303070162c8d23bb132996d42d25896ce2de0904

IMPHASH d67776f1c65927a151c11e99ef91864b
SHA256 64cdc63c6978100c72423f2c303070162c8d23bb132996d42d25896ce2de0904
MD5 e2633e11874d0d83cbacf50dc2c69208
SHA1 b8f26d861a7921a740597490cdbf277fc08bd300
SHA512 6d20f03d0f3cf8e908cbf4d4c441260249741fa1ebe4460a2375c0a2fb252903ca0acdb4232e333a6aec165e51b9c7e4c1d2e647513457ae87a55676e95f8487
SSDEEP 49152:naxmt1EtUd8uQURrU5WEafcxk9etef9jDmiFnUNr800Ih5oOJywUbGO:ax6EtHjURgoEYdl9jDjU+00wVUb1
TLSH
T1DDD533D6A2B20A0DEA90ED794255EF42C9DA1F2F7B3C36395F383C58EC7E7851204865
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

16271

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyA RegDeleteValueA RegEnumKeyA RegEnumValueA RegQueryValueExA RegSetValueExA OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA RegCreateKeyExA RegOpenKeyExA

shell32

SHBrowseForFolderA SHGetPathFromIDListA SHGetFileInfoA SHFileOperationA ShellExecuteExA

ole32

OleInitialize OleUninitialize IIDFromString CoTaskMemFree CoCreateInstance

comctl32

ImageList_Create ord17 ImageList_Destroy ImageList_AddMasked

user32

DispatchMessageA SystemParametersInfoA LoadCursorA SetClassLongA GetWindowLongA GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuA EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled GetAsyncKeyState EmptyClipboard SetClipboardData CloseClipboard OpenClipboard IsDlgButtonChecked CheckDlgButton EndDialog DialogBoxParamA IsWindowVisible SetWindowPos CreateWindowExA GetClassInfoA PeekMessageA CallWindowProcA GetMessagePos CharNextA ExitWindowsEx SetWindowTextA SetTimer CreateDialogParamA DestroyWindow LoadImageA FindWindowExA SetWindowLongA InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutA SendMessageA wsprintfA FillRect GetClientRect EndPaint BeginPaint DrawTextA DefWindowProcA SetDlgItemTextA GetDlgItemTextA CharPrevA MessageBoxIndirectA RegisterClassA wvsprintfA

gdi32

GetDeviceCaps SetBkColor CreateFontIndirectA SetTextColor SetBkMode SelectObject DeleteObject CreateBrushIndirect

kernel32

lstrcpyA lstrcatA MoveFileExA GetProcAddress GetSystemDirectoryA CreateProcessA GetExitCodeProcess WaitForSingleObject GetTempFileNameA WriteFile RemoveDirectoryA ReadFile CreateFileA CreateDirectoryA lstrcpynA GlobalUnlock GlobalLock CreateThread GetDiskFreeSpaceA CopyFileA lstrlenA GetVersionExA WideCharToMultiByte ExitProcess GetCurrentProcess SetErrorMode GetTempPathA SetEnvironmentVariableA GetCommandLineA GetModuleFileNameA GetTickCount GetFileSize MultiByteToWideChar MoveFileA WritePrivateProfileStringA GetPrivateProfileStringA lstrcmpiA lstrcmpA MulDiv GetShortPathNameA GlobalFree GlobalAlloc LoadLibraryExA GetModuleHandleA FreeLibrary Sleep GetLastError CloseHandle SetFileTime SetFilePointer SetFileAttributesA GetFullPathNameA GetFileAttributesA FindNextFileA FindFirstFileA FindClose DeleteFileA CompareFileTime SearchPathA SetCurrentDirectoryA ExpandEnvironmentStringsA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent CreateEventA WaitForMultipleObjects GetWindowsDirectoryA

Sharing

General

Malware Config

Signatures

File Explorer

64cdc63c6978100c72423f2c303070162c8d23bb132996d42d25896ce2de0904

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic