39d782de29d16ca545f8ea8cfd23cf4f82dc0cd142268773dde115c1341c7d60

Sharing

Copy URL Twitter E-mail

General

Target
39d782de29d16ca545f8ea8cfd23cf4f82dc0cd142268773dde115c1341c7d60
Size 1.6MB
Sample260808-2v8gcsel4x
SHA256 39d782de29d16ca545f8ea8cfd23cf4f82dc0cd142268773dde115c1341c7d60
MD5 a3442f634de5526b82b5d9c4492f4c47
SHA1 4903bd50bad36e4456d280cb5c1ccc2343b131e4
SHA512 ad74887c7d8790e96ee9e1eaa365778de9ffa471d170218992ee8938e87621af874776d59276a13b3b1fb1bfdae418e0cc4242d527e34c13b02494bff3b4305f
SSDEEP 24576:wLijzwBKU3U2KqzikD2SJkO/Ih3JbMp7XRXpRPQTEQs:wLiHwBLU2bz12N0IhMXfQRs
TLSH
T11D85AE26A7D501FDE0BBC1B8CE568842EB72780A07719BDF17D046A61F676E04E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39d782de29d16ca545f8ea8cfd23cf4f82dc0cd142268773dde115c1341c7d60

File Explorer

39d782de29d16ca545f8ea8cfd23cf4f82dc0cd142268773dde115c1341c7d60

.exe 1.6MB

39d782de29d16ca545f8ea8cfd23cf4f82dc0cd142268773dde115c1341c7d60

IMPHASH 5f88e165ab877420061913d46ceb9214
SHA256 39d782de29d16ca545f8ea8cfd23cf4f82dc0cd142268773dde115c1341c7d60
MD5 a3442f634de5526b82b5d9c4492f4c47
SHA1 4903bd50bad36e4456d280cb5c1ccc2343b131e4
SHA512 ad74887c7d8790e96ee9e1eaa365778de9ffa471d170218992ee8938e87621af874776d59276a13b3b1fb1bfdae418e0cc4242d527e34c13b02494bff3b4305f
SSDEEP 24576:wLijzwBKU3U2KqzikD2SJkO/Ih3JbMp7XRXpRPQTEQs:wLiHwBLU2bz12N0IhMXfQRs
TLSH
T11D85AE26A7D501FDE0BBC1B8CE568842EB72780A07719BDF17D046A61F676E04E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

657588

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WideCharToMultiByte MultiByteToWideChar UnmapViewOfFile CreateFileMappingW MapViewOfFile Sleep GetCurrentProcessId LoadLibraryW GetProcAddress GetModuleHandleA LoadLibraryA InitializeCriticalSectionEx DeleteCriticalSection GetModuleHandleW DecodePointer GetModuleFileNameW HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap GetTempPathW WaitNamedPipeW ReadFile WritePrivateProfileStringW GetCurrentProcess FindResourceW LoadResource SizeofResource LockResource LoadLibraryExW GetFileAttributesW FreeLibrary GetProcessTimes GetSystemTimeAsFileTime IsWow64Process SetLastError ResumeThread WaitForSingleObject GetFileSizeEx LocalFree CreateDirectoryW SetEndOfFile WriteConsoleW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW WriteFile CreateFileW GetLastError GetPrivateProfileStringW CloseHandle GetCommandLineA GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc ReadConsoleW GetConsoleMode GetConsoleOutputCP FormatMessageA GetLocaleInfoEx GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObjectEx GetExitCodeThread EnterCriticalSection LeaveCriticalSection EncodePointer CompareStringEx GetCPInfo LCMapStringEx WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead OutputDebugStringW RaiseException RtlUnwindEx RtlPcToFileHeader InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetStdHandle GetFileType SetFilePointerEx FlushFileBuffers RtlUnwind

user32

MessageBoxA SetProcessDPIAware MessageBoxW

advapi32

SetEntriesInAclW ConvertStringSidToSidW GetNamedSecurityInfoW SetNamedSecurityInfoW

shell32

SHGetFolderPathW

ole32

CoInitializeEx CoUninitialize

oleaut32

SysFreeString SysAllocString VariantInit SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreate

mscoree

CorBindToRuntime CLRCreateInstance

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

winmm

PlaySoundW

Sharing

General

Malware Config

Signatures

File Explorer

39d782de29d16ca545f8ea8cfd23cf4f82dc0cd142268773dde115c1341c7d60

kernel32

user32

advapi32

shell32

ole32

oleaut32

mscoree

version

winmm

generic