b77c75168cbc7faa2ede1e12f96450f6b087325e65636218bd074d1beceb421f

Sharing

Copy URL Twitter E-mail

General

Target
b77c75168cbc7faa2ede1e12f96450f6b087325e65636218bd074d1beceb421f
Size 81KB
Sample260808-jdd73swtex
SHA256 b77c75168cbc7faa2ede1e12f96450f6b087325e65636218bd074d1beceb421f
MD5 319047e3842ea2d21f7d1a3c3315c8ca
SHA1 5fb29f9a5733a6f6c0d3c14343bd375277e78da7
SHA512 aa682314212f77e0effb63e0f676d92cc9a9fe63fe8ed4853f80c1a12dd60c3c4bfa3dd76529f5ae6e25c31f31738cfa86bc1913a9bdc759327eb014783ee341
SSDEEP 1536:ELNztAikXt9SLxZHecOZA1vW4VPXjFOMwDqCTpPsWjcdY7UyqLaNscFR:ELNXvHec/tW4VUMqTaYQy2aqc/
TLSH
T1C4833907B5D1D471E5B20A3528B0CAA1992EF9214F65DEAB3388133A4F341D19D3AE7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b77c75168cbc7faa2ede1e12f96450f6b087325e65636218bd074d1beceb421f

File Explorer

b77c75168cbc7faa2ede1e12f96450f6b087325e65636218bd074d1beceb421f

.exe 81KB

b77c75168cbc7faa2ede1e12f96450f6b087325e65636218bd074d1beceb421f

IMPHASH c5309d598f598773b1e4db3053269144
SHA256 b77c75168cbc7faa2ede1e12f96450f6b087325e65636218bd074d1beceb421f
MD5 319047e3842ea2d21f7d1a3c3315c8ca
SHA1 5fb29f9a5733a6f6c0d3c14343bd375277e78da7
SHA512 aa682314212f77e0effb63e0f676d92cc9a9fe63fe8ed4853f80c1a12dd60c3c4bfa3dd76529f5ae6e25c31f31738cfa86bc1913a9bdc759327eb014783ee341
SSDEEP 1536:ELNztAikXt9SLxZHecOZA1vW4VPXjFOMwDqCTpPsWjcdY7UyqLaNscFR:ELNXvHec/tW4VUMqTaYQy2aqc/
TLSH
T1C4833907B5D1D471E5B20A3528B0CAA1992EF9214F65DEAB3388133A4F341D19D3AE7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetSysColorBrush UpdateWindow SendMessageW GetMessageW DefWindowProcW MessageBoxW CreateWindowExW GetWindowTextW SetWindowTextW RegisterClassExW wsprintfA ShowWindow DispatchMessageW GetSysColor TranslateMessage LoadCursorW PostQuitMessage

kernel32

FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap LCMapStringW ReadFile GetModuleFileNameA WriteFile lstrcatA MultiByteToWideChar CreateFileA GetVersionExA CloseHandle GetModuleHandleW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetConsoleCP QueryPerformanceCounter WriteConsoleW GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetConsoleMode IsProcessorFeaturePresent SetFilePointerEx RaiseException GetStringTypeW DecodePointer CreateFileW GetCurrentProcessId GetFileType SetStdHandle GetStdHandle ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW

gdi32

SetBkColor CreateFontW

comctl32

ord17

shell32

SHGetFolderPathA

shlwapi

PathFileExistsA

advapi32

RegCloseKey RegOpenKeyExA

ole32

CoUninitialize CoInitialize

Sharing

General

Malware Config

Signatures

File Explorer

b77c75168cbc7faa2ede1e12f96450f6b087325e65636218bd074d1beceb421f

user32

kernel32

gdi32

comctl32

shell32

shlwapi

advapi32

ole32

generic