ff770ff5a0ebc9f732ecf4faf9948baaa9d8b01bdf9599f9b8a9e18b2e253227

Sharing

Copy URL Twitter E-mail

General

Target
ff770ff5a0ebc9f732ecf4faf9948baaa9d8b01bdf9599f9b8a9e18b2e253227
Size 356KB
Sample260809-2rjntscg83
SHA256 ff770ff5a0ebc9f732ecf4faf9948baaa9d8b01bdf9599f9b8a9e18b2e253227
MD5 90d159e7d8e1e1f0f10e40b5731cd8ec
SHA1 7dc01d8de95d4e99d9dda0004da3b4effe805491
SHA512 cf8febefa80da1a5e14a0ef1c2f72ee86daa0c00c3b13007e17176c52f5dcf6282b6bc92488cb964ddfce2104e9c71c5901f243f6a5055c0fae94e64a418393f
SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLr:muqyxMLNplyon0BB
TLSH
T1BE743838BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff770ff5a0ebc9f732ecf4faf9948baaa9d8b01bdf9599f9b8a9e18b2e253227

File Explorer

ff770ff5a0ebc9f732ecf4faf9948baaa9d8b01bdf9599f9b8a9e18b2e253227

.exe 356KB

ff770ff5a0ebc9f732ecf4faf9948baaa9d8b01bdf9599f9b8a9e18b2e253227

IMPHASH 9a7e4883d5793bf81d0e5cefa9ed71c6
SHA256 ff770ff5a0ebc9f732ecf4faf9948baaa9d8b01bdf9599f9b8a9e18b2e253227
MD5 90d159e7d8e1e1f0f10e40b5731cd8ec
SHA1 7dc01d8de95d4e99d9dda0004da3b4effe805491
SHA512 cf8febefa80da1a5e14a0ef1c2f72ee86daa0c00c3b13007e17176c52f5dcf6282b6bc92488cb964ddfce2104e9c71c5901f243f6a5055c0fae94e64a418393f
SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLr:muqyxMLNplyon0BB
TLSH
T1BE743838BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

48732

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHGetSpecialFolderPathA ShellExecuteA

shlwapi

PathAppendA

user32

SendMessageW GetWindowThreadProcessId LoadIconW FindWindowW FindWindowExW GetCursorPos

advapi32

RegOpenKeyExA RegCloseKey RegGetValueA

kernel32

GetProcessHeap SetStdHandle WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW CreateFileW HeapSize SetEndOfFile LockResource VirtualAlloc VirtualAllocEx OpenProcess GetCurrentProcess ReadProcessMemory WriteProcessMemory LoadResource SizeofResource CloseHandle GetNativeSystemInfo GetModuleFileNameA GetModuleFileNameW GetModuleHandleA CreateProcessA FindResourceW BeginUpdateResourceA UpdateResourceW EndUpdateResourceW GetSystemDirectoryA GetTempPathA DeleteFileA CopyFileA GetVersionExW FreeConsole GetConsoleWindow CreateToolhelp32Snapshot Process32FirstW Process32NextW GetLastError WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime RtlUnwind GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess GetCommandLineA RtlPcToFileHeader RaiseException RtlUnwindEx FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetACP HeapFree IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc GetFileType FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile ReadConsoleW SetFilePointerEx HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP

Sharing

General

Malware Config

Signatures

File Explorer

ff770ff5a0ebc9f732ecf4faf9948baaa9d8b01bdf9599f9b8a9e18b2e253227

shell32

shlwapi

user32

advapi32

kernel32

generic