4e80a33c3d8201926a937e01f373b6519f45f8133c1bcfcff3cbb91a6c44ace9

Sharing

Copy URL Twitter E-mail

General

Target
4e80a33c3d8201926a937e01f373b6519f45f8133c1bcfcff3cbb91a6c44ace9
Size 148KB
Sample260809-hm2jaswvhv
SHA256 4e80a33c3d8201926a937e01f373b6519f45f8133c1bcfcff3cbb91a6c44ace9
MD5 16d1634442856089d225c31b0cf9a70f
SHA1 4e4c77324c310c5637bf174c2bcbfb97d9597b8e
SHA512 d2c8f10ce3bdba9da7ea6ea8e1d0532046fc46b758b3068b85ff8aeb62be239bfc2d17c9e36f5c8c575cfdc832d0e8cb08d1ccc3e33c3b9cdff05b22ea7ea882
SSDEEP 1536:5oqfoceVjJGlzV3cpqCPyzHl4eLNotSrG+LcYx7Vs8jcdM3vH83jsPQs+D6pYAYb:Ojc93UIF4Z+hgM/H83jsIo4iFk9K5+Z
TLSH
T13CE34A0237D0CD71E5A303724A615B81462DFC2177A0EEA7A3C849ED0964FF1DA76B93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e80a33c3d8201926a937e01f373b6519f45f8133c1bcfcff3cbb91a6c44ace9

File Explorer

4e80a33c3d8201926a937e01f373b6519f45f8133c1bcfcff3cbb91a6c44ace9

.exe 148KB

4e80a33c3d8201926a937e01f373b6519f45f8133c1bcfcff3cbb91a6c44ace9

IMPHASH e73e736eda4fedaaade3ba40ba2e794f
SHA256 4e80a33c3d8201926a937e01f373b6519f45f8133c1bcfcff3cbb91a6c44ace9
MD5 16d1634442856089d225c31b0cf9a70f
SHA1 4e4c77324c310c5637bf174c2bcbfb97d9597b8e
SHA512 d2c8f10ce3bdba9da7ea6ea8e1d0532046fc46b758b3068b85ff8aeb62be239bfc2d17c9e36f5c8c575cfdc832d0e8cb08d1ccc3e33c3b9cdff05b22ea7ea882
SSDEEP 1536:5oqfoceVjJGlzV3cpqCPyzHl4eLNotSrG+LcYx7Vs8jcdM3vH83jsPQs+D6pYAYb:Ojc93UIF4Z+hgM/H83jsIo4iFk9K5+Z
TLSH
T13CE34A0237D0CD71E5A303724A615B81462DFC2177A0EEA7A3C849ED0964FF1DA76B93
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28802

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\x64_dbg\bin\x96dbg.pdb

comctl32

ord17

shlwapi

PathAppendW PathRemoveFileSpecW PathIsRelativeW

kernel32

GetCurrentProcess InitializeCriticalSectionAndSpinCount WriteFile FindClose CloseHandle MapViewOfFile UnmapViewOfFile CreateFileMappingW GetModuleFileNameW GetModuleHandleW GetCommandLineW OutputDebugStringW GetPrivateProfileStringW WritePrivateProfileStringW GetCurrentDirectoryW CreateFileW OpenProcess DeleteFileW FindFirstFileW FindNextFileW GetVersionExW IsWow64Process GetConsoleCP HeapReAlloc GetCPInfo GetOEMCP GetACP IsValidCodePage LoadLibraryExW LeaveCriticalSection EnterCriticalSection GetProcAddress LocalFree GetConsoleMode SetFilePointerEx SetStdHandle WriteConsoleW GetFileAttributesW LCMapStringW FreeEnvironmentStringsW GetEnvironmentStringsW EncodePointer DecodePointer IsDebuggerPresent IsProcessorFeaturePresent RaiseException RtlUnwind GetCommandLineA GetLastError HeapFree HeapAlloc ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetCurrentThreadId GetStringTypeW GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FlushFileBuffers

user32

MessageBoxW LoadIconW SetDlgItemTextW GetDlgItem EndDialog DialogBoxParamW SendMessageW wsprintfW LoadStringW EnableWindow

comdlg32

GetOpenFileNameW

advapi32

RegCloseKey RegSetValueExW RegOpenKeyExW RegCreateKeyW

shell32

CommandLineToArgvW SHChangeNotify SHGetSpecialFolderPathW ShellExecuteW

ole32

CoInitialize CoCreateInstance

oleaut32

SysFreeString SysAllocString

Sharing

General

Malware Config

Signatures

File Explorer

4e80a33c3d8201926a937e01f373b6519f45f8133c1bcfcff3cbb91a6c44ace9

comctl32

shlwapi

kernel32

user32

comdlg32

advapi32

shell32

ole32

oleaut32

generic