036781d725e8ba1d19026ee4482b330075cfb297b3be3592e7cbc4ac8046c009

Sharing

Copy URL Twitter E-mail

General

Target
036781d725e8ba1d19026ee4482b330075cfb297b3be3592e7cbc4ac8046c009
Size 2.5MB
Sample260810-dat68sdf98
SHA256 036781d725e8ba1d19026ee4482b330075cfb297b3be3592e7cbc4ac8046c009
MD5 ab51e4e0e137f81bbffcfd485a049465
SHA1 1d9ea337ec2bca7decf8ff0dcad534df1ac1cd8c
SHA512 7da8d1769ccdaf1105810f1a94b04ab234a9b6fc41b8d12b74dc8bb28eb4f906af95491d4eac6db05751bf4da701e54fb44426fe8f09ef54a7bf91a425efec6e
SSDEEP 49152:V92G4e0d9csIsbhWMuHzor4AeeBeTSKx0hg191siA2HDxo:V92G4Fd7bhWMTrjWS88YrZH9o
TLSH
T1DCC5122AE23B4EDDEEC05AB1B527DA717AB32F3C30697161DD81720B263635785B0C52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
036781d725e8ba1d19026ee4482b330075cfb297b3be3592e7cbc4ac8046c009

File Explorer

036781d725e8ba1d19026ee4482b330075cfb297b3be3592e7cbc4ac8046c009

.exe 2.5MB
top_bg.png

.png 51KB

036781d725e8ba1d19026ee4482b330075cfb297b3be3592e7cbc4ac8046c009

IMPHASH 5e48fbae3520a62c95e412b293e1759c
SHA256 036781d725e8ba1d19026ee4482b330075cfb297b3be3592e7cbc4ac8046c009
MD5 ab51e4e0e137f81bbffcfd485a049465
SHA1 1d9ea337ec2bca7decf8ff0dcad534df1ac1cd8c
SHA512 7da8d1769ccdaf1105810f1a94b04ab234a9b6fc41b8d12b74dc8bb28eb4f906af95491d4eac6db05751bf4da701e54fb44426fe8f09ef54a7bf91a425efec6e
SSDEEP 49152:V92G4e0d9csIsbhWMuHzor4AeeBeTSKx0hg191siA2HDxo:V92G4Fd7bhWMTrjWS88YrZH9o
TLSH
T1DCC5122AE23B4EDDEEC05AB1B527DA717AB32F3C30697161DD81720B263635785B0C52
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegDeleteKeyW RegCloseKey RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW RegDeleteValueW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

GetDlgItemTextW SetDlgItemTextW RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW SetWindowPos IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem EndDialog GetSystemMetrics CreatePopupMenu AppendMenuW GetWindowRect TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos ScreenToClient CheckDlgButton LoadCursorW MessageBoxIndirectW GetWindowLongW GetSysColor CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharPrevW DispatchMessageW PeekMessageW wsprintfA SetCursor CharNextA

gdi32

GetDeviceCaps SetBkColor DeleteObject SelectObject SetTextColor SetBkMode CreateFontIndirectW CreateBrushIndirect

kernel32

WaitForSingleObject RemoveDirectoryW lstrcpyA GetExitCodeProcess GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW WriteFile GetTempFileNameW CreateFileW lstrcmpiA CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW MoveFileExW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize GetLastError GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EnterCriticalSection CreateEventW ResetEvent WaitForMultipleObjects SetEvent GetCommandLineW

Sharing

General

Malware Config

Signatures

File Explorer

036781d725e8ba1d19026ee4482b330075cfb297b3be3592e7cbc4ac8046c009

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

top_bg.png