de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909

Sharing

Copy URL Twitter E-mail

General

Target
de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909
Size 347KB
Sample260810-wk51lahf59
SHA256 de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909
MD5 9992d6fef497513d69e18645b3d76499
SHA1 b24280f8b1a4cd87f464c24a7fa54247b8b48b1c
SHA512 29c30b7a214369a44658b5592556d8ddbe1f2dd2334fc83cf5932fd282c592e9decb8d6c4d8fc0ed5b86d34ec686509f44bd2da69348d6c0ee8248f92ed0bde6
SSDEEP 3072:psymrj2pat7qlQljOsRfnwD8h3KcFclZzeLRkeWhZ5KoSnDmSHu6M1PuYw+eKAgg:psW9SRuYFWlNsbw5kmp6M1ZAOJ+RY+
TLSH
T136745B00E741A139F9B309714FFD4A6A953CBD210B2550DBE3C81E6E5EB6AE17A31723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909

File Explorer

de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909

.exe 347KB

de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909

IMPHASH 4e4d893487c3baad22386b4fbd278127
SHA256 de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909
MD5 9992d6fef497513d69e18645b3d76499
SHA1 b24280f8b1a4cd87f464c24a7fa54247b8b48b1c
SHA512 29c30b7a214369a44658b5592556d8ddbe1f2dd2334fc83cf5932fd282c592e9decb8d6c4d8fc0ed5b86d34ec686509f44bd2da69348d6c0ee8248f92ed0bde6
SSDEEP 3072:psymrj2pat7qlQljOsRfnwD8h3KcFclZzeLRkeWhZ5KoSnDmSHu6M1PuYw+eKAgg:psW9SRuYFWlNsbw5kmp6M1ZAOJ+RY+
TLSH
T136745B00E741A139F9B309714FFD4A6A953CBD210B2550DBE3C81E6E5EB6AE17A31723
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

147683

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsW

kernel32

CopyFileW MultiByteToWideChar WideCharToMultiByte GetFileAttributesW GetLocalTime GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW DeleteFileW RemoveDirectoryW GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW FindNextFileW GetCurrentProcessId GetCurrentThreadId InitializeSListHead SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW GetProcessHeap EnumSystemLocalesW GetUserDefaultLCID FindFirstFileW IsValidLocale GetFileType GetACP WriteFile GetStdHandle GetModuleFileNameW GetModuleHandleExW ExitProcess HeapReAlloc HeapFree HeapAlloc LoadLibraryExW FreeLibrary GetLastError RtlUnwind RaiseException FindClose CreateDirectoryW GetCurrentDirectoryW FlushFileBuffers WriteConsoleW QueryPerformanceCounter CreateFileW

user32

LoadIconW SetMenuItemInfoW LoadCursorW GetClassNameW SetWindowLongW GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC DestroyIcon DrawTextW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics EnableWindow GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW CallWindowProcW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent wsprintfW MessageBoxW DispatchMessageW TranslateMessage GetMessageW SetForegroundWindow UpdateWindow

gdi32

EnumFontFamiliesExW GetStockObject SelectObject CreateFontW SetBkColor SetBkMode SetTextColor DeleteObject CreateSolidBrush

Sharing

General

Malware Config

Signatures

File Explorer

de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909

shell32

comctl32

shlwapi

kernel32

user32

gdi32

generic