99df30651be580426a5ceac370d4863fba4661c6b8f81d92c5cc56b0595872b6

Sharing

Copy URL Twitter E-mail

General

Target
99df30651be580426a5ceac370d4863fba4661c6b8f81d92c5cc56b0595872b6
Size 478KB
Sample260813-tmfsdack4t
SHA256 99df30651be580426a5ceac370d4863fba4661c6b8f81d92c5cc56b0595872b6
MD5 92246486213945ec998d4905521b6d95
SHA1 b8f3db684712a7d02306b2d97187d3f5ab5fb24d
SHA512 b05944c6ed76b1576b6db15de2612ed2123523f70f4f992acbc7cb4e7e435f1c89ad9cc0ff435ae517aa66521c9be61861f9e715636b2ae54d2190712f04a45f
SSDEEP 6144:SsjcN0nkYecnSJ3Z3JSmLovL/fevBAOjE+i9AyTBK:SsjcNLASJtgjfevBtEXyyTBK
TLSH
T1BDA4B898282CF231DB75637367B50E64F4887018F66B2CF3D7819A849E189D17F294BB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99df30651be580426a5ceac370d4863fba4661c6b8f81d92c5cc56b0595872b6

File Explorer

99df30651be580426a5ceac370d4863fba4661c6b8f81d92c5cc56b0595872b6

.exe 478KB

99df30651be580426a5ceac370d4863fba4661c6b8f81d92c5cc56b0595872b6

IMPHASH e3335f7c66e0d1fd172c108d680c7144
SHA256 99df30651be580426a5ceac370d4863fba4661c6b8f81d92c5cc56b0595872b6
MD5 92246486213945ec998d4905521b6d95
SHA1 b8f3db684712a7d02306b2d97187d3f5ab5fb24d
SHA512 b05944c6ed76b1576b6db15de2612ed2123523f70f4f992acbc7cb4e7e435f1c89ad9cc0ff435ae517aa66521c9be61861f9e715636b2ae54d2190712f04a45f
SSDEEP 6144:SsjcN0nkYecnSJ3Z3JSmLovL/fevBAOjE+i9AyTBK:SsjcNLASJtgjfevBtEXyyTBK
TLSH
T1BDA4B898282CF231DB75637367B50E64F4887018F66B2CF3D7819A849E189D17F294BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

96883

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

SHGetSpecialFolderPathW ExtractIconExW Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx ord17

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

shlwapi

PathFileExistsW

kernel32

GetLastError SetErrorMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetSystemInfo GetSystemTime GetModuleHandleW FindResourceW LoadLibraryW FormatMessageW GetDateFormatW GetTimeFormatW WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress LCMapStringW GetLocaleInfoW GetCPInfo CloseHandle SetEvent IsDebuggerPresent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW GetProcessHeap EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetFileType GetACP WriteFile GetStdHandle GetModuleFileNameW GetModuleHandleExW ExitProcess SetFileAttributesW HeapReAlloc HeapFree HeapAlloc LoadLibraryExW FreeLibrary RtlUnwind RaiseException CreateFileW GetCommandLineW RemoveDirectoryW DeleteFileW WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW GetLocalTime GetFileAttributesW CopyFileW FindNextFileW FindFirstFileW FindClose CreateDirectoryW GetCurrentDirectoryW SetStdHandle HeapSize GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers ResetEvent WriteConsoleW

user32

GetDesktopWindow MapVirtualKeyW GetKeyState CharUpperW SetWindowPos IsWindow LoadStringW DestroyIcon SystemParametersInfoW LoadCursorW GetClassNameW SetWindowLongW GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos LoadIconW GetMessageW TranslateMessage DispatchMessageW SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint ReleaseDC GetDC SetForegroundWindow UpdateWindow DrawTextW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics EnableWindow GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW CallWindowProcW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent wsprintfW MessageBoxW BeginPaint

gdi32

GetTextExtentPoint32W GetDeviceCaps DeleteDC CreateCompatibleDC SetTextColor CreateFontW EnumFontFamiliesExW GetStockObject SelectObject SetBkColor TextOutW SetBkMode DeleteObject CreateSolidBrush

comdlg32

ChooseFontW ChooseColorW GetSaveFileNameW PrintDlgW GetOpenFileNameW

advapi32

RegOpenKeyExW RegCloseKey GetUserNameW LookupPrivilegeValueW OpenProcessToken RegQueryValueExW

ole32

CoCreateInstance StringFromCLSID CoInitialize CoUninitialize

Name

.text

Size

191KB

Virtual Size

191KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

141KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

412B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

128KB

Virtual Size

127KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

99df30651be580426a5ceac370d4863fba4661c6b8f81d92c5cc56b0595872b6

shell32

comctl32

version

shlwapi

kernel32

user32

gdi32

comdlg32

advapi32

ole32

generic