e24dfb1ec7569d230e7270fc790caa0369a827b978b3129fe0d8cc3f4005299f

Sharing

Copy URL Twitter E-mail

General

Target
e24dfb1ec7569d230e7270fc790caa0369a827b978b3129fe0d8cc3f4005299f
Size 144KB
Sample260813-yqrfhadb34
SHA256 e24dfb1ec7569d230e7270fc790caa0369a827b978b3129fe0d8cc3f4005299f
MD5 66003a1c5954f2f415c84f280820aff1
SHA1 8ef3683f2dd6a1a454eec6f40b68387a997de5cb
SHA512 2833bfa28f08712b34eaa3b7934bb43cb18f94e23654946855574d21b275866c2ff457eeaa766ae72c9c19facdafac62029ed590886e205184de36e8eee3d544
SSDEEP 3072:TsJzE4EjpM2RySBOHJAgPv9bcBeGOAM7:TZn22QwOCgPvDf
TLSH
T1EBE3171772ED71EBE1638234C4414696E77E78355B209B9F02605AF5EEF3280AD39B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e24dfb1ec7569d230e7270fc790caa0369a827b978b3129fe0d8cc3f4005299f

File Explorer

e24dfb1ec7569d230e7270fc790caa0369a827b978b3129fe0d8cc3f4005299f

.exe 144KB

e24dfb1ec7569d230e7270fc790caa0369a827b978b3129fe0d8cc3f4005299f

IMPHASH 0add009e37d1720e95766ffe4d635ac5
SHA256 e24dfb1ec7569d230e7270fc790caa0369a827b978b3129fe0d8cc3f4005299f
MD5 66003a1c5954f2f415c84f280820aff1
SHA1 8ef3683f2dd6a1a454eec6f40b68387a997de5cb
SHA512 2833bfa28f08712b34eaa3b7934bb43cb18f94e23654946855574d21b275866c2ff457eeaa766ae72c9c19facdafac62029ed590886e205184de36e8eee3d544
SSDEEP 3072:TsJzE4EjpM2RySBOHJAgPv9bcBeGOAM7:TZn22QwOCgPvDf
TLSH
T1EBE3171772ED71EBE1638234C4414696E77E78355B209B9F02605AF5EEF3280AD39B23
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27784

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

GetMessageW CreateIconIndirect DestroyIcon LoadCursorW FillRect GetCursorPos SetCursor MessageBoxW GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW ReleaseDC GetDC UpdateWindow DrawTextW TrackPopupMenu AppendMenuW GetSubMenu CheckMenuItem DestroyMenu CreatePopupMenu CreateMenu SetMenu GetMenu TranslateAcceleratorW CreateAcceleratorTableW EnableWindow KillTimer SetTimer SetFocus EmptyClipboard SetClipboardData CloseClipboard OpenClipboard MoveWindow ShowWindow DestroyWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW PostMessageW SendMessageW DispatchMessageW TranslateMessage wsprintfW

gdi32

GetTextFaceW SetTextColor SetBkMode SelectObject GetGlyphIndicesW GetStockObject DeleteObject DeleteDC CreateSolidBrush CreateFontW CreateCompatibleDC CreateCompatibleBitmap CreateBitmap

comctl32

ord410 InitCommonControlsEx ord413

shell32

ShellExecuteW

kernel32

GetStringTypeW GetFileType SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA FlsAlloc GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc HeapFree HeapAlloc GetModuleHandleExW ExitProcess GetModuleFileNameW WriteFile FlsGetValue FlsSetValue FlsFree LCMapStringW GetProcessHeap HeapSize FlushFileBuffers GetConsoleOutputCP GetConsoleMode WriteConsoleW GetCPInfo GetVolumeInformationW GetStdHandle RtlPcToFileHeader FileTimeToLocalFileTime CloseHandle WaitForSingleObject CreateThread FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryW GlobalAlloc GlobalUnlock GlobalLock GlobalFree lstrcmpiW lstrcpynW lstrcpyW lstrlenW FileTimeToSystemTime GetUserDefaultUILanguage CreateFileW GetLogicalDrives ReadFile SetFilePointerEx DeviceIoControl VirtualAlloc VirtualFree lstrcmpW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer

Name

.text

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e24dfb1ec7569d230e7270fc790caa0369a827b978b3129fe0d8cc3f4005299f

user32

gdi32

comctl32

shell32

kernel32

generic