a998b8ad7c54bfa705caa1561cc5d1e9ed45587afe024a838b3d3e608082aeec

Sharing

Copy URL Twitter E-mail

General

Target
a998b8ad7c54bfa705caa1561cc5d1e9ed45587afe024a838b3d3e608082aeec
Size 252KB
Sample260814-ac8wmahp21
SHA256 a998b8ad7c54bfa705caa1561cc5d1e9ed45587afe024a838b3d3e608082aeec
MD5 c04026242735c755dd63e506415cb501
SHA1 6762b3cd10fcb519d5a8af65d641225d9e95e1cb
SHA512 9f0b4f3f11f2f0de6e95d9fbb0143be0d478919b1ceaf79651e46de3f7c2fb2f7c054c930572b6cd0500245c42f2f932798b78cd06af1fa27236331c48f70403
SSDEEP 3072:anFlCtwD2aolrLCoZGDXINo7wHwon1FWRWGm4X2h2000KE5:anFlCU2aoYoZaX3
TLSH
T1EB44842207F59644F5B2ABB06E7547902B39FC64AB71CBCF6746904D0A70AC4B939F23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a998b8ad7c54bfa705caa1561cc5d1e9ed45587afe024a838b3d3e608082aeec

File Explorer

a998b8ad7c54bfa705caa1561cc5d1e9ed45587afe024a838b3d3e608082aeec

.exe 252KB

a998b8ad7c54bfa705caa1561cc5d1e9ed45587afe024a838b3d3e608082aeec

IMPHASH 35f659d703e0a4c03d4071f9e8741a6e
SHA256 a998b8ad7c54bfa705caa1561cc5d1e9ed45587afe024a838b3d3e608082aeec
MD5 c04026242735c755dd63e506415cb501
SHA1 6762b3cd10fcb519d5a8af65d641225d9e95e1cb
SHA512 9f0b4f3f11f2f0de6e95d9fbb0143be0d478919b1ceaf79651e46de3f7c2fb2f7c054c930572b6cd0500245c42f2f932798b78cd06af1fa27236331c48f70403
SSDEEP 3072:anFlCtwD2aolrLCoZGDXINo7wHwon1FWRWGm4X2h2000KE5:anFlCU2aoYoZaX3
TLSH
T1EB44842207F59644F5B2ABB06E7547902B39FC64AB71CBCF6746904D0A70AC4B939F23
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26368

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comdlg32

ChooseFontW FindTextW GetFileTitleW GetOpenFileNameW GetSaveFileNameW PrintDlgW ReplaceTextW

shell32

DragAcceptFiles DragFinish DragQueryFileW ShellAboutW

shlwapi

PathFindFileNameW StrCmpNIW StrCmpNW StrRStrIW StrStrIW StrStrW wnsprintfW

user32

CheckMenuItem CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW EnableMenuItem EndDialog GetClientRect GetDesktopWindow GetDlgItem GetDlgItemInt GetDlgItemTextW GetDpiForWindow GetMenu GetMessageW GetParent GetSystemMetrics GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW InvalidateRect IsClipboardFormatAvailable IsDialogMessageW LoadAcceleratorsW LoadCursorW LoadIconW LoadImageW LoadStringW MessageBoxW PostMessageW PostQuitMessage RegisterClassExW RegisterWindowMessageW SendMessageW SetActiveWindow SetDlgItemInt SetDlgItemTextW SetFocus SetWindowPlacement SetWindowPos SetWindowTextW ShowWindow TranslateAcceleratorW TranslateMessage UpdateWindow WinHelpW wsprintfW

gdi32

CreateFontIndirectW DeleteDC DeleteObject EndDoc EndPage ExtTextOutW GetDeviceCaps GetTextExtentExPointW GetTextExtentPoint32W GetTextMetricsW SelectObject SetMapMode StartDocW StartPage

advapi32

IsTextUnicode RegCloseKey RegCreateKeyExW RegOpenKeyW RegQueryValueExW RegSetValueExW

comctl32

ord413 InitCommonControls ord410

ucrtbase

__p___argc __p___argv __stdio_common_vswprintf _assert _configure_narrow_argv _crt_atexit _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type exit memcpy memset wcschr wcslen

kernel32

CloseHandle CreateFileW ExitProcess FindClose FindFirstFileW FormatMessageW GetCPInfoExW GetCommandLineA GetCommandLineW GetDateFormatW GetFileSize GetLocalTime GetModuleHandleA GetStartupInfoA GetTimeFormatW HeapAlloc HeapFree LocalFree MulDiv MultiByteToWideChar ReadFile SetEndOfFile WideCharToMultiByte WriteFile lstrcmpW

Sharing

General

Malware Config

Signatures

File Explorer

a998b8ad7c54bfa705caa1561cc5d1e9ed45587afe024a838b3d3e608082aeec

comdlg32

shell32

shlwapi

user32

gdi32

advapi32

comctl32

ucrtbase

kernel32

generic