629e0dd24b07608ee4768645448a5c3b3a766dad6a58b48f22fe37d01d9f118d

Sharing

Copy URL Twitter E-mail

General

Target
629e0dd24b07608ee4768645448a5c3b3a766dad6a58b48f22fe37d01d9f118d
Size 816KB
Sample260814-ftmmlsvgnf
SHA256 629e0dd24b07608ee4768645448a5c3b3a766dad6a58b48f22fe37d01d9f118d
MD5 771358e83d1826a37937298b192ee7ea
SHA1 20bc730fec87e911fd670826cfe6b4ada95ef52c
SHA512 fb6b90067a30a6f401ef50510982abd8dee9f018a7c71f9511983d08fdb2e85461de4e3617680454452fae7fe030ff9997e3008e95adf31dc42f7cdcb1d53ea8
SSDEEP 1536:F1CUndZH0YIX1jC3qSMQ6xQOCdj6cSM83Q0xz696KcJeUb6zbFs6u3tU3IWj69we:FY0RIXV0qSMHxpoePuIU99hL
TLSH
T1D405F0C36468C5A8F1B792F098F24CAB0237BF71294E920D52C6A754D7E6E589E33371
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
629e0dd24b07608ee4768645448a5c3b3a766dad6a58b48f22fe37d01d9f118d

File Explorer

629e0dd24b07608ee4768645448a5c3b3a766dad6a58b48f22fe37d01d9f118d

.exe 816KB

629e0dd24b07608ee4768645448a5c3b3a766dad6a58b48f22fe37d01d9f118d

IMPHASH 08a73a83128af383cf6d6a2af2c8bd3a
SHA256 629e0dd24b07608ee4768645448a5c3b3a766dad6a58b48f22fe37d01d9f118d
MD5 771358e83d1826a37937298b192ee7ea
SHA1 20bc730fec87e911fd670826cfe6b4ada95ef52c
SHA512 fb6b90067a30a6f401ef50510982abd8dee9f018a7c71f9511983d08fdb2e85461de4e3617680454452fae7fe030ff9997e3008e95adf31dc42f7cdcb1d53ea8
SSDEEP 1536:F1CUndZH0YIX1jC3qSMQ6xQOCdj6cSM83Q0xz696KcJeUb6zbFs6u3tU3IWj69we:FY0RIXV0qSMHxpoePuIU99hL
TLSH
T1D405F0C36468C5A8F1B792F098F24CAB0237BF71294E920D52C6A754D7E6E589E33371
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6536

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ProcessIdToSessionId WTSGetActiveConsoleSessionId RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess CreateMutexA IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetLastError TerminateProcess CloseHandle RtlCaptureContext

user32

GetCursorPos LoadImageA SetForegroundWindow TrackPopupMenu AppendMenuA CheckMenuItem DestroyIcon GetMessageA TranslateMessage DispatchMessageA DefWindowProcA CreatePopupMenu GetSystemMetrics SetTimer keybd_event GetKeyboardState PostQuitMessage GetKeyState CreateWindowExA RegisterClassA

shell32

Shell_NotifyIconA

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA

vcruntime140

__current_exception __C_specific_handler memset __current_exception_context memcpy

api-ms-win-crt-string-l1-1-0

strcmp strcpy

api-ms-win-crt-runtime-l1-1-0

_crt_atexit terminate _seh_filter_exe _set_app_type _register_onexit_function _configure_narrow_argv _initialize_onexit_table _c_exit _cexit _register_thread_local_exe_atexit_callback _exit exit _initterm_e _initterm _get_narrow_winmain_command_line _initialize_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

629e0dd24b07608ee4768645448a5c3b3a766dad6a58b48f22fe37d01d9f118d

kernel32

user32

shell32

advapi32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic