d9579fba7e2c5a14485f686c4743d07dc1bab461717fb56effb991650f105ea3

Sharing

Copy URL Twitter E-mail

General

Target
d9579fba7e2c5a14485f686c4743d07dc1bab461717fb56effb991650f105ea3
Size 765KB
Sample260815-nexs2avdmc
SHA256 d9579fba7e2c5a14485f686c4743d07dc1bab461717fb56effb991650f105ea3
MD5 cf9e9461a7ebf3f441697d3be94b1d42
SHA1 425c1b82f8b8f2208a7abac1fe29aa61c4065918
SHA512 d4e42fb0fe75ea9a26dd3db32161f28a43ef2b32db63fd5082b772458da16890b961a0778b807a77fe791d625e6c058d6579f547cdb462ed7bec4f8505ab61aa
SSDEEP 12288:IjGPUqKW5OLdDzFvKKQMMyKA1v/3di2//:IG/kNvyI1vPdi2/
TLSH
T149F47C5ABBA442F9D077C179C952C667F7B27C520A358B0F12E0736A3F376609E29321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9579fba7e2c5a14485f686c4743d07dc1bab461717fb56effb991650f105ea3

File Explorer

d9579fba7e2c5a14485f686c4743d07dc1bab461717fb56effb991650f105ea3

.exe 765KB

d9579fba7e2c5a14485f686c4743d07dc1bab461717fb56effb991650f105ea3

IMPHASH f90e3f4480a3f084fb2c0255f954faeb
SHA256 d9579fba7e2c5a14485f686c4743d07dc1bab461717fb56effb991650f105ea3
MD5 cf9e9461a7ebf3f441697d3be94b1d42
SHA1 425c1b82f8b8f2208a7abac1fe29aa61c4065918
SHA512 d4e42fb0fe75ea9a26dd3db32161f28a43ef2b32db63fd5082b772458da16890b961a0778b807a77fe791d625e6c058d6579f547cdb462ed7bec4f8505ab61aa
SSDEEP 12288:IjGPUqKW5OLdDzFvKKQMMyKA1v/3di2//:IG/kNvyI1vPdi2/
TLSH
T149F47C5ABBA442F9D077C179C952C667F7B27C520A358B0F12E0736A3F376609E29321
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

460660

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FindFirstFileW FindNextFileW FindClose GetFileAttributesW GetModuleHandleA GetLogicalDriveStringsW ReadFile WriteFile DeviceIoControl SetFilePointer SetEndOfFile GetFileSize GetFileInformationByHandle GetVolumeInformationW GetDiskFreeSpaceW GetDriveTypeW GetCurrentProcess FileTimeToSystemTime GetProcessAffinityMask GetSystemInfo GlobalMemoryStatusEx GetSystemTimeAsFileTime GetStdHandle WaitForMultipleObjects QueryPerformanceCounter GetLogicalDrives GetFileSizeEx UnmapViewOfFile Sleep LoadLibraryW FreeLibrary CreateFileMappingW MapViewOfFile SetPriorityClass GetCommandLineW GetFullPathNameW SetProcessAffinityMask ExpandEnvironmentStringsW GetModuleFileNameW GetUserDefaultUILanguage SetErrorMode CreateMutexW ReleaseMutex GetACP OpenProcess AttachConsole GetCurrentThread QueryPerformanceFrequency GlobalAlloc GetLocalTime GetThreadContext GetPriorityClass GlobalLock ReplaceFileW LCMapStringW GetComputerNameW CreateProcessW GetFileType SetProcessWorkingSetSize GlobalUnlock WaitForSingleObject VirtualProtect TerminateProcess HeapAlloc GetProcessHeap GetTickCount GetExitCodeThread GetFileTime WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapSize SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW GetStringTypeW HeapReAlloc ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer RaiseException RtlPcToFileHeader RtlUnwindEx GetNativeSystemInfo InitializeSListHead GetStartupInfoW IsDebuggerPresent WaitForSingleObjectEx InitializeCriticalSectionAndSpinCount IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SetLastError CreateDirectoryW WideCharToMultiByte MultiByteToWideChar CreateSemaphoreW ResetEvent CloseHandle SetEvent GetLastError InitializeCriticalSection ReleaseSemaphore DeleteCriticalSection LeaveCriticalSection GetCurrentProcessId GetWindowsDirectoryW DeleteFileW SetFileAttributesW GetCurrentThreadId CreateFileW GetTempPathW GetEnvironmentVariableW SetFileTime HeapFree CreateEventW EnterCriticalSection LoadLibraryExW GetSystemDirectoryW GetModuleHandleW GetProcAddress VirtualAlloc MulDiv VirtualFree

user32

GetDC IsWindowVisible InvalidateRect ReleaseDC GetCursorPos GetMenu EndPaint EnableWindow wsprintfW CharUpperW DestroyWindow GetWindowRect CreateIconFromResourceEx PostMessageW CallWindowProcW LoadImageW BeginPaint DialogBoxParamW ShowWindowAsync ModifyMenuW DefWindowProcW GetMessageW SetWindowLongPtrW GetParent SetWindowPos MessageBoxW CheckRadioButton MonitorFromWindow MessageBoxExW EnumChildWindows FillRect CreateWindowExW ScreenToClient SendMessageW EndDialog GetSystemMetrics UnregisterClassW SetWindowTextW CreatePopupMenu GetWindowLongPtrW RegisterClassExW IsWindow OpenClipboard DispatchMessageW DestroyIcon GetMonitorInfoW GetDlgCtrlID ClientToScreen CloseClipboard EmptyClipboard SetDlgItemTextW TrackMouseEvent GetDlgItemTextW IsDlgButtonChecked SetLayeredWindowAttributes SetFocus TranslateMessage LoadIconW LoadCursorW SetClipboardData SetCursor TrackPopupMenuEx GetClientRect GetDlgItem AppendMenuW DrawTextW PostQuitMessage GetDesktopWindow GetSysColorBrush SystemParametersInfoW

gdi32

SelectObject CreateFontW GetStockObject GetDeviceCaps GetTextExtentPoint32W SetTextColor SetBkMode DeleteObject CreateSolidBrush CreateFontIndirectW

comdlg32

GetSaveFileNameW

advapi32

StartServiceW OpenServiceW QueryServiceStatusEx RegQueryValueExW SystemFunction036 LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken RegEnumKeyExW OpenSCManagerW CloseServiceHandle RegCloseKey RegOpenKeyExW

shell32

DragQueryFileW DragFinish CommandLineToArgvW SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteW

ole32

IIDFromString CoTaskMemFree CoCreateInstance CoUninitialize StringFromGUID2 CoInitializeEx

oleaut32

SysAllocString VariantCopy SysAllocStringLen VariantClear SysFreeString

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

newdev

UpdateDriverForPlugAndPlayDevicesW

comctl32

ImageList_ReplaceIcon InitCommonControlsEx ord413 ord410 ImageList_SetOverlayImage ImageList_Create ImageList_Destroy

setupapi

CM_Get_Device_IDW CM_Get_DevNode_Registry_PropertyW CM_Get_Sibling CM_Locate_DevNodeW SetupDiLoadClassIcon CM_Get_Child CM_Get_Device_ID_ListW CM_Open_DevNode_Key SetupUninstallOEMInfW CM_Reenumerate_DevNode CM_Open_Class_KeyW CM_Enable_DevNode SetupDiCallClassInstaller CM_Disable_DevNode SetupDiGetClassDescriptionW CM_Uninstall_DevNode SetupDiEnumDeviceInfo CM_Get_Parent SetupDiGetClassDevsW CM_Get_Device_ID_List_SizeW CM_Get_DevNode_Status SetupDiDestroyDeviceInfoList

Sharing

General

Malware Config

Signatures

File Explorer

d9579fba7e2c5a14485f686c4743d07dc1bab461717fb56effb991650f105ea3

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

version

newdev

comctl32

setupapi

generic