d6e181a6e543b4581363400a61dfa7cd2739e9721243568d62c2a4637fac8e06

Sharing

Copy URL Twitter E-mail

General

Target
d6e181a6e543b4581363400a61dfa7cd2739e9721243568d62c2a4637fac8e06
Size 717KB
Sample260816-btevjsaf24
SHA256 d6e181a6e543b4581363400a61dfa7cd2739e9721243568d62c2a4637fac8e06
MD5 495a4c55615a93db0eb4dd725fbe2e2d
SHA1 ce190b0b0451bace06d5d804c2557aa986cac33d
SHA512 f97bf7a8be89cd9fe43cb64b5356aa2331c7b034073079a81d61d2621ba9ca294a314ea3b8cfe595aadf26f4ebf51548f340caaca4e8ae8309596ef0aa2baea3
SSDEEP 12288:YehtvpOsb/8vchRoeKhQwkmyMqP5kLMrE7WVyG5RnIGS6vxRiZ4V0V+nuW:DNOsbkvchRoeKhQwkSqYGvnA6fiZojZ
TLSH
T1EDF47D1079C1C036E9B3147249FEA66A45ADF9320B2459DB93C80F7E5FB89D27E3121B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6e181a6e543b4581363400a61dfa7cd2739e9721243568d62c2a4637fac8e06

File Explorer

d6e181a6e543b4581363400a61dfa7cd2739e9721243568d62c2a4637fac8e06

.exe 717KB

d6e181a6e543b4581363400a61dfa7cd2739e9721243568d62c2a4637fac8e06

IMPHASH 20ec22f063afff1de787535b8962ac60
SHA256 d6e181a6e543b4581363400a61dfa7cd2739e9721243568d62c2a4637fac8e06
MD5 495a4c55615a93db0eb4dd725fbe2e2d
SHA1 ce190b0b0451bace06d5d804c2557aa986cac33d
SHA512 f97bf7a8be89cd9fe43cb64b5356aa2331c7b034073079a81d61d2621ba9ca294a314ea3b8cfe595aadf26f4ebf51548f340caaca4e8ae8309596ef0aa2baea3
SSDEEP 12288:YehtvpOsb/8vchRoeKhQwkmyMqP5kLMrE7WVyG5RnIGS6vxRiZ4V0V+nuW:DNOsbkvchRoeKhQwkSqYGvnA6fiZojZ
TLSH
T1EDF47D1079C1C036E9B3147249FEA66A45ADF9320B2459DB93C80F7E5FB89D27E3121B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

267007

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\7HS-GO\游戏修改\BO2012Launcher\build_plain_x86\BO2012Launcher.pdb

shell32

Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsW

kernel32

GetCurrentDirectoryW CopyFileW WideCharToMultiByte WritePrivateProfileStringW GetPrivateProfileIntW GetFileAttributesW GetPrivateProfileStringW GetLocalTime DeleteFileW RemoveDirectoryW FormatMessageW GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW MultiByteToWideChar GetCurrentProcessId GetCurrentThreadId InitializeSListHead SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle OutputDebugStringW OutputDebugStringA SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExW FindFirstFileExA GetTimeZoneInformation SetConsoleCtrlHandler GetProcessHeap EnumSystemLocalesW GetUserDefaultLCID FindClose IsValidLocale GetTimeFormatW GetDateFormatW GetFileType GetCurrentThread GetACP WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA GetModuleHandleExW ExitProcess HeapFree HeapReAlloc HeapAlloc InterlockedFlushSList InterlockedPushEntrySList LoadLibraryExW FreeLibrary GetLastError RaiseException RtlUnwind FindNextFileW FindFirstFileW CreateDirectoryW FlushFileBuffers WriteConsoleW QueryPerformanceCounter CreateFileW

user32

SetMenuItemInfoW LoadIconW GetWindowLongW GetWindowTextLengthW DefWindowProcW CallWindowProcW PostMessageW GetWindowRect DestroyWindow GetDC FillRect CreateWindowExW SendMessageW GetSystemMetrics SetWindowTextW CreatePopupMenu RegisterClassExW TrackPopupMenu ShowWindow GetDlgCtrlID ClientToScreen MapWindowPoints TrackMouseEvent DestroyIcon LoadCursorW GetClassNameW SetCursor wsprintfW SetWindowLongW GetClientRect AppendMenuW DrawTextW PostQuitMessage PtInRect UpdateWindow SetForegroundWindow InvalidateRect ReleaseDC GetCursorPos BeginPaint EndPaint EnableWindow GetWindowTextW GetMessageW MessageBoxW DispatchMessageW TranslateMessage AdjustWindowRect DestroyMenu

gdi32

SetBkMode SetTextColor GetStockObject CreateSolidBrush CreateFontW EnumFontFamiliesExW SelectObject SetBkColor DeleteObject

Name

.text

Size

558KB

Virtual Size

558KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

106KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

d6e181a6e543b4581363400a61dfa7cd2739e9721243568d62c2a4637fac8e06

shell32

comctl32

shlwapi

kernel32

user32

gdi32

generic