60051cbfa150bfd38b2f49a232d89fbd24fa6768a3b0d4af938bbc397520fbe0

Sharing

Copy URL Twitter E-mail

General

Target
60051cbfa150bfd38b2f49a232d89fbd24fa6768a3b0d4af938bbc397520fbe0
Size 634KB
Sample260822-kh9efssfra
SHA256 60051cbfa150bfd38b2f49a232d89fbd24fa6768a3b0d4af938bbc397520fbe0
MD5 85558de2278fa406feba3558e5f35292
SHA1 6195caf39521435aedf144356280de76f3c0b028
SHA512 fa5e67065c5ac5ae7ca5d98f26c2b3b93d6ae76bfb8be097b016c47b2fbf0d55a16d2dd9dde49043c2dfb53580e6c15ea49e7406d92d35d9bbb216de12f786a3
SSDEEP 6144:pxFk+GQ6SA1FUbUU28KpzzyM7iCYmijk59rn3ki:pzkJSArUvKpzzyMwk59rn0i
TLSH
T1A4D4838C2E31798FC590D77629F8B778911A1BB874458782BBE87A7FFE567072D00A04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60051cbfa150bfd38b2f49a232d89fbd24fa6768a3b0d4af938bbc397520fbe0

File Explorer

60051cbfa150bfd38b2f49a232d89fbd24fa6768a3b0d4af938bbc397520fbe0

.dll 634KB

60051cbfa150bfd38b2f49a232d89fbd24fa6768a3b0d4af938bbc397520fbe0

IMPHASH 0bd70ff615e8b5a9bef9c26ec9fd5ecb
SHA256 60051cbfa150bfd38b2f49a232d89fbd24fa6768a3b0d4af938bbc397520fbe0
MD5 85558de2278fa406feba3558e5f35292
SHA1 6195caf39521435aedf144356280de76f3c0b028
SHA512 fa5e67065c5ac5ae7ca5d98f26c2b3b93d6ae76bfb8be097b016c47b2fbf0d55a16d2dd9dde49043c2dfb53580e6c15ea49e7406d92d35d9bbb216de12f786a3
SSDEEP 6144:pxFk+GQ6SA1FUbUU28KpzzyM7iCYmijk59rn3ki:pzkJSArUvKpzzyMwk59rn0i
TLSH
T1A4D4838C2E31798FC590D77629F8B778911A1BB874458782BBE87A7FFE567072D00A04
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32345

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LockResource CloseHandle CreateThread LoadResource FindResourceW GetLocalTime GetProcAddress GetCurrentProcessId GetModuleHandleW GetTickCount DisableThreadLibraryCalls TerminateProcess GetCurrentProcess InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent AcquireSRWLockExclusive SetEvent ReleaseSRWLockExclusive GetLastError Sleep CreateEventW GetCurrentThreadId WaitForSingleObject GetModuleFileNameW GetPrivateProfileIntW SizeofResource SetLastError VirtualQuery

user32

ShowWindow RegisterClassExW ScreenToClient CreateWindowExW FillRect SetWindowPos IsWindowVisible DestroyWindow GetWindowRect GetWindow CallWindowProcW DefWindowProcW GetMessageW GetWindowThreadProcessId IsWindow GetParent SetTimer ClientToScreen GetForegroundWindow EnumWindows SetLayeredWindowAttributes TranslateMessage LoadCursorW GetClassNameW SetWindowLongW GetClientRect DrawTextW DrawIconEx KillTimer GetAsyncKeyState OffsetRect GetWindowLongW PtInRect UpdateWindow InvalidateRect IsIconic GetCursorPos BeginPaint EndPaint DispatchMessageW PostQuitMessage

gdi32

MoveToEx DeleteObject Rectangle CreatePen LineTo SetBkMode SetTextColor GetStockObject CreateFontW StretchDIBits SelectObject CreateSolidBrush

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__std_type_info_destroy_list _except_handler3 _CxxThrowException memcmp __std_exception_copy memcpy memmove __std_exception_destroy __CxxFrameHandler3 memset _except_handler4_common

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnwprintf_s __stdio_common_vswprintf_s __stdio_common_vfwprintf _wfopen_s fclose

api-ms-win-crt-string-l1-1-0

wcslen wcscmp wcscpy_s

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _cexit _initterm _initterm_e _execute_onexit_table _seh_filter_dll _register_onexit_function _configure_narrow_argv _initialize_onexit_table _initialize_narrow_environment _invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc

Sharing

General

Malware Config

Signatures

File Explorer

60051cbfa150bfd38b2f49a232d89fbd24fa6768a3b0d4af938bbc397520fbe0

kernel32

user32

gdi32

msvcp140

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic