093d373c8f06913070cce24f7a8986e483a575972f13aad7dfebbafcaf3181eb

Sharing

Copy URL Twitter E-mail

General

Target
093d373c8f06913070cce24f7a8986e483a575972f13aad7dfebbafcaf3181eb
Size 364KB
Sample260824-l2gzzseq8v
SHA256 093d373c8f06913070cce24f7a8986e483a575972f13aad7dfebbafcaf3181eb
MD5 bccf4ed4d150f18954a2d546de4bd885
SHA1 4104dc153a7d74b57ab30d878d72457002063d71
SHA512 ce5d393819f0c794a82577564d3b28173b00ed72c350bdd2a1c112f8b30eba055e4d49fe473d900cc529bfe1536bcac33ef8511674563dcf0785aa2acb70d2bc
SSDEEP 3072://fEC4obnNTzt3fOR28esHj0X+Zdn2AJqP/MZpJrqCqw/uFtQEsAHz85IAS:/r4obnN/8RJD0XYpk4/umAmI/
TLSH
T1F884C63667F9C611F5F38B782DB287652A35BC20FE21CB1F9A40764E1874970DA16F22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
093d373c8f06913070cce24f7a8986e483a575972f13aad7dfebbafcaf3181eb

File Explorer

093d373c8f06913070cce24f7a8986e483a575972f13aad7dfebbafcaf3181eb

.exe 364KB

093d373c8f06913070cce24f7a8986e483a575972f13aad7dfebbafcaf3181eb

IMPHASH 7cbcdd4fe5a51e6052c2ebf5fd25cea4
SHA256 093d373c8f06913070cce24f7a8986e483a575972f13aad7dfebbafcaf3181eb
MD5 bccf4ed4d150f18954a2d546de4bd885
SHA1 4104dc153a7d74b57ab30d878d72457002063d71
SHA512 ce5d393819f0c794a82577564d3b28173b00ed72c350bdd2a1c112f8b30eba055e4d49fe473d900cc529bfe1536bcac33ef8511674563dcf0785aa2acb70d2bc
SSDEEP 3072://fEC4obnNTzt3fOR28esHj0X+Zdn2AJqP/MZpJrqCqw/uFtQEsAHz85IAS:/r4obnN/8RJD0XYpk4/umAmI/
TLSH
T1F884C63667F9C611F5F38B782DB287652A35BC20FE21CB1F9A40764E1874970DA16F22
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47008

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegQueryValueW RegSetValueExW

comctl32

CreateStatusWindowW CreateToolbarEx ImageList_Destroy ImageList_DrawEx ImageList_LoadImageW InitCommonControlsEx

comdlg32

ChooseFontW CommDlgExtendedError

gdi32

CreateFontIndirectW CreateFontW CreateRectRgn CreateRectRgnIndirect CreateSolidBrush DeleteObject ExtSelectClipRgn GetClipRgn GetDeviceCaps GetObjectW GetStockObject GetTextExtentPoint32W LineTo MoveToEx Rectangle SelectClipRgn SelectObject SetBkMode SetTextColor

kernel32

CloseHandle CompareFileTime CreateFileW FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FormatMessageW GetCommandLineW GetCurrentDirectoryW GetDateFormatW GetDiskFreeSpaceExW GetDriveTypeW GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetLogicalDriveStringsW GetModuleHandleW GetNumberFormatW GetProcAddress GetStartupInfoW GetTimeFormatW GetVolumeInformationW GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapFree LocalFree MulDiv MultiByteToWideChar SetCurrentDirectoryW SetErrorMode lstrcmpW lstrcmpiW

mpr

WNetConnectionDialog WNetDisconnectDialog WNetGetLastErrorW

ole32

CoGetMalloc CoInitialize CoUninitialize

shell32

ord18 ord25 ExtractIconExW SHBindToParent SHFileOperationW SHGetDataFromIDListW SHGetDesktopFolder ShellAboutW ShellExecuteExW ShellExecuteW

shlwapi

StrFormatByteSizeW

ucrtbase

__p___argc __p___wargv __stdio_common_vswprintf _assert _configure_wide_argv _crt_atexit _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _wsplitpath exit memcmp memcpy memmove qsort setlocale tolower wcsrchr

user32

BeginDeferWindowPos BeginPaint CallNextHookEx CallWindowProcW CharUpperW CheckMenuItem CreatePopupMenu CreateWindowExW DefFrameProcW DefMDIChildProcW DeferWindowPos DestroyIcon DestroyWindow DialogBoxParamW DispatchMessageW DrawIconEx DrawTextW EndDeferWindowPos EndDialog EndPaint FillRect GetCapture GetClientRect GetCursorPos GetDC GetDlgItem GetFocus GetKeyState GetMenuItemCount GetMessageW GetParent GetScrollPos GetSubMenu GetSystemMetrics GetWindow GetWindowInfo GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextW InvalidateRect IsIconic IsWindowVisible IsZoomed LoadAcceleratorsW LoadCursorW LoadIconW LoadImageW LoadMenuW LoadStringW MapWindowPoints MessageBoxW MoveWindow PostQuitMessage RedrawWindow RegisterClassExW RegisterClassW RegisterClipboardFormatW ReleaseCapture ReleaseDC ScreenToClient ScrollWindowEx SendMessageW SetCapture SetCursor SetDlgItemTextW SetFocus SetWindowLongW SetWindowPlacement SetWindowTextW SetWindowsHookExW ShowWindow TrackPopupMenu TranslateAcceleratorW TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UpdateWindow WinHelpW wsprintfW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

44KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

52KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

228KB

Virtual Size

226KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

093d373c8f06913070cce24f7a8986e483a575972f13aad7dfebbafcaf3181eb

advapi32

comctl32

comdlg32

gdi32

kernel32

mpr

ole32

shell32

shlwapi

ucrtbase

user32

version

generic