3f61d465d830e415d95e546b3e4e6bf625707327bc2a076a1614b27efcb4ac23

Sharing

Copy URL Twitter E-mail

General

Target
3f61d465d830e415d95e546b3e4e6bf625707327bc2a076a1614b27efcb4ac23
Size 7.6MB
Sample260824-svjcsszend
SHA256 3f61d465d830e415d95e546b3e4e6bf625707327bc2a076a1614b27efcb4ac23
MD5 97ce1ef57204b32c38209aaaa8df5471
SHA1 faa099ba0757dc025242ed50db1d7f07f7937f90
SHA512 dcc30e16d66ea06802661ad746f690192872ab1c5ad84ed46c8d4f78c25de6af2c80d188c56acd9023e0eb4a0e0fe13dffe765acc3dc3216fcf63daef9f069b9
SSDEEP 98304:tP3kSayWW4K0wmt9tLvlaK0HxGGW+WzeCSEIrzMbhoX8FOFJ5cCRYZ8:tP3koxmtvLvlF+W+WyNAb68ZcYZ8
TLSH
T160863310F497C535E821097E5862E77D0018AFED01B78A3A376CB66B1CB639B1536BCB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f61d465d830e415d95e546b3e4e6bf625707327bc2a076a1614b27efcb4ac23

File Explorer

3f61d465d830e415d95e546b3e4e6bf625707327bc2a076a1614b27efcb4ac23

.exe 7.6MB

3f61d465d830e415d95e546b3e4e6bf625707327bc2a076a1614b27efcb4ac23

IMPHASH fbc11d4e543714974de1fab064ff5746
SHA256 3f61d465d830e415d95e546b3e4e6bf625707327bc2a076a1614b27efcb4ac23
MD5 97ce1ef57204b32c38209aaaa8df5471
SHA1 faa099ba0757dc025242ed50db1d7f07f7937f90
SHA512 dcc30e16d66ea06802661ad746f690192872ab1c5ad84ed46c8d4f78c25de6af2c80d188c56acd9023e0eb4a0e0fe13dffe765acc3dc3216fcf63daef9f069b9
SSDEEP 98304:tP3kSayWW4K0wmt9tLvlaK0HxGGW+WzeCSEIrzMbhoX8FOFJ5cCRYZ8:tP3koxmtvLvlF+W+WyNAb68ZcYZ8
TLSH
T160863310F497C535E821097E5862E77D0018AFED01B78A3A376CB66B1CB639B1536BCB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6120425

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FlushFileBuffers SetFilePointer WriteFile GetCurrentProcess GetProcessVersion GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GetLastError SetLastError MultiByteToWideChar WideCharToMultiByte InterlockedIncrement WritePrivateProfileStringA GlobalFlags GetVersion lstrlenA lstrcpynA lstrcpyA lstrcatA SetErrorMode TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle GlobalUnlock GlobalFree DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalFree LocalAlloc CloseHandle GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId VirtualFree VirtualAlloc GetCPInfo GetOEMCP RtlUnwind TerminateProcess RaiseException HeapSize GetACP SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetEnvironmentVariableA RtlMoveMemory GetVersionExA HeapDestroy HeapCreate IsBadWritePtr LCMapStringW SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW IsBadCodePtr SetStdHandle LCMapStringA FreeLibrary GetModuleFileNameA GetCommandLineA IsBadReadPtr HeapFree HeapReAlloc HeapAlloc ExitProcess GetModuleHandleA GetProcessHeap GetProcAddress LoadLibraryA lstrcpyn InterlockedDecrement

user32

DispatchMessageA DestroyMenu wsprintfA MessageBoxA GetMessageA TranslateMessage LoadStringA PeekMessageA PostQuitMessage PostMessageA GetSysColorBrush LoadCursorA LoadIconA MapWindowPoints GetSysColor AdjustWindowRectEx GetClientRect CopyRect GetTopWindow GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetSubMenu GetMenuItemID DestroyWindow CreateWindowExA GetClassLongA SetPropA GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow RegisterWindowMessageA SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics SetFocus ShowWindow SetWindowPos SetWindowLongA GetDlgItem GrayStringA DrawTextA TabbedTextOutA ReleaseDC GetDC GetMenuItemCount GetWindowTextA SetWindowTextA ClientToScreen GetWindow GetDlgCtrlID GetWindowRect PtInRect GetClassNameA UnregisterClassA UnhookWindowsHookEx GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible GetCursorPos SetWindowsHookExA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA EnableWindow SetCursor SendMessageA

gdi32

TextOutA RectVisible PtVisible GetDeviceCaps ExtTextOutA GetClipBox ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetTextColor SetBkColor SelectObject RestoreDC SaveDC DeleteDC DeleteObject CreateBitmap GetStockObject GetObjectA Escape

winspool.drv

OpenPrinterA ClosePrinter DocumentPropertiesA

advapi32

RegCloseKey RegCreateKeyExA RegOpenKeyExA RegSetValueExA

comctl32

ord17

Name

[000000]

Size

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

[000000]

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

[000000]

Size

115KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

[000000]

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

[000000]

Size

3.3MB

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

[000000]

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

3f61d465d830e415d95e546b3e4e6bf625707327bc2a076a1614b27efcb4ac23

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

generic