245e7a01cb729a20743f2cd3363f1c76fa8e0fbe8eefa53513dbc6008faf6e50

Sharing

Copy URL Twitter E-mail

General

Target
245e7a01cb729a20743f2cd3363f1c76fa8e0fbe8eefa53513dbc6008faf6e50
Size 569KB
Sample260825-2ev64azcnf
SHA256 245e7a01cb729a20743f2cd3363f1c76fa8e0fbe8eefa53513dbc6008faf6e50
MD5 88be6bb4fcf5256773ff9fa0bdc887cf
SHA1 74e259f1539434b52cd61959bb9a1a59e6156a97
SHA512 846af65aa3d13eead8f64a4dd7fb7e5bea4cfca413fc3968d8ebc84194dc2f0fcba3a5dd2a888d45a0ae6f8c5c75fb2f2387376418c72f6edb67528f177bd6f2
SSDEEP 6144:3qZmw71gor303cKFD1P5RtZPSspCxfGR2PKgZEeGdzvZYSju6xKHt:SOc303cKFDB5RtZPSsp+fGRvgZDaCHt
TLSH
T147C4ED01A3FA8904F5F3BB7869BA03D55E76BD656F34C24E4B09654E09B0EA0DE34723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
245e7a01cb729a20743f2cd3363f1c76fa8e0fbe8eefa53513dbc6008faf6e50

File Explorer

245e7a01cb729a20743f2cd3363f1c76fa8e0fbe8eefa53513dbc6008faf6e50

.exe 569KB

245e7a01cb729a20743f2cd3363f1c76fa8e0fbe8eefa53513dbc6008faf6e50

IMPHASH 53d99b507b6f2cf8aaa2af20c882b038
SHA256 245e7a01cb729a20743f2cd3363f1c76fa8e0fbe8eefa53513dbc6008faf6e50
MD5 88be6bb4fcf5256773ff9fa0bdc887cf
SHA1 74e259f1539434b52cd61959bb9a1a59e6156a97
SHA512 846af65aa3d13eead8f64a4dd7fb7e5bea4cfca413fc3968d8ebc84194dc2f0fcba3a5dd2a888d45a0ae6f8c5c75fb2f2387376418c72f6edb67528f177bd6f2
SSDEEP 6144:3qZmw71gor303cKFD1P5RtZPSspCxfGR2PKgZEeGdzvZYSju6xKHt:SOc303cKFDB5RtZPSsp+fGRvgZDaCHt
TLSH
T147C4ED01A3FA8904F5F3BB7869BA03D55E76BD656F34C24E4B09654E09B0EA0DE34723
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

71344

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

R:\buildbot\output-VS-amd64\msvc_pdb\taskmgr.pdb

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW AllocateAndInitializeSid CopySid EqualSid FreeSid GetLengthSid GetTokenInformation LookupAccountSidW OpenProcessToken GetSecurityInfo AdjustTokenPrivileges LookupPrivilegeValueW GetUserNameW RegCreateKeyExW RegSetValueExW

user32

IsDlgButtonChecked MessageBoxW GetWindowThreadProcessId CascadeWindows CheckMenuRadioItem DestroyMenu EnableMenuItem EndTask EnumDisplaySettingsW EnumWindows LoadStringW GetMenuStringW GetMenuItemCount FindWindowW DrawMenuBar DispatchMessageW GetClassLongPtrW DefWindowProcW CreatePopupMenu CreateDialogParamW BringWindowToTop AppendMenuW LockWorkStation ExitWindowsEx GetWindowPlacement RemoveMenu GetShellWindow CharUpperW GetGuiResources InsertMenuW CheckMenuItem ReleaseDC GetSystemMetrics GetDC FillRect InflateRect EndPaint DrawTextW CallWindowProcW BeginPaint wsprintfW TrackPopupMenu TileWindows SwitchToThisWindow ShowWindowAsync SetWindowTextW SetWindowPos SetWindowLongPtrW SetMenuDefaultItem SendMessageW SendMessageTimeoutW PostThreadMessageW MapWindowPoints LoadMenuW IsWindowVisible IsWindow GetClientRect DialogBoxParamW EnableWindow EndDialog GetDlgItem GetMenuState LoadIconW GetAsyncKeyState GetCursorPos GetKeyState GetMenu GetMessageW IsZoomed LoadBitmapW DestroyIcon CreateIconIndirect TranslateMessage TrackPopupMenuEx ShowWindow SetTimer SetForegroundWindow SetFocus PostMessageW PeekMessageW OpenIcon MoveWindow ModifyMenuW DeleteMenu KillTimer InvalidateRect GetWindowTextW GetWindowRect GetWindow GetWindowLongPtrW GetSubMenu CheckDlgButton GetParent

gdi32

ExtTextOutW SaveDC RestoreDC ExcludeClipRect SetBkColor MoveToEx LineTo DeleteObject DeleteDC CreateSolidBrush CreatePen CreateCompatibleDC CreateCompatibleBitmap BitBlt SetTextColor SelectObject GetStockObject

shell32

Shell_NotifyIconW ShellAboutW ShellExecuteExW ShellExecuteW

shlwapi

StrFormatByteSizeW

comctl32

CreateStatusWindowW InitCommonControls ImageList_Remove ImageList_ReplaceIcon ImageList_Create

msvcrt

signal _wcmdln __winitenv _initterm _fpreset _cexit exit __set_app_type __wgetmainargs _amsg_exit __setusermatherr malloc __lconv_init wcschr _snwprintf _wcsnicmp wcsstr _vsnwprintf _ultow wcscat memcpy labs _wcsicmp wcsncpy wcslen wcscpy wcscmp memset

kernel32

GetTickCount GetSystemTimeAsFileTime GetCurrentThreadId Sleep SetUnhandledExceptionFilter GetStartupInfoW WaitForSingleObject SetProcessShutdownParameters lstrlenW LoadLibraryA GetExitCodeThread GetCurrentProcessId FormatMessageW CreateMutexW GetLastError GetCurrentProcess LoadLibraryW GetEnvironmentVariableW FreeLibrary GetNumberFormatW GetLocaleInfoW QueryDosDeviceW GetSystemInfo GetSystemDirectoryW GetPriorityClass GetExitCodeProcess SetPriorityClass ReadProcessMemory LocalFree LeaveCriticalSection IsWow64Process InitializeCriticalSection GetProcessIoCounters EnterCriticalSection DeleteCriticalSection CreateToolhelp32Snapshot Process32NextW Process32FirstW TerminateProcess CreateProcessW CreateEventW HeapFree HeapAlloc GetProcessHeap GetProcAddress GetModuleHandleW CreateThread SetProcessAffinityMask OpenProcess GetProcessAffinityMask CloseHandle QueryPerformanceCounter TlsGetValue GetModuleHandleA

ntdll

RtlNtStatusToDosError NtSetSystemPowerState NtShutdownSystem NtQuerySystemInformation NtQueryInformationProcess

Sharing

General

Malware Config

Signatures

File Explorer

245e7a01cb729a20743f2cd3363f1c76fa8e0fbe8eefa53513dbc6008faf6e50

advapi32

user32

gdi32

shell32

shlwapi

comctl32

msvcrt

kernel32

ntdll

generic