53bb8dd2bcbe9dc751c82fc12dd6910d082404509b767ce206830dc3c6a25f86

Sharing

Copy URL Twitter E-mail

General

Target
53bb8dd2bcbe9dc751c82fc12dd6910d082404509b767ce206830dc3c6a25f86
Size 581KB
Sample260825-mg2dkazgnb
SHA256 53bb8dd2bcbe9dc751c82fc12dd6910d082404509b767ce206830dc3c6a25f86
MD5 29a02757b66165b4b1a158e8aea5217e
SHA1 a5e9643bd4009da3c1e167dac6606a9342cfcf1e
SHA512 9ac69b8ad4466c5d3ebed6f5ee187130481df40261cd56fc59cc8f6c9bb53646c955d3c357cd444efd8a2a8caf0a07780ddeaeab8abd2412fd02822617d89b5b
SSDEEP 12288:o0uBMJeAaqHM/EW4oCcPniyy5H/lCBSeBOhqYDc:iBygqSEW4oCmnWC9QwYo
TLSH
T1EBC4D54BC156A6EBE026807CA54AC934F036B807CF25EEE7F6706304AD2DF54ED69631
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53bb8dd2bcbe9dc751c82fc12dd6910d082404509b767ce206830dc3c6a25f86

File Explorer

53bb8dd2bcbe9dc751c82fc12dd6910d082404509b767ce206830dc3c6a25f86

.exe 581KB

53bb8dd2bcbe9dc751c82fc12dd6910d082404509b767ce206830dc3c6a25f86

IMPHASH ac675ff8e23c0f9eec4c0cccf7bba3e6
SHA256 53bb8dd2bcbe9dc751c82fc12dd6910d082404509b767ce206830dc3c6a25f86
MD5 29a02757b66165b4b1a158e8aea5217e
SHA1 a5e9643bd4009da3c1e167dac6606a9342cfcf1e
SHA512 9ac69b8ad4466c5d3ebed6f5ee187130481df40261cd56fc59cc8f6c9bb53646c955d3c357cd444efd8a2a8caf0a07780ddeaeab8abd2412fd02822617d89b5b
SSDEEP 12288:o0uBMJeAaqHM/EW4oCcPniyy5H/lCBSeBOhqYDc:iBygqSEW4oCmnWC9QwYo
TLSH
T1EBC4D54BC156A6EBE026807CA54AC934F036B807CF25EEE7F6706304AD2DF54ED69631
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54464

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

InitCommonControlsEx

comdlg32

GetOpenFileNameW

shell32

SHBrowseForFolderW ShellExecuteW SHGetPathFromIDListW

kernel32

FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx GetStringTypeW GetLocalTime GetProcessHeap LCMapStringW GetConsoleMode CreateProcessW GetDriveTypeW GetConsoleOutputCP CloseHandle DeleteFileW GetLastError Sleep GetFileAttributesW FindClose GetModuleFileNameW ExpandEnvironmentStringsW FindNextFileW FindFirstFileW CreateDirectoryW CreateFileW WriteConsoleW CopyFileW GetModuleHandleW SetStdHandle SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetStdHandle WriteFile IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW VirtualProtect LoadLibraryExW

user32

MessageBoxW CreateWindowExW SendMessageW SetWindowTextW RegisterClassExW DefWindowProcW DispatchMessageW TranslateMessage LoadIconW LoadCursorW PostQuitMessage UpdateWindow EnableWindow GetMessageW DestroyWindow ShowWindow

gdi32

CreateFontW GetStockObject

advapi32

ControlService CreateServiceW RegCloseKey QueryServiceStatus CloseServiceHandle OpenSCManagerW AllocateAndInitializeSid RegCreateKeyExW DeleteService RegQueryValueExW RegSetValueExW FreeSid StartServiceW CheckTokenMembership RegOpenKeyExW ChangeServiceConfigW RegDeleteValueW OpenServiceW

ole32

CoTaskMemFree

Name

.text

Size

141KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

72KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.mapo

Size

351KB

Virtual Size

352KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

53bb8dd2bcbe9dc751c82fc12dd6910d082404509b767ce206830dc3c6a25f86

comctl32

comdlg32

shell32

kernel32

user32

gdi32

advapi32

ole32

generic