7a12bbb1b519c5ddf335e0a3c9a7c3528b7b72933f9dd9ce75ecf4a8081bf0ef

Sharing

Copy URL Twitter E-mail

General

Target
7a12bbb1b519c5ddf335e0a3c9a7c3528b7b72933f9dd9ce75ecf4a8081bf0ef
Size 321KB
Sample260825-slvpgathqa
SHA256 7a12bbb1b519c5ddf335e0a3c9a7c3528b7b72933f9dd9ce75ecf4a8081bf0ef
MD5 1d74167090d7869a221ab745372544e9
SHA1 47e477e11df94e5c049a6c8e5889ad9addd19c56
SHA512 80b37682b341f7eeb9a83b79c65a4b20f205b3aa1bfd84416927944bc8e9f8a0d02251e80339107d567354df491be40782c9767c1f46aece4b6f01d886368303
SSDEEP 6144:pGH8PPl+fGjp5oaUlB8gEDDU/cczs8AVDUPQXakbyzEtTGP0eG5fuoD/UgmeA:QumcoRlB8gsA/bCVDPXzuzlcHWoTUgmv
TLSH
T17A6412523D95DCB3E71649784A33DB6BF7BE971012324A0777680EDE3B1738A8C1A512
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

installer

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a12bbb1b519c5ddf335e0a3c9a7c3528b7b72933f9dd9ce75ecf4a8081bf0ef

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

7a12bbb1b519c5ddf335e0a3c9a7c3528b7b72933f9dd9ce75ecf4a8081bf0ef

.exe 321KB

7a12bbb1b519c5ddf335e0a3c9a7c3528b7b72933f9dd9ce75ecf4a8081bf0ef

IMPHASH b4374c76ed35a89f9be7ffb9c6639f64
SHA256 7a12bbb1b519c5ddf335e0a3c9a7c3528b7b72933f9dd9ce75ecf4a8081bf0ef
MD5 1d74167090d7869a221ab745372544e9
SHA1 47e477e11df94e5c049a6c8e5889ad9addd19c56
SHA512 80b37682b341f7eeb9a83b79c65a4b20f205b3aa1bfd84416927944bc8e9f8a0d02251e80339107d567354df491be40782c9767c1f46aece4b6f01d886368303
SSDEEP 6144:pGH8PPl+fGjp5oaUlB8gEDDU/cczs8AVDUPQXakbyzEtTGP0eG5fuoD/UgmeA:QumcoRlB8gsA/bCVDPXzuzlcHWoTUgmv
TLSH
T17A6412523D95DCB3E71649784A33DB6BF7BE971012324A0777680EDE3B1738A8C1A512
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

16092

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA CloseHandle GetCommandLineA SetErrorMode lstrcpyA lstrcpynA lstrcatA LoadLibraryA lstrlenA WideCharToMultiByte VirtualAlloc VirtualProtect GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA GetSystemDirectoryA GetVersion lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA MulDiv WriteFile ReadFile SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GlobalSize GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx DestroyWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CLSIDFromString OleInitialize OleUninitialize CoTaskMemFree StringFromGUID2 CoCreateInstance

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

7a12bbb1b519c5ddf335e0a3c9a7c3528b7b72933f9dd9ce75ecf4a8081bf0ef

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic