25b84cc934ecd00b54880578b5e419a112f7182442f604206b37ea854061301b

Sharing

Copy URL Twitter E-mail

General

Target
25b84cc934ecd00b54880578b5e419a112f7182442f604206b37ea854061301b
Size 2.4MB
Sample260826-njfejsda44
SHA256 25b84cc934ecd00b54880578b5e419a112f7182442f604206b37ea854061301b
MD5 378e3af1d3b4bcd06fabf7e32f9007da
SHA1 2b1475f45c9876233b0f0da78813ff908eba0b63
SHA512 e8d6e619280e9e3931943ecd1510647661f0ed0e7e49619955ce4f88ee9a5b4ede20203def2a44bb027614c66aa73fc673793363fd6e9bffcff0e7048c6e6276
SSDEEP 49152:zxWrJegFs8EmU99ou7fZeJV2kkElBLLivKhqg63Co5VnH7OWbrDf6IteyacOE:YrJegFslT77xi8kB2uabOWrf6/2O
TLSH
T134B5DF04B912D03DDC9608BACD3DC668357879F94BA444F773D90FBA5E716E2AB32206
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25b84cc934ecd00b54880578b5e419a112f7182442f604206b37ea854061301b

File Explorer

25b84cc934ecd00b54880578b5e419a112f7182442f604206b37ea854061301b

.exe 2.4MB

25b84cc934ecd00b54880578b5e419a112f7182442f604206b37ea854061301b

IMPHASH 967f3194c92a8705d2e0263eed12e3b1
SHA256 25b84cc934ecd00b54880578b5e419a112f7182442f604206b37ea854061301b
MD5 378e3af1d3b4bcd06fabf7e32f9007da
SHA1 2b1475f45c9876233b0f0da78813ff908eba0b63
SHA512 e8d6e619280e9e3931943ecd1510647661f0ed0e7e49619955ce4f88ee9a5b4ede20203def2a44bb027614c66aa73fc673793363fd6e9bffcff0e7048c6e6276
SSDEEP 49152:zxWrJegFs8EmU99ou7fZeJV2kkElBLLivKhqg63Co5VnH7OWbrDf6IteyacOE:YrJegFslT77xi8kB2uabOWrf6/2O
TLSH
T134B5DF04B912D03DDC9608BACD3DC668357879F94BA444F773D90FBA5E716E2AB32206
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

265437

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LockFile MultiByteToWideChar MulDiv GetSystemDefaultLangID ReadProcessMemory GetCurrentProcessId VirtualProtectEx GetProcAddress GetSystemDirectoryW GetVersionExW GetPrivateProfileStringW GetPrivateProfileIntW lstrcmpW GetModuleFileNameW FindClose FindNextFileW FindFirstFileW WritePrivateProfileStringW IsBadReadPtr WideCharToMultiByte Thread32Next SuspendThread OpenThread Thread32First CreateToolhelp32Snapshot GetCurrentThreadId InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetExitCodeProcess WaitForSingleObject Sleep DeleteFileW CreateThread UnmapViewOfFile MapViewOfFile CreateFileMappingW DeleteCriticalSection RaiseException SetLastError FlushInstructionCache GetCurrentProcess lstrcmpiW CompareStringW FreeLibrary LoadLibraryExW LoadLibraryA InitializeCriticalSectionAndSpinCount FlushFileBuffers SetStdHandle GetLocaleInfoA GetFileSize GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetConsoleMode GetConsoleCP SetFilePointer GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter GetStartupInfoA GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetStdHandle GetModuleHandleA ExitProcess HeapSize HeapReAlloc VirtualAlloc VirtualFree HeapCreate IsValidCodePage GetOEMCP GetACP GetCPInfo TlsFree TlsSetValue TlsAlloc TlsGetValue GetStartupInfoW HeapAlloc HeapFree IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlUnwind WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile UnlockFile InterlockedIncrement SetEndOfFile GetProcessHeap CreateFileA InterlockedCompareExchange IsProcessorFeaturePresent lstrlenA OutputDebugStringW DebugBreak CreateFileW MoveFileExW WriteFile GetModuleHandleW FindResourceW SizeofResource LoadResource LockResource CreateProcessW GetLastError VirtualAllocEx WriteProcessMemory LoadLibraryW QueueUserAPC ResumeThread TerminateProcess CloseHandle InterlockedDecrement lstrlenW GetCommandLineW LocalFree

user32

SystemParametersInfoW GetWindowTextLengthW SetWindowLongW OffsetRect LoadCursorW ScreenToClient GetCursorPos GetCapture ReleaseCapture SetFocus CreateWindowExW GetDlgCtrlID GetFocus GetSysColor IsWindowEnabled FillRect DrawFocusRect CallWindowProcW GetClassNameW SetCapture PtInRect SetCursor InvalidateRect EndDialog DialogBoxParamW IsWindow SetRectEmpty DestroyWindow DefWindowProcW MessageBoxW PostQuitMessage CheckDlgButton ClientToScreen TrackPopupMenu IsDlgButtonChecked GetActiveWindow UpdateWindow GetParent GetWindow GetWindowRect GetWindowLongW MonitorFromWindow GetMonitorInfoW GetClientRect MapWindowPoints SetWindowPos LoadMenuW GetSubMenu GetSystemMetrics LoadImageW RegisterWindowMessageW IsDialogMessageW GetClassInfoW RegisterClassW ShowWindow PeekMessageW GetMessageW TranslateMessage DispatchMessageW CharLowerW PostMessageW wsprintfW AppendMenuW CheckMenuItem GetDlgItem ModifyMenuW SetWindowTextW SetDlgItemTextW BeginPaint SetRect DrawTextW EndPaint GetWindowTextW EnumChildWindows ReleaseDC GetDC SendMessageW CharNextW CharUpperW LoadStringW CreateDialogParamW UnregisterClassA

gdi32

GetDeviceCaps EnumFontFamiliesExW DeleteObject CreateFontW SetTextColor SelectObject DeleteDC CreateFontIndirectW GetStockObject GetObjectW SetBkMode

comdlg32

ChooseFontW GetOpenFileNameW

advapi32

RegDeleteValueW RegCloseKey RegQueryValueExW RegQueryInfoKeyW RegSetValueExW RegEnumKeyExW RegCreateKeyExW RegOpenKeyExW RegDeleteKeyW

shell32

ShellExecuteW CommandLineToArgvW

ole32

CoTaskMemFree CoCreateInstance CoInitialize CoUninitialize CoTaskMemAlloc CoTaskMemRealloc

oleaut32

SysAllocString SysFreeString VarUI4FromStr

shlwapi

SHGetValueW PathFindFileNameW SHSetValueW PathRemoveFileSpecW PathFileExistsW

comctl32

_TrackMouseEvent InitCommonControlsEx

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Sharing

General

Malware Config

Signatures

File Explorer

25b84cc934ecd00b54880578b5e419a112f7182442f604206b37ea854061301b

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

version

generic