b2cad5a4f2e965e388c07ac2f12aaa11d0bb4ccf2d90242a2e1c9f11ca88299d

Sharing

Copy URL Twitter E-mail

General

Target
b2cad5a4f2e965e388c07ac2f12aaa11d0bb4ccf2d90242a2e1c9f11ca88299d
Size 2.1MB
Sample260827-l9k2lsfr21
SHA256 b2cad5a4f2e965e388c07ac2f12aaa11d0bb4ccf2d90242a2e1c9f11ca88299d
MD5 cc873a332d01b1e74887dff897cd40bc
SHA1 2b77f505e4872a0d5d22f39f6cba76e059737960
SHA512 f845b749b80be31317285a16c327678c882b5d0ac5491e4b41b0aa5d582746c70c089bc067cff29b5b49cd9327cdc04a5696b0325cebee71906eef5a98a428ac
SSDEEP 24576:t9JJd3n+Otv2K5iP7iJJRbK9JJd3n+Otv2K5iP7iQ96H0c2ni:tOyCPO3pKOyCPOdHd8i
TLSH
T105A5FA4192830093ED117930DC5E6B4802516FB83C6EE3B9AD0BFCB5BA31BB5D4F65A9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2cad5a4f2e965e388c07ac2f12aaa11d0bb4ccf2d90242a2e1c9f11ca88299d

File Explorer

b2cad5a4f2e965e388c07ac2f12aaa11d0bb4ccf2d90242a2e1c9f11ca88299d

.exe 2.1MB

b2cad5a4f2e965e388c07ac2f12aaa11d0bb4ccf2d90242a2e1c9f11ca88299d

IMPHASH 4c8e7761a70fbdda568fc3cb9acb65c6
SHA256 b2cad5a4f2e965e388c07ac2f12aaa11d0bb4ccf2d90242a2e1c9f11ca88299d
MD5 cc873a332d01b1e74887dff897cd40bc
SHA1 2b77f505e4872a0d5d22f39f6cba76e059737960
SHA512 f845b749b80be31317285a16c327678c882b5d0ac5491e4b41b0aa5d582746c70c089bc067cff29b5b49cd9327cdc04a5696b0325cebee71906eef5a98a428ac
SSDEEP 24576:t9JJd3n+Otv2K5iP7iJJRbK9JJd3n+Otv2K5iP7iQ96H0c2ni:tOyCPO3pKOyCPOdHd8i
TLSH
T105A5FA4192830093ED117930DC5E6B4802516FB83C6EE3B9AD0BFCB5BA31BB5D4F65A9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

84896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

CINTSETP.pdb

kernel32

CreateDirectoryW DeleteFileW RemoveDirectoryW FreeResource SizeofResource LockResource LoadResource GetCurrentProcess CreateMutexW WritePrivateProfileStringW ExpandEnvironmentStringsW lstrcpynA lstrlenA GetModuleHandleA QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess SetUnhandledExceptionFilter GetPrivateProfileSectionW SetLastError WritePrivateProfileSectionW MoveFileExW GetFileAttributesW SetFileAttributesW GetLastError FormatMessageW lstrcmpiW CloseHandle ReadFile WriteFile HeapReAlloc CreateFileW FindResourceW GetModuleFileNameW GetFullPathNameW ReleaseMutex GetProcessHeap HeapAlloc HeapFree lstrcmpW CopyFileW InterlockedDecrement MultiByteToWideChar GetStartupInfoA LoadLibraryW GetWindowsDirectoryW FreeLibrary GetSystemDirectoryW lstrcpynW GetVersionExW GetTickCount lstrlenW WideCharToMultiByte GetCommandLineW GetProcAddress InterlockedIncrement VirtualProtect GetUserDefaultLangID

user32

GetWindowTextW DefWindowProcW CallWindowProcW ActivateKeyboardLayout SetWindowLongW SetPropW RemovePropW IsDlgButtonChecked CheckDlgButton SetWindowPos EnableWindow GetKeyboardLayout ExitWindowsEx UnloadKeyboardLayout LoadKeyboardLayoutW GetKeyboardLayoutList SystemParametersInfoW MessageBoxW LoadStringW DialogBoxParamW SendMessageW wsprintfW EndDialog SetWindowTextW UpdateWindow GetDlgItem ShowWindow GetParent PostMessageW GetPropW LoadIconW

advapi32

RegEnumValueW RegQueryValueExW RegOpenKeyExW RegEnumKeyExW RegSetValueExW RegUnLoadKeyW RegLoadKeyW RegDeleteValueW RegCreateKeyExW RegDeleteKeyW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken RegCloseKey

gdi32

DeleteDC GetDeviceCaps CreateDCW

imm32

ImmGetIMEFileNameW ImmSetHotKey ImmGetHotKey ImmInstallIMEW ImmNotifyIME ImmReleaseContext ImmGetCompositionStringW ImmGetContext ImmRegisterWordW ImmEnumRegisterWordW ImmGetConversionListW ImmSetConversionStatus ImmGetConversionStatus ImmIsIME

msvcrt

??3@YAXPAX@Z ??2@YAPAXI@Z __CxxFrameHandler memmove wcsncat _CxxThrowException wcstok _wcsrev _wcsupr _c_exit _exit _XcptFilter _cexit exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 ??1type_info@@UAE@XZ __dllonexit _onexit _controlfp ?terminate@@YAXXZ wcsstr

Sharing

General

Malware Config

Signatures

File Explorer

b2cad5a4f2e965e388c07ac2f12aaa11d0bb4ccf2d90242a2e1c9f11ca88299d

kernel32

user32

advapi32

gdi32

imm32

msvcrt

generic