423ba3a3d1820bc16e66fce8754cbc4ff1fe3097786b4311b971ce06f09dbd7d

Sharing

Copy URL Twitter E-mail

General

Target
423ba3a3d1820bc16e66fce8754cbc4ff1fe3097786b4311b971ce06f09dbd7d
Size 63KB
Sample260830-3rsgeabl7w
SHA256 423ba3a3d1820bc16e66fce8754cbc4ff1fe3097786b4311b971ce06f09dbd7d
MD5 26be3c424575aea76c3452f83aed060d
SHA1 1fa535be9222433484b7ef4ba8ecb2aad3b49a81
SHA512 7409794eccb4ba0aec1c882970d4472b678dae8f6a56a2d02c7544166017f351c5f724161b52c70ca4783ee5a561258c55863961259d6ba695bf4ddaa314475d
SSDEEP 384:IV/FXYxGIBzCLstZ7JKXoWN1oRKvSGceV/QD2wY:IV/FgystZ7JAoWNUcYejwY
TLSH
T1425397A9DAF50656E2F247346BBB17712639BE13D6B2D30F0A1CE5291E307914C36F22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
423ba3a3d1820bc16e66fce8754cbc4ff1fe3097786b4311b971ce06f09dbd7d

File Explorer

423ba3a3d1820bc16e66fce8754cbc4ff1fe3097786b4311b971ce06f09dbd7d

.exe 63KB

423ba3a3d1820bc16e66fce8754cbc4ff1fe3097786b4311b971ce06f09dbd7d

IMPHASH bc99ac28cd22776acce0d93f5c885753
SHA256 423ba3a3d1820bc16e66fce8754cbc4ff1fe3097786b4311b971ce06f09dbd7d
MD5 26be3c424575aea76c3452f83aed060d
SHA1 1fa535be9222433484b7ef4ba8ecb2aad3b49a81
SHA512 7409794eccb4ba0aec1c882970d4472b678dae8f6a56a2d02c7544166017f351c5f724161b52c70ca4783ee5a561258c55863961259d6ba695bf4ddaa314475d
SSDEEP 384:IV/FXYxGIBzCLstZ7JKXoWN1oRKvSGceV/QD2wY:IV/FgystZ7JAoWNUcYejwY
TLSH
T1425397A9DAF50656E2F247346BBB17712639BE13D6B2D30F0A1CE5291E307914C36F22
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11600

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

comctl32

InitCommonControls

comdlg32

ChooseFontW

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateEllipticRgn CreateFontIndirectW CreatePen DeleteDC DeleteObject Ellipse GetStockObject GetTextExtentPointW LineTo MoveToEx OffsetRgn OffsetWindowOrgEx SelectObject SetBkColor SetBkMode SetTextColor SetViewportOrgEx TextOutW

kernel32

GetCommandLineA GetDateFormatW GetLocalTime GetModuleHandleA GetStartupInfoA GetTimeFormatW

shell32

ShellAboutW

ucrtbase

__p___argc __p___argv _configure_narrow_argv _crt_atexit _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type cos cosf exit sin sinf

user32

BeginPaint CheckMenuItem CheckMenuRadioItem CreateWindowExW DefWindowProcW DispatchMessageW EnableMenuItem EndPaint FillRect GetDC GetMessageW GetSubMenu GetSysColor GetSysColorBrush GetWindowLongW GetWindowRect InvalidateRect KillTimer LoadCursorW LoadIconW LoadMenuW LoadStringW MapWindowPoints MessageBoxW PostQuitMessage RegisterClassW ReleaseDC SetMenu SetTimer SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextW ShowWindow TranslateMessage UpdateWindow

Name

.text

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

816B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

423ba3a3d1820bc16e66fce8754cbc4ff1fe3097786b4311b971ce06f09dbd7d

comctl32

comdlg32

gdi32

kernel32

shell32

ucrtbase

user32

generic