977d734eb2b3c8fb4222c8a27e57cf44e787bda6067f9deaaa4a222f99064350

General

Target
977d734eb2b3c8fb4222c8a27e57cf44e787bda6067f9deaaa4a222f99064350
Size 184KB
Sample260830-kpp96a1blh
SHA256 977d734eb2b3c8fb4222c8a27e57cf44e787bda6067f9deaaa4a222f99064350
MD5 b63e1f295eff5de28769a0004d4fcddb
SHA1 481c75b6e6e76a244260070334c4b7a3a263ea07
SHA512 5f4cdf277e2dd14fa9c13837c7bd5d8b6feb3db9125945023e62557c8b382a350e1d502378ba0bdd0900d5b6adf011685830c7d24667538e64e7fb0d3c5dbb4a
SSDEEP 1536:C0ZZnAEjEIZvumULmj4wrraK5dZ4Ltta9Km/ec3DtAL6bmZ4bXSjrAE+fySPoqRI:XnnAQVG/LytaKItS/fiLKS+f5Aq7i
TLSH
T14C04C0D6363F10B3ED2DADB300634D36F2AF5EA319D2DA8A900485B47E62251CDA6753
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
977d734eb2b3c8fb4222c8a27e57cf44e787bda6067f9deaaa4a222f99064350

File Explorer

977d734eb2b3c8fb4222c8a27e57cf44e787bda6067f9deaaa4a222f99064350

.exe 184KB

977d734eb2b3c8fb4222c8a27e57cf44e787bda6067f9deaaa4a222f99064350

IMPHASH 093a51e0b7dcb2466b7edfd78d191aa0
SHA256 977d734eb2b3c8fb4222c8a27e57cf44e787bda6067f9deaaa4a222f99064350
MD5 b63e1f295eff5de28769a0004d4fcddb
SHA1 481c75b6e6e76a244260070334c4b7a3a263ea07
SHA512 5f4cdf277e2dd14fa9c13837c7bd5d8b6feb3db9125945023e62557c8b382a350e1d502378ba0bdd0900d5b6adf011685830c7d24667538e64e7fb0d3c5dbb4a
SSDEEP 1536:C0ZZnAEjEIZvumULmj4wrraK5dZ4Ltta9Km/ec3DtAL6bmZ4bXSjrAE+fySPoqRI:XnnAQVG/LytaKItS/fiLKS+f5Aq7i
TLSH
T14C04C0D6363F10B3ED2DADB300634D36F2AF5EA319D2DA8A900485B47E62251CDA6753
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LeaveCriticalSection FindClose OpenEventW GetLocalTime InterlockedCompareExchange GetStringTypeW FindNextFileW GetLongPathNameW GetConsoleMode GlobalSize GetProcAddress HeapAlloc MultiByteToWideChar GetACP FindResourceW ResumeThread GetModuleFileNameW TlsAlloc UnhandledExceptionFilter GetTimeFormatW LoadLibraryA VirtualAlloc lstrcpynW

user32

InsertMenuW SetScrollRange PostMessageW CharLowerW EnableMenuItem GetSystemMetrics GetDlgItemTextW GetKeyboardState InflateRect LoadIconW CloseClipboard DrawFrameControl CreateDialogParamW RealChildWindowFromPoint CreateCaret ScreenToClient GetWindowRect ShowScrollBar GetScrollPos SetFocus RemoveMenu CreateCursor

gdi32

AddFontResourceW GetTextExtentPoint32W CreateCompatibleBitmap RemoveFontResourceW EndDoc BitBlt CreateFontIndirectW DeleteDC GetROP2 CreatePen OffsetWindowOrgEx SelectObject DeleteObject CreateBitmap GetTextMetricsW

comdlg32

ChooseColorW GetOpenFileNameW PrintDlgW GetSaveFileNameW

advapi32

IsTextUnicode RegQueryInfoKeyW RegOpenKeyExW RegCreateKeyExW RegSetValueExW RegDeleteValueW RegEnumKeyExW RegDeleteKeyW

ole32

OleDuplicateData

Name

.text

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

87KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

79KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

trjwwuy

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

977d734eb2b3c8fb4222c8a27e57cf44e787bda6067f9deaaa4a222f99064350

kernel32

user32

gdi32

comdlg32

advapi32

ole32

generic