8709a03df06e34e75ec609200a08f3b64470d539c66feb6afd847d5f607cbf37

Sharing

Copy URL Twitter E-mail

General

Target
8709a03df06e34e75ec609200a08f3b64470d539c66feb6afd847d5f607cbf37
Size 3.9MB
Sample260831-fla9lsdn8t
SHA256 8709a03df06e34e75ec609200a08f3b64470d539c66feb6afd847d5f607cbf37
MD5 6eb2715996f99c51506137a89aca1348
SHA1 ddabb5c6727b1af3ac34137659e60a9fa139eb29
SHA512 9de6a901cdf7affb43ecb4d22a8d7e871ab7ff8f87aa5da8bca7cce0c4fe7811abf58e8ba0564fdb2d81096c314329ee311001d141393ba0b8d9f8d47436ddfb
SSDEEP 98304:YHGjH17HQHIHCHWHQHqksJF7oBPB1qlpzOq4aA5SQoz8d11:zms77MIqT11
TLSH
T113164B91790CE6CBD08A167DD567CEE2551D0EB9CB210843B96CBCBBBFB2CC22596C14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8709a03df06e34e75ec609200a08f3b64470d539c66feb6afd847d5f607cbf37

File Explorer

8709a03df06e34e75ec609200a08f3b64470d539c66feb6afd847d5f607cbf37

.exe 3.9MB

8709a03df06e34e75ec609200a08f3b64470d539c66feb6afd847d5f607cbf37

IMPHASH 83bb8758ea08e9b602a1dd6621ef3a5d
SHA256 8709a03df06e34e75ec609200a08f3b64470d539c66feb6afd847d5f607cbf37
MD5 6eb2715996f99c51506137a89aca1348
SHA1 ddabb5c6727b1af3ac34137659e60a9fa139eb29
SHA512 9de6a901cdf7affb43ecb4d22a8d7e871ab7ff8f87aa5da8bca7cce0c4fe7811abf58e8ba0564fdb2d81096c314329ee311001d141393ba0b8d9f8d47436ddfb
SSDEEP 98304:YHGjH17HQHIHCHWHQHqksJF7oBPB1qlpzOq4aA5SQoz8d11:zms77MIqT11
TLSH
T113164B91790CE6CBD08A167DD567CEE2551D0EB9CB210843B96CBCBBBFB2CC22596C14
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

439744

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _except_handler3 memset

imm32

ImmReleaseContext

comctl32

ImageList_GetIconSize ImageList_DrawEx ImageList_Destroy ImageList_GetImageCount InitCommonControlsEx ImageList_DragLeave _TrackMouseEvent

version

VerQueryValueW

setupapi

SetupPromptReboot SetupTermDefaultQueueCallback

kernel32

CreateDirectoryW CreateEventW CreateFileA CreateFileMappingW CreateFileW CreateMutexW CreateProcessW CreateThread DeleteCriticalSection DeleteFileW DeviceIoControl DosDateTimeToFileTime DuplicateHandle EnumResourceLanguagesW EnumResourceNamesW EnumResourceTypesW EnumSystemLocalesA ExitThread ExpandEnvironmentStringsW FileTimeToDosDateTime FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileW FindResourceW FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeResource GetACP GetCommandLineW GetConsoleCP GetConsoleMode GetConsoleOutputCP GetCPInfo GetCurrentDirectoryW GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatA GetDiskFreeSpaceExW GetDriveTypeW GetEnvironmentStringsW GetExitCodeThread GetFileAttributesW GetFileInformationByHandle GetFileTime GetFileType GetFullPathNameW GetLastError GetLocaleInfoA GetLocaleInfoW GetLocalTime GetLogicalDrives GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetNumberFormatW GetOEMCP GetPrivateProfileIntW GetProcAddress GetProcessHeap GetProfileIntW GetStartupInfoW GetStdHandle GetStringTypeA GetStringTypeExW GetStringTypeW GetSystemDefaultLangID CompareStringA GetSystemTime GetSystemTimeAsFileTime GetThreadLocale GetTimeFormatA GetTimeZoneInformation GetUserDefaultLCID GetVersionExA GetVersionExW GetVolumeInformationW GetWindowsDirectoryW GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GlobalFindAtomW GlobalFlags GlobalFree GlobalGetAtomNameW ConvertDefaultLocale GlobalLock GlobalReAlloc GlobalUnlock HeapAlloc HeapCreate HeapFree HeapReAlloc HeapSize InterlockedCompareExchange InterlockedDecrement InterlockedExchange InterlockedIncrement IsValidCodePage IsValidLocale LCMapStringA LCMapStringW LoadLibraryA LoadLibraryW CompareFileTime LocalAlloc LocalFree LocalReAlloc LockFile LockResource lstrcmpA lstrcmpiW lstrcmpW lstrcpynW lstrcpyW lstrlenA lstrlenW MapViewOfFile MulDiv MultiByteToWideChar OpenFileMappingW OutputDebugStringA QueryDosDeviceW QueryPerformanceCounter RaiseException ReadFile ReleaseMutex ResetEvent ResumeThread SetCurrentDirectoryW SetEndOfFile SetEnvironmentVariableA SetErrorMode SetEvent SetFileAttributesW SetFilePointer SetFileTime SetHandleCount SetLastError SetStdHandle SetThreadLocale SetThreadPriority SetUnhandledExceptionFilter SizeofResource Sleep SystemTimeToFileTime TerminateProcess TerminateThread TlsAlloc TlsGetValue TlsSetValue UnhandledExceptionFilter UnlockFile UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WinExec WriteConsoleA WriteConsoleW WriteFile WritePrivateProfileStringW FreeLibrary GetCommandLineA GetTickCount LeaveCriticalSection GetStartupInfoA EnterCriticalSection InitializeCriticalSection ExitProcess GlobalHandle CompareStringW GetSystemInfo LoadResource

user32

TranslateMDISysAccel TranslateMessage TranslateAcceleratorW UnhookWindowsHookEx ToUnicodeEx TabbedTextOutW SystemParametersInfoW SystemParametersInfoA ShowWindow DestroyIcon WinHelpW wsprintfW GetSystemMetrics UnionRect UnregisterClassW UpdateWindow ValidateRect WaitMessage TrackPopupMenu WindowFromPoint

gdi32

StretchDIBits SetWindowOrgEx SetWindowExtEx SetViewportOrgEx SetViewportExtEx SetTextColor StrokeAndFillPath SetStretchBltMode SetRectRgn SetPixel SetMapMode SelectObject ScaleViewportExtEx ScaleWindowExtEx SelectClipRgn SetBkColor SetBkMode StrokePath

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

comdlg32

GetFileTitleW

advapi32

RegOpenKeyW RegOpenKeyExW RegEnumKeyW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegQueryValueExW RegQueryValueW RegSetValueExW RegCloseKey RegCreateKeyExW

shell32

SHGetFileInfoW ShellExecuteW ExtractIconW DragQueryFileW DragFinish

ole32

OleFlushClipboard StgCreateDocfileOnILockBytes RevokeDragDrop StgOpenStorageOnILockBytes RegisterDragDrop OleUninitialize OleIsCurrentClipboard OleRun OleInitialize

shlwapi

PathFileExistsW PathFindExtensionW PathFindFileNameW PathStripToRootW PathRemoveFileSpecW PathIsUNCW

Name

.text

Size

432KB

Virtual Size

429KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

12.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

4KB

Virtual Size

545B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ecc118

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

8709a03df06e34e75ec609200a08f3b64470d539c66feb6afd847d5f607cbf37

msvcrt

imm32

comctl32

version

setupapi

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

shlwapi

generic