98255a3b8a70547073e79cf78f31d5821db026c081bb90f9e3e5c93c459f65da

Sharing

Copy URL Twitter E-mail

General

Target
98255a3b8a70547073e79cf78f31d5821db026c081bb90f9e3e5c93c459f65da
Size 1.1MB
Sample260831-httf9syyf1
SHA256 98255a3b8a70547073e79cf78f31d5821db026c081bb90f9e3e5c93c459f65da
MD5 5d2c45855b696e9a7f396499b407c96d
SHA1 4f0a0efa6ba5ccf2c0c8b8ff59587da62c41ba4f
SHA512 ddd4d03bd15479f8115b04f86a417aadd6c740e9d49964115f75baf70d9782636a1253d3e5978b3f0af61f215645fe6330a31e96b977a9f9befe8da2cbbbc629
SSDEEP 12288:VdEtT/MQGf239hPCuYquGoYh98VSPyIk7:Vdc/MQGf2NZCuYquGoYh98VSPyIk
TLSH
T18B35A567BA494333E2A235B2D98ED3E1532A4078A137919665D9D4CC3360D33CBEF5E8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98255a3b8a70547073e79cf78f31d5821db026c081bb90f9e3e5c93c459f65da

File Explorer

98255a3b8a70547073e79cf78f31d5821db026c081bb90f9e3e5c93c459f65da

.exe 1.1MB

98255a3b8a70547073e79cf78f31d5821db026c081bb90f9e3e5c93c459f65da

IMPHASH dadaa6633112799bc417ab0e0d0c6f4d
SHA256 98255a3b8a70547073e79cf78f31d5821db026c081bb90f9e3e5c93c459f65da
MD5 5d2c45855b696e9a7f396499b407c96d
SHA1 4f0a0efa6ba5ccf2c0c8b8ff59587da62c41ba4f
SHA512 ddd4d03bd15479f8115b04f86a417aadd6c740e9d49964115f75baf70d9782636a1253d3e5978b3f0af61f215645fe6330a31e96b977a9f9befe8da2cbbbc629
SSDEEP 12288:VdEtT/MQGf239hPCuYquGoYh98VSPyIk7:Vdc/MQGf2NZCuYquGoYh98VSPyIk
TLSH
T18B35A567BA494333E2A235B2D98ED3E1532A4078A137919665D9D4CC3360D33CBEF5E8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

89494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsW

kernel32

GetCurrentDirectoryW CopyFileW WideCharToMultiByte WritePrivateProfileStringW GetPrivateProfileIntW GetFileAttributesW GetPrivateProfileStringW GetLocalTime ReadFile GetFileSizeEx WriteFile CreateFileW CloseHandle GetModuleFileNameW DeleteFileW RemoveDirectoryW GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess MultiByteToWideChar IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead GetConsoleMode GetConsoleCP HeapSize SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW FindClose GetProcessHeap EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetFileType GetACP GetStdHandle GetModuleHandleExW ExitProcess HeapFree HeapReAlloc HeapAlloc LoadLibraryExW FreeLibrary GetLastError RaiseException RtlUnwind FindNextFileW FindFirstFileW CreateDirectoryW SetFilePointerEx FlushFileBuffers TerminateProcess WriteConsoleW

user32

LoadIconW GetWindowLongW GetWindowTextLengthW DefWindowProcW CallWindowProcW PostMessageW GetWindowRect DestroyWindow GetDC FillRect CreateWindowExW SendMessageW GetSystemMetrics SetWindowTextW CreatePopupMenu RegisterClassExW TrackPopupMenu ShowWindow GetDlgCtrlID ClientToScreen MapWindowPoints TrackMouseEvent DestroyIcon DestroyMenu LoadCursorW GetClassNameW SetCursor SetWindowLongW GetClientRect AppendMenuW DrawTextW PostQuitMessage PtInRect UpdateWindow SetForegroundWindow InvalidateRect ReleaseDC GetCursorPos BeginPaint EndPaint EnableWindow GetWindowTextW GetMessageW MessageBoxW DispatchMessageW TranslateMessage AdjustWindowRect wsprintfW

gdi32

CreateSolidBrush DeleteObject SetBkColor GetStockObject CreateFontW EnumFontFamiliesExW SelectObject SetBkMode SetTextColor

Name

.text

Size

185KB

Virtual Size

185KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

584B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

800KB

Virtual Size

800KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

98255a3b8a70547073e79cf78f31d5821db026c081bb90f9e3e5c93c459f65da

shell32

comctl32

shlwapi

kernel32

user32

gdi32

generic