224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782

Sharing

Copy URL Twitter E-mail

General

Target
224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782
Size 684KB
Sample260831-me4e5ssvbv
SHA256 224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782
MD5 cb9ec50b223922cf0dd76ff6afb92fd7
SHA1 fc9a485bea38f35ae1d7652a50bf36f2188b5961
SHA512 bb1eacab94bf0cb7f2833086e7f1d5a5d9a058558d1246e2d3830f420aabb3a958334376a1536cb894d994e34dfaa63bdf6d4f92dd0b9236b5ae75fb1051084f
SSDEEP 6144:wQODmYM/gp6JfW1GR46ynHUNXBU7GAOEK5X16KX:wQcm/ggJfW184jHz7GbV16KX
TLSH
T154E43743A70BA1ACD66C613A726C0B30D7C46C179E261CFEFFB145145A1FBC31AA5CA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782

File Explorer

224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782

.exe 684KB

224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782

IMPHASH 5e1bdfc3219dbe372be9f96246d73a1a
SHA256 224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782
MD5 cb9ec50b223922cf0dd76ff6afb92fd7
SHA1 fc9a485bea38f35ae1d7652a50bf36f2188b5961
SHA512 bb1eacab94bf0cb7f2833086e7f1d5a5d9a058558d1246e2d3830f420aabb3a958334376a1536cb894d994e34dfaa63bdf6d4f92dd0b9236b5ae75fb1051084f
SSDEEP 6144:wQODmYM/gp6JfW1GR46ynHUNXBU7GAOEK5X16KX:wQcm/ggJfW184jHz7GbV16KX
TLSH
T154E43743A70BA1ACD66C613A726C0B30D7C46C179E261CFEFFB145145A1FBC31AA5CA6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

133747

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\7HS\Desktop\BO2012Launcher\build_min_x86\BO2012Launcher.pdb

shell32

SHGetSpecialFolderPathW ExtractIconExW Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx ord17

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

shlwapi

PathFileExistsW

kernel32

SetFileAttributesW IsDebuggerPresent GetLastError SetErrorMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetSystemInfo GetSystemTime GetModuleHandleW FindResourceW LoadLibraryW FormatMessageW GetDateFormatW GetTimeFormatW GetFileSizeEx ReadFile WriteFile CloseHandle WideCharToMultiByte GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress LCMapStringW GetLocaleInfoW CreateFileW SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW GetProcessHeap SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetFileType GetACP GetStdHandle GetCommandLineW GetModuleHandleExW ExitProcess HeapReAlloc HeapFree HeapAlloc LoadLibraryExW FreeLibrary RtlUnwind RaiseException RemoveDirectoryW GetModuleFileNameW DeleteFileW WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW GetLocalTime GetFileAttributesW MultiByteToWideChar CopyFileW FindNextFileW FindFirstFileW FindClose CreateDirectoryW GetCurrentDirectoryW SetStdHandle WriteConsoleW ReadConsoleW HeapSize GetCPInfo SetEndOfFile

user32

GetDesktopWindow MapVirtualKeyW GetKeyState CharUpperW SetWindowPos IsWindow LoadStringW DestroyIcon SystemParametersInfoW LoadCursorW GetClassNameW SetWindowLongW GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos LoadIconW GetMessageW TranslateMessage DispatchMessageW SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC SetForegroundWindow UpdateWindow DrawTextW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics EnableWindow GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW CallWindowProcW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent wsprintfW MessageBoxW GetDC

gdi32

GetTextExtentPoint32W GetDeviceCaps DeleteDC CreateCompatibleDC SetTextColor CreateFontW EnumFontFamiliesExW GetStockObject SelectObject SetBkColor TextOutW SetBkMode DeleteObject CreateSolidBrush

comdlg32

ChooseFontW ChooseColorW GetSaveFileNameW PrintDlgW GetOpenFileNameW

advapi32

RegOpenKeyExW RegCloseKey GetUserNameW LookupPrivilegeValueW OpenProcessToken RegQueryValueExW

ole32

CoCreateInstance StringFromCLSID CoInitialize CoUninitialize

Name

.text

Size

497KB

Virtual Size

496KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

148KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

412B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782

shell32

comctl32

version

shlwapi

kernel32

user32

gdi32

comdlg32

advapi32

ole32

generic