36e2edc2fc73262218a36faca86add3fde45743cad6d4821cc7881390c7c2032

Sharing

Copy URL Twitter E-mail

General

Target
36e2edc2fc73262218a36faca86add3fde45743cad6d4821cc7881390c7c2032
Size 222KB
Sample260901-2y8ljayeqe
SHA256 36e2edc2fc73262218a36faca86add3fde45743cad6d4821cc7881390c7c2032
MD5 e0029e45f0d4a25977f17bd06d6d3d20
SHA1 e7a3b6661bf1cb18a5ea991c21805caac8358626
SHA512 09ca68b85788520bb01a0830149c72763619c67cbcf91633f7b9805ab346844569d380ce9e3ebcca1a0f1a0bc3a1eae49002026cfc281b6f0ba22ca0b1d10324
SSDEEP 6144:uyhafUgWAIoAiecDkVsQG1U4jmdTwcEYFUWT+OyNxYOlZCKbK58gfw5eQ:KMAIdieqQ
TLSH
T1EB246F30BD8D566EE97A167007A356E54D38B809B720364EA3BFFE2FE590342444E71B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36e2edc2fc73262218a36faca86add3fde45743cad6d4821cc7881390c7c2032

File Explorer

36e2edc2fc73262218a36faca86add3fde45743cad6d4821cc7881390c7c2032

.exe 222KB

36e2edc2fc73262218a36faca86add3fde45743cad6d4821cc7881390c7c2032

IMPHASH 0de4b9751744ccfd5d591de597e3370a
SHA256 36e2edc2fc73262218a36faca86add3fde45743cad6d4821cc7881390c7c2032
MD5 e0029e45f0d4a25977f17bd06d6d3d20
SHA1 e7a3b6661bf1cb18a5ea991c21805caac8358626
SHA512 09ca68b85788520bb01a0830149c72763619c67cbcf91633f7b9805ab346844569d380ce9e3ebcca1a0f1a0bc3a1eae49002026cfc281b6f0ba22ca0b1d10324
SSDEEP 6144:uyhafUgWAIoAiecDkVsQG1U4jmdTwcEYFUWT+OyNxYOlZCKbK58gfw5eQ:KMAIdieqQ
TLSH
T1EB246F30BD8D566EE97A167007A356E54D38B809B720364EA3BFFE2FE590342444E71B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25809

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

InitCommonControls

comdlg32

GetOpenFileNameW GetSaveFileNameW

kernel32

CloseHandle CreateEventW CreateFileW CreateSemaphoreW CreateThread DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetStartupInfoW GetSystemTimeAsFileTime GetTickCount GetUserDefaultUILanguage InitializeCriticalSection LeaveCriticalSection LoadLibraryW QueryPerformanceCounter ReadFile ReleaseSemaphore SetEvent SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObject WriteFile

msacm32

acmStreamClose acmStreamConvert acmStreamOpen acmStreamPrepareHeader acmStreamSize acmStreamUnprepareHeader

msvcrt

__dllonexit __lconv_init __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _fpreset _initterm _iob _lock _onexit _snwprintf _unlock _wcmdln abort calloc exit free fwrite malloc memmove memset signal strcmp strncmp vfprintf wcslen

shell32

ShellAboutW ShellExecuteW

winmm

waveInAddBuffer waveInClose waveInOpen waveInPrepareHeader waveInReset waveInStart waveInStop waveInUnprepareHeader waveOutClose waveOutOpen waveOutPause waveOutPrepareHeader waveOutReset waveOutRestart waveOutUnprepareHeader waveOutWrite

gdi32

CreateFontIndirectW CreatePen DeleteObject ExtTextOutW GetStockObject LineTo MoveToEx SelectObject SetBkMode SetPixel

user32

BeginPaint CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EnableMenuItem EnableWindow EndPaint GetClientRect GetMenu GetMessageW GetSysColorBrush InvalidateRect KillTimer LoadAcceleratorsW LoadBitmapW LoadCursorW LoadIconW LoadStringW MessageBoxW PostQuitMessage RegisterClassExW SendMessageW SetProcessDefaultLayout SetTimer ShowWindow SystemParametersInfoW TranslateAcceleratorW TranslateMessage UpdateWindow

Name

.text

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

76B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

121KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

36e2edc2fc73262218a36faca86add3fde45743cad6d4821cc7881390c7c2032

comctl32

comdlg32

kernel32

msacm32

msvcrt

shell32

winmm

gdi32

user32

generic