1e3ecfbad2744ee85d5c08fa54d7be9ed74c929c7fe3cf4ab5e2acb9285a0afa

Sharing

Copy URL Twitter E-mail

General

Target
1e3ecfbad2744ee85d5c08fa54d7be9ed74c929c7fe3cf4ab5e2acb9285a0afa
Size 492KB
Sample260903-sdb76azblb
SHA256 1e3ecfbad2744ee85d5c08fa54d7be9ed74c929c7fe3cf4ab5e2acb9285a0afa
MD5 88bfdfac31f181ce4a59c5d6063a68f5
SHA1 cf36b916a5989cd1635deb6ecda57085d3a5919f
SHA512 7ad6617ec7f85a3275b98be54ed3097b9f591535d5efc4b8d5d0b327323f1b828b1d8241aa24a545e7806b650f004946cf484656e1fcd7331f56749505ea94ad
SSDEEP 6144:AWoATEjRROySO2/wOu160djacR3UI4inm6OmwWoATEjTuiFKYdq:AWoAITOySx/cWWoAIrU
TLSH
T1B1B48D56ABF54AB1EDA60B31987987380375FE30F7208ECF0718258E6B56AD00C75B67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e3ecfbad2744ee85d5c08fa54d7be9ed74c929c7fe3cf4ab5e2acb9285a0afa

File Explorer

1e3ecfbad2744ee85d5c08fa54d7be9ed74c929c7fe3cf4ab5e2acb9285a0afa

.exe 492KB

1e3ecfbad2744ee85d5c08fa54d7be9ed74c929c7fe3cf4ab5e2acb9285a0afa

IMPHASH 1883ef0756591bdb679124acb17b4c43
SHA256 1e3ecfbad2744ee85d5c08fa54d7be9ed74c929c7fe3cf4ab5e2acb9285a0afa
MD5 88bfdfac31f181ce4a59c5d6063a68f5
SHA1 cf36b916a5989cd1635deb6ecda57085d3a5919f
SHA512 7ad6617ec7f85a3275b98be54ed3097b9f591535d5efc4b8d5d0b327323f1b828b1d8241aa24a545e7806b650f004946cf484656e1fcd7331f56749505ea94ad
SSDEEP 6144:AWoATEjRROySO2/wOu160djacR3UI4inm6OmwWoATEjTuiFKYdq:AWoAITOySx/cWWoAIrU
TLSH
T1B1B48D56ABF54AB1EDA60B31987987380375FE30F7208ECF0718258E6B56AD00C75B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

AdjustWindowRect BeginPaint CallWindowProcA CheckMenuItem ClientToScreen CreateIconFromResourceEx CreateWindowExA DefWindowProcA DestroyIcon DestroyMenu DestroyWindow DispatchMessageW EnableWindow EndPaint GetClientRect GetDC GetDlgItem GetMenu GetMessagePos GetMessageW GetParent GetSubMenu GetSystemMetrics GetWindow GetWindowLongA GetWindowLongW GetWindowRect InvalidateRect LoadAcceleratorsW LoadCursorW LoadIconW LoadImageW LoadMenuW LoadStringA LoadStringW MessageBoxA MessageBoxW MoveWindow PostMessageW PostQuitMessage RedrawWindow RegisterClassExA ReleaseDC ScreenToClient SendDlgItemMessageW SendMessageA SendMessageW SetActiveWindow SetCursor SetFocus SetWindowLongA SetWindowLongW SetWindowPos SetWindowTextA ShowWindow SystemParametersInfoW TrackPopupMenu TranslateAcceleratorW TranslateMessage wsprintfA

gdi32

BitBlt CloseEnhMetaFile CreateBitmap CreateCompatibleDC CreateDIBitmap CreateEnhMetaFileW CreateFontIndirectW DeleteDC DeleteEnhMetaFile DeleteObject GetEnhMetaFileBits GetTextExtentPointA GetTextMetricsW SelectObject SetBkColor SetTextColor TextOutA

ucrtbase

__acrt_iob_func __p___argc __p___argv __stdio_common_vfprintf __stdio_common_vsprintf _assert _configure_narrow_argv _crt_atexit _errno _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type _strdup _stricmp calloc exit free fwrite getenv malloc memcpy memmove memset realloc strcat strchr strcmp strcpy strcspn strlen strrchr strtol

kernel32

CloseHandle CreateFileA DelayLoadFailureHook GetCommandLineA GetCurrentDirectoryA GetFileAttributesA GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoA GetTickCount HeapAlloc HeapReAlloc IsBadStringPtrA LoadLibraryA MulDiv OpenFile ResolveDelayLoadedAPI SearchPathA _hread _lclose lstrcmpiA

ntdll

_vsnprintf

Name

.text

Size

68KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

136KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/43

Size

92KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

48KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

56KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/18

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

36KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

1e3ecfbad2744ee85d5c08fa54d7be9ed74c929c7fe3cf4ab5e2acb9285a0afa

user32

gdi32

ucrtbase

kernel32

ntdll

generic