d5880653f36f857b2f98372e6af349570008a28466756c56e63aa63cd9a98eb5

Sharing

Copy URL Twitter E-mail

General

Target
d5880653f36f857b2f98372e6af349570008a28466756c56e63aa63cd9a98eb5
Size 336KB
Sample260903-tdsetaac42
SHA256 d5880653f36f857b2f98372e6af349570008a28466756c56e63aa63cd9a98eb5
MD5 bfce25fedbd319f483618d50a10baa70
SHA1 10989b00b5f291a4bb3114ea141d64038469e74c
SHA512 05abd69b1ff8a4d741b15a9ff323403341228af4a55f1b3f720316dee269b06f27f3d5906d1ae84a05e251038ca748f3c9f9963acc0086b595068c6efdbaf28a
SSDEEP 3072:D7jy1GrLCoZGDXINo7THwon1FWRWGm4X2h2000KE58cQfCHHPbLAz/lugJRH1sFf:Xjy1voZaXekQf+KVGFiw
TLSH
T13D74F71257F59601F6B29BB06D7547802B39FD64AF72CF0F2649908D1AB0A80ED76F23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5880653f36f857b2f98372e6af349570008a28466756c56e63aa63cd9a98eb5

File Explorer

d5880653f36f857b2f98372e6af349570008a28466756c56e63aa63cd9a98eb5

.exe 336KB

d5880653f36f857b2f98372e6af349570008a28466756c56e63aa63cd9a98eb5

IMPHASH f908e78c01fb598eaa03ebf53114d257
SHA256 d5880653f36f857b2f98372e6af349570008a28466756c56e63aa63cd9a98eb5
MD5 bfce25fedbd319f483618d50a10baa70
SHA1 10989b00b5f291a4bb3114ea141d64038469e74c
SHA512 05abd69b1ff8a4d741b15a9ff323403341228af4a55f1b3f720316dee269b06f27f3d5906d1ae84a05e251038ca748f3c9f9963acc0086b595068c6efdbaf28a
SSDEEP 3072:D7jy1GrLCoZGDXINo7THwon1FWRWGm4X2h2000KE58cQfCHHPbLAz/lugJRH1sFf:Xjy1voZaXekQf+KVGFiw
TLSH
T13D74F71257F59601F6B29BB06D7547802B39FD64AF72CF0F2649908D1AB0A80ED76F23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comdlg32

ChooseFontW FindTextW GetFileTitleW GetOpenFileNameW GetSaveFileNameW PrintDlgW ReplaceTextW

shell32

DragAcceptFiles DragFinish DragQueryFileW ShellAboutW

shlwapi

PathFindFileNameW StrCmpNIW StrCmpNW StrRStrIW StrStrIW StrStrW wnsprintfW

user32

CheckMenuItem CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW EnableMenuItem EndDialog GetClientRect GetDesktopWindow GetDlgItem GetDlgItemInt GetDlgItemTextW GetDpiForWindow GetMenu GetMessageW GetMonitorInfoW GetParent GetSystemMetrics GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW InvalidateRect IsClipboardFormatAvailable IsDialogMessageW LoadAcceleratorsW LoadCursorW LoadIconW LoadImageW LoadStringW MessageBoxW MonitorFromRect PostMessageW PostQuitMessage RegisterClassExW RegisterWindowMessageW SendMessageW SetActiveWindow SetDlgItemInt SetDlgItemTextW SetFocus SetWindowPos SetWindowTextW ShowWindow TranslateAcceleratorW TranslateMessage UpdateWindow WinHelpW wsprintfW

gdi32

CreateFontIndirectW DeleteDC DeleteObject EndDoc EndPage ExtTextOutW GetDeviceCaps GetTextExtentExPointW GetTextExtentPoint32W GetTextMetricsW SelectObject SetMapMode StartDocW StartPage

advapi32

IsTextUnicode RegCloseKey RegCreateKeyExW RegOpenKeyW RegQueryValueExW RegSetValueExW

comctl32

ord413 InitCommonControls ord410

ucrtbase

__p___argc __p___argv __stdio_common_vswprintf _assert _configure_narrow_argv _crt_atexit _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type exit memcpy memset wcschr wcslen

kernel32

CloseHandle CreateFileW ExitProcess FindClose FindFirstFileW FormatMessageW GetCPInfoExW GetCommandLineA GetCommandLineW GetDateFormatW GetFileSize GetLocalTime GetModuleHandleA GetStartupInfoA GetTimeFormatW HeapAlloc HeapFree LocalFree MulDiv MultiByteToWideChar ReadFile SetEndOfFile WideCharToMultiByte WriteFile lstrcmpW

Name

.text

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

204KB

Virtual Size

201KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/43

Size

36KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/18

Size

4KB

Virtual Size

1016B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

24KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

d5880653f36f857b2f98372e6af349570008a28466756c56e63aa63cd9a98eb5

comdlg32

shell32

shlwapi

user32

gdi32

advapi32

comctl32

ucrtbase

kernel32

generic