4ab618ed379f93ec077cae060311c137bb8f1c6c30bb2b1a32299fbb01d07ce6

Sharing

Copy URL Twitter E-mail

General

Target
4ab618ed379f93ec077cae060311c137bb8f1c6c30bb2b1a32299fbb01d07ce6
Size 88KB
Sample260903-wp566aag68
SHA256 4ab618ed379f93ec077cae060311c137bb8f1c6c30bb2b1a32299fbb01d07ce6
MD5 564ad55d387870697a5db39fff972a21
SHA1 7c40525ca2897aa0f991c3a54d8d99a602fab7e2
SHA512 fce984734f3a242ce6d6f278118fe742ebbbc511a5003afb6f4dd3593a916c595c1265133bf73ac4d538bd2ad5176423fd70788fe882652e2d0f370afc0d1c5d
SSDEEP 768:E4hNyqlQU0Fr+iyTTWNUcYe4noLfapYUjkTMDHb2Wsgt5VmYy1foPmQDUxPfQx6Q:Hy+nrEfaqgD/sCjeIc9JZqMdYrhqMF
TLSH
T150930ACB4FA48613E77E4331E9B217090B35B635B7D4D6EB166D70982A51BC02E33B26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ab618ed379f93ec077cae060311c137bb8f1c6c30bb2b1a32299fbb01d07ce6

File Explorer

4ab618ed379f93ec077cae060311c137bb8f1c6c30bb2b1a32299fbb01d07ce6

.exe 88KB

4ab618ed379f93ec077cae060311c137bb8f1c6c30bb2b1a32299fbb01d07ce6

IMPHASH 207bbdd50b2d7ba3a4d7003fe9c24a16
SHA256 4ab618ed379f93ec077cae060311c137bb8f1c6c30bb2b1a32299fbb01d07ce6
MD5 564ad55d387870697a5db39fff972a21
SHA1 7c40525ca2897aa0f991c3a54d8d99a602fab7e2
SHA512 fce984734f3a242ce6d6f278118fe742ebbbc511a5003afb6f4dd3593a916c595c1265133bf73ac4d538bd2ad5176423fd70788fe882652e2d0f370afc0d1c5d
SSDEEP 768:E4hNyqlQU0Fr+iyTTWNUcYe4noLfapYUjkTMDHb2Wsgt5VmYy1foPmQDUxPfQx6Q:Hy+nrEfaqgD/sCjeIc9JZqMdYrhqMF
TLSH
T150930ACB4FA48613E77E4331E9B217090B35B635B7D4D6EB166D70982A51BC02E33B26
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comdlg32

ChooseFontW

shell32

ShellAboutW

user32

BeginPaint CheckMenuItem CheckMenuRadioItem CreateWindowExW DefWindowProcW DispatchMessageW EnableMenuItem EndPaint FillRect GetDC GetMessageW GetSubMenu GetSysColor GetSysColorBrush GetWindowLongW GetWindowRect InvalidateRect KillTimer LoadCursorW LoadIconW LoadMenuW LoadStringW MapWindowPoints MessageBoxW PostQuitMessage RegisterClassW ReleaseDC SetMenu SetTimer SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextW ShowWindow TranslateMessage UpdateWindow

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateEllipticRgn CreateFontIndirectW CreatePen DeleteDC DeleteObject Ellipse GetStockObject GetTextExtentPointW LineTo MoveToEx OffsetRgn OffsetWindowOrgEx SelectObject SetBkColor SetBkMode SetTextColor SetViewportOrgEx TextOutW

comctl32

InitCommonControls

ucrtbase

__p___argc __p___argv _configure_narrow_argv _crt_atexit _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type cos exit sin

kernel32

GetCommandLineA GetDateFormatW GetLocalTime GetModuleHandleA GetStartupInfoA GetTimeFormatW

Name

.text

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

188B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

888B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/43

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/18

Size

4KB

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4ab618ed379f93ec077cae060311c137bb8f1c6c30bb2b1a32299fbb01d07ce6

comdlg32

shell32

user32

gdi32

comctl32

ucrtbase

kernel32

generic