1dadbdaf4d1ca0ae66aaf2060f25462febc51939702a083e5e840444dcecf404

Sharing

Copy URL Twitter E-mail

General

Target
1dadbdaf4d1ca0ae66aaf2060f25462febc51939702a083e5e840444dcecf404
Size 368KB
Sample260905-bwcg7scr21
SHA256 1dadbdaf4d1ca0ae66aaf2060f25462febc51939702a083e5e840444dcecf404
MD5 8bd3a5830c2a470c6065a17058bf97f5
SHA1 f46b5ba87fa99919e6be22bdc4b60e0bd8c0b079
SHA512 89aaa2ca0bad588088cfa4fe24e0d0ce549c30819431f66f11f3fd3a99eec7fa49a15bb735917373550375cc76c7464a20381e173fe2d7d3e57cdd31f49019de
SSDEEP 6144:NDazsb7TDazsb73V0gPger7aliGl3///cphyky04MYlbMb9LiV15Hhj/B3s33dLT:NDaz4XDaz4rW0NuUaX8aXO
TLSH
T1A8845A41BB9149D4E82981329A7B43945338FD547F06EFEF0728315E5D327C26C3AEAA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dadbdaf4d1ca0ae66aaf2060f25462febc51939702a083e5e840444dcecf404

File Explorer

1dadbdaf4d1ca0ae66aaf2060f25462febc51939702a083e5e840444dcecf404

.exe 368KB

1dadbdaf4d1ca0ae66aaf2060f25462febc51939702a083e5e840444dcecf404

IMPHASH f908e78c01fb598eaa03ebf53114d257
SHA256 1dadbdaf4d1ca0ae66aaf2060f25462febc51939702a083e5e840444dcecf404
MD5 8bd3a5830c2a470c6065a17058bf97f5
SHA1 f46b5ba87fa99919e6be22bdc4b60e0bd8c0b079
SHA512 89aaa2ca0bad588088cfa4fe24e0d0ce549c30819431f66f11f3fd3a99eec7fa49a15bb735917373550375cc76c7464a20381e173fe2d7d3e57cdd31f49019de
SSDEEP 6144:NDazsb7TDazsb73V0gPger7aliGl3///cphyky04MYlbMb9LiV15Hhj/B3s33dLT:NDaz4XDaz4rW0NuUaX8aXO
TLSH
T1A8845A41BB9149D4E82981329A7B43945338FD547F06EFEF0728315E5D327C26C3AEAA
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26368

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comdlg32

ChooseFontW FindTextW GetFileTitleW GetOpenFileNameW GetSaveFileNameW PrintDlgW ReplaceTextW

shell32

DragAcceptFiles DragFinish DragQueryFileW ShellAboutW

shlwapi

PathFindFileNameW StrCmpNIW StrCmpNW StrRStrIW StrStrIW StrStrW wnsprintfW

user32

CheckMenuItem CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW EnableMenuItem EndDialog GetClientRect GetDesktopWindow GetDlgItem GetDlgItemInt GetDlgItemTextW GetDpiForWindow GetMenu GetMessageW GetMonitorInfoW GetParent GetSystemMetrics GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW InvalidateRect IsClipboardFormatAvailable IsDialogMessageW LoadAcceleratorsW LoadCursorW LoadIconW LoadImageW LoadStringW MessageBoxW MonitorFromRect PostMessageW PostQuitMessage RegisterClassExW RegisterWindowMessageW SendMessageW SetActiveWindow SetDlgItemInt SetDlgItemTextW SetFocus SetWindowPos SetWindowTextW ShowWindow TranslateAcceleratorW TranslateMessage UpdateWindow WinHelpW wsprintfW

gdi32

CreateFontIndirectW DeleteDC DeleteObject EndDoc EndPage ExtTextOutW GetDeviceCaps GetTextExtentExPointW GetTextExtentPoint32W GetTextMetricsW SelectObject SetMapMode StartDocW StartPage

advapi32

IsTextUnicode RegCloseKey RegCreateKeyExW RegOpenKeyW RegQueryValueExW RegSetValueExW

comctl32

ord413 InitCommonControls ord410

ucrtbase

__p___argc __p___argv __stdio_common_vswprintf _assert _configure_narrow_argv _crt_atexit _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type exit memcpy memset wcschr wcslen

kernel32

CloseHandle CreateFileW ExitProcess FindClose FindFirstFileW FormatMessageW GetCPInfoExW GetCommandLineA GetCommandLineW GetDateFormatW GetFileSize GetLocalTime GetModuleHandleA GetStartupInfoA GetTimeFormatW HeapAlloc HeapFree LocalFree MulDiv MultiByteToWideChar ReadFile SetEndOfFile WideCharToMultiByte WriteFile lstrcmpW

Name

.text

Size

28KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

432B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

204KB

Virtual Size

201KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/43

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

16KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/18

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

28KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

1dadbdaf4d1ca0ae66aaf2060f25462febc51939702a083e5e840444dcecf404

comdlg32

shell32

shlwapi

user32

gdi32

advapi32

comctl32

ucrtbase

kernel32

generic