331ea987cc49e33e32eb15d70134aefd65507d8080817543cf0b3d7ba1d2dad9

Sharing

Copy URL Twitter E-mail

General

Target
331ea987cc49e33e32eb15d70134aefd65507d8080817543cf0b3d7ba1d2dad9
Size 316KB
Sample260905-prlf7scm2s
SHA256 331ea987cc49e33e32eb15d70134aefd65507d8080817543cf0b3d7ba1d2dad9
MD5 07a3db979840eb702c05e5f283aea383
SHA1 6ab0d42d6a6f34fdc2faff28739ffd99b8aca32b
SHA512 bc06e4a3bf80a6707bd29051ff4c7f9d5c2371c87898b8865bc3d70b4473da8d9d87ca2af7def77a6b4a68dd33c21f06e9f31f63c9cf0547cb5e94ac4bb71229
SSDEEP 6144:CI7aZzI6xltP1+LGDbIwvCs5l6FmA6VaSagfhbY:JMxltQLGbIwvCa5
TLSH
T13C64E619E376059ECE2B4037C6CFF9229833B44C3BDBA4DF7A5409D63E25BA145B8A14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
331ea987cc49e33e32eb15d70134aefd65507d8080817543cf0b3d7ba1d2dad9

File Explorer

331ea987cc49e33e32eb15d70134aefd65507d8080817543cf0b3d7ba1d2dad9

.exe 316KB

331ea987cc49e33e32eb15d70134aefd65507d8080817543cf0b3d7ba1d2dad9

IMPHASH f00e6e1976d863be56412c2cfdad06f3
SHA256 331ea987cc49e33e32eb15d70134aefd65507d8080817543cf0b3d7ba1d2dad9
MD5 07a3db979840eb702c05e5f283aea383
SHA1 6ab0d42d6a6f34fdc2faff28739ffd99b8aca32b
SHA512 bc06e4a3bf80a6707bd29051ff4c7f9d5c2371c87898b8865bc3d70b4473da8d9d87ca2af7def77a6b4a68dd33c21f06e9f31f63c9cf0547cb5e94ac4bb71229
SSDEEP 6144:CI7aZzI6xltP1+LGDbIwvCs5l6FmA6VaSagfhbY:JMxltQLGbIwvCa5
TLSH
T13C64E619E376059ECE2B4037C6CFF9229833B44C3BDBA4DF7A5409D63E25BA145B8A14
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

139872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

TlsFree VerSetConditionMask GetLastError GetModuleHandleExW FormatMessageW MultiByteToWideChar WideCharToMultiByte LoadLibraryA Sleep GetStartupInfoW GetModuleHandleW GlobalAlloc GlobalUnlock GlobalLock GlobalFree SetThreadExecutionState GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId SetUnhandledExceptionFilter GetFileInformationByHandleEx TlsGetValue CloseHandle AreFileApisANSI CreateFile2 GetFileAttributesExW FindNextFileW FindFirstFileExW FindFirstFileW FindClose GetLocaleInfoEx FormatMessageA LocalFree InitializeSListHead TlsSetValue TlsAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection QueryPerformanceFrequency QueryPerformanceCounter GetProcAddress FreeLibrary SetConsoleOutputCP GetModuleFileNameA

user32

SetRect OffsetRect PtInRect GetWindowLongW SetWindowLongW GetClassLongPtrW LoadCursorW LoadImageW CreateIconIndirect SystemParametersInfoW MonitorFromWindow GetRawInputData RegisterRawInputDevices GetRawInputDeviceInfoA ClipCursor SetCursorPos ReleaseCapture SetCapture GetKeyState GetActiveWindow SetFocus EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard IsZoomed BringWindowToTop IsIconic IsWindowVisible WindowFromPoint ScreenToClient ClientToScreen SetCursor GetCursorPos AdjustWindowRectEx SetWindowPlacement GetWindowRect GetClientRect SetWindowTextW RemovePropW GetPropW SetPropW SetForegroundWindow GetSystemMetrics GetRawInputDeviceList TranslateMessage DispatchMessageW PeekMessageW RegisterDeviceNotificationW UnregisterDeviceNotification DefWindowProcW UnregisterClassW RegisterClassExW CreateWindowExW DestroyWindow ShowWindow ToUnicode MapVirtualKeyW DestroyIcon GetDC ReleaseDC ChangeDisplaySettingsExW EnumDisplaySettingsW EnumDisplaySettingsExW EnumDisplayDevicesW GetMonitorInfoW EnumDisplayMonitors TrackMouseEvent GetMessageTime SendMessageW PostMessageW WaitMessage GetLayeredWindowAttributes SetLayeredWindowAttributes FlashWindow MsgWaitForMultipleObjects MoveWindow SetWindowPos GetWindowPlacement

gdi32

CreateDCW GetDeviceCaps GetDeviceGammaRamp SetDeviceGammaRamp CreateBitmap CreateRectRgn DeleteObject CreateDIBSection ChoosePixelFormat DescribePixelFormat SetPixelFormat SwapBuffers DeleteDC

shell32

DragFinish DragQueryPoint DragQueryFileW DragAcceptFiles

msvcp140

?_Winerror_map@std@@YAHH@Z ?_Syserror_map@std@@YAPEBDH@Z _Query_perf_frequency _Query_perf_counter ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_terminate __std_exception_copy strstr __std_exception_destroy _CxxThrowException __C_specific_handler __current_exception_context memset __current_exception memcmp memmove memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

realloc malloc free _set_new_mode _callnewh

api-ms-win-crt-convert-l1-1-0

strtoul atof atoi

api-ms-win-crt-stdio-l1-1-0

fclose fopen_s __acrt_iob_func fseek ftell fwrite setvbuf __stdio_common_vsprintf fread __p__commode _set_fmode __stdio_common_vfprintf __stdio_common_vsscanf

api-ms-win-crt-math-l1-1-0

exp2f fminf powf pow llroundf __setusermatherr

api-ms-win-crt-string-l1-1-0

strcmp strlen strspn strcspn strncpy strncmp wcslen

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale

api-ms-win-crt-runtime-l1-1-0

_c_exit _register_thread_local_exe_atexit_callback __p___argc _initialize_narrow_environment _initialize_onexit_table _exit exit abort __p___argv terminate _initterm_e _register_onexit_function _initterm _get_initial_narrow_environment _set_app_type _configure_narrow_argv _crt_atexit _cexit _seh_filter_exe

Sharing

General

Malware Config

Signatures

File Explorer

331ea987cc49e33e32eb15d70134aefd65507d8080817543cf0b3d7ba1d2dad9

kernel32

user32

gdi32

shell32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-runtime-l1-1-0

generic