d33de346309af1ab2604b41911fe0597de5624518df1a1990032a185e1420265

Sharing

Copy URL Twitter E-mail

General

Target
d33de346309af1ab2604b41911fe0597de5624518df1a1990032a185e1420265
Size 343KB
Sample260907-e1nyksydkh
SHA256 d33de346309af1ab2604b41911fe0597de5624518df1a1990032a185e1420265
MD5 2ad60aa79aaf94eaf9bef32327b619d0
SHA1 d4a80ac8dc78d5ac382b7ec01b727118586877f3
SHA512 819efb5046354392f00243f56b2858fab343b700816f585ba03be8129dc9a3f55072af87c1168b9940816049de729e21ed9c90ce0483554f17cf630ba197af38
SSDEEP 3072:6B39+yYCmoeP6SBzCADDPJWuDNHTIpcjZUWzsVF0OPgWPuJpBZObhIkjzrsybyv2:6mHSgVQ5JER1qivhx5V42w
TLSH
T1937463109BF88A09F4F3577069B747612A36FC54FB32C70F5B56625E1972E808E26B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d33de346309af1ab2604b41911fe0597de5624518df1a1990032a185e1420265

File Explorer

d33de346309af1ab2604b41911fe0597de5624518df1a1990032a185e1420265

.exe 343KB

d33de346309af1ab2604b41911fe0597de5624518df1a1990032a185e1420265

IMPHASH 321938119a8ecc00a0ab48403a4fc88d
SHA256 d33de346309af1ab2604b41911fe0597de5624518df1a1990032a185e1420265
MD5 2ad60aa79aaf94eaf9bef32327b619d0
SHA1 d4a80ac8dc78d5ac382b7ec01b727118586877f3
SHA512 819efb5046354392f00243f56b2858fab343b700816f585ba03be8129dc9a3f55072af87c1168b9940816049de729e21ed9c90ce0483554f17cf630ba197af38
SSDEEP 3072:6B39+yYCmoeP6SBzCADDPJWuDNHTIpcjZUWzsVF0OPgWPuJpBZObhIkjzrsybyv2:6mHSgVQ5JER1qivhx5V42w
TLSH
T1937463109BF88A09F4F3577069B747612A36FC54FB32C70F5B56625E1972E808E26B23
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29616

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

CallWindowProcW CheckMenuItem CreateWindowExW DefWindowProcW DestroyAcceleratorTable DestroyWindow DialogBoxParamW DispatchMessageW DrawTextW EnableMenuItem EnableWindow EndDialog GetClientRect GetDC GetDlgItem GetDlgItemInt GetDlgItemTextW GetMenu GetMessageW GetSystemMetrics GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW InflateRect InvalidateRect IsClipboardFormatAvailable IsDialogMessageW LoadAcceleratorsW LoadCursorW LoadIconW LoadImageW LoadStringW MessageBoxW MoveWindow PostMessageW PostQuitMessage RegisterClassExW RegisterWindowMessageW ReleaseDC SendDlgItemMessageW SendMessageW SetCursor SetDlgItemInt SetDlgItemTextW SetFocus SetProcessDefaultLayout SetRect SetWindowLongPtrW SetWindowPlacement SetWindowTextW ShowWindow TranslateAcceleratorW TranslateMessage UpdateWindow WinHelpW wsprintfW

gdi32

AbortDoc CreateFontIndirectW DeleteDC DeleteObject EndDoc EndPage GetDeviceCaps GetStockObject GetTextExtentPoint32W GetTextMetricsW Rectangle SelectObject SetMapMode StartDocW StartPage TextOutW

comctl32

CreateStatusWindowW

comdlg32

ChooseFontW FindTextW GetFileTitleW GetOpenFileNameW GetSaveFileNameW PageSetupDlgW PrintDlgW ReplaceTextW

advapi32

IsTextUnicode RegCloseKey RegCreateKeyExW RegOpenKeyW RegQueryValueExW RegSetValueExW

shell32

DragAcceptFiles DragFinish DragQueryFileW SHAddToRecentDocs ShellAboutW ShellExecuteW

msvcrt

__C_specific_handler __lconv_init __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _assert _cexit _fpreset _initterm _iob _lock _onexit _unlock _vsnwprintf _wcmdln _wcsnicmp abort calloc exit free fwrite iswctype malloc memcpy memmove memset realloc signal strlen strncmp towupper vfprintf wcscat wcscmp wcscpy wcslen wcsncmp wcsncpy wcsrchr

kernel32

CloseHandle CreateFileMappingW CreateFileW CreateThread DeleteCriticalSection EnterCriticalSection FormatMessageW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetLocalTime GetModuleFileNameW GetModuleHandleA GetProcAddress GetProcessHeap GetStartupInfoW GetSystemTimeAsFileTime GetTickCount GetTimeFormatW GetUserDefaultLangID GetUserDefaultUILanguage GlobalFree HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadLibraryW LocalAlloc LocalFree LocalLock LocalUnlock MapViewOfFile MulDiv MultiByteToWideChar QueryPerformanceCounter RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetEndOfFile SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter UnmapViewOfFile VirtualProtect VirtualQuery WideCharToMultiByte WriteFile lstrlenW

Name

.text

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

936B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

268KB

Virtual Size

268KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

d33de346309af1ab2604b41911fe0597de5624518df1a1990032a185e1420265

user32

gdi32

comctl32

comdlg32

advapi32

shell32

msvcrt

kernel32

generic