e99f59b47f4bb9f4bda777e70f080c20fe978306ada47c1dfab9714f1702088e

Sharing

Copy URL Twitter E-mail

General

Target
e99f59b47f4bb9f4bda777e70f080c20fe978306ada47c1dfab9714f1702088e
Size 168KB
Sample260907-hehffsdr5x
SHA256 e99f59b47f4bb9f4bda777e70f080c20fe978306ada47c1dfab9714f1702088e
MD5 54b33d37502ce7cdd4db6b0b02e6f58c
SHA1 e154dc29d37bb0e2da80b8d6da2490004a9d06aa
SHA512 6c445ae86b71529b98096687ec39ccfee410ac6e5c0200ddbe6b376212074dbb9b89a828a0950b03dd675e257970b0d4f7998a90e85e3f032280512bbd6270d6
SSDEEP 1536:nx6x2oofvlp9yKJ6jc0wkuK0PCH5fJ/KmbsixNc6PDagz5CY5jJJo8ugoK42:gFofvlpYB8PCpxZb5toKp
TLSH
T191F34A167E0DACF0C21884FC467FAE722BF8EC0375D4FB3907A4DA245C6B76256A4991
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e99f59b47f4bb9f4bda777e70f080c20fe978306ada47c1dfab9714f1702088e

File Explorer

e99f59b47f4bb9f4bda777e70f080c20fe978306ada47c1dfab9714f1702088e

.dll 168KB

e99f59b47f4bb9f4bda777e70f080c20fe978306ada47c1dfab9714f1702088e

IMPHASH 625da7f2c198d5c1a5df3e708e896ac8
SHA256 e99f59b47f4bb9f4bda777e70f080c20fe978306ada47c1dfab9714f1702088e
MD5 54b33d37502ce7cdd4db6b0b02e6f58c
SHA1 e154dc29d37bb0e2da80b8d6da2490004a9d06aa
SHA512 6c445ae86b71529b98096687ec39ccfee410ac6e5c0200ddbe6b376212074dbb9b89a828a0950b03dd675e257970b0d4f7998a90e85e3f032280512bbd6270d6
SSDEEP 1536:nx6x2oofvlp9yKJ6jc0wkuK0PCH5fJ/KmbsixNc6PDagz5CY5jJJo8ugoK42:gFofvlpYB8PCpxZb5toKp
TLSH
T191F34A167E0DACF0C21884FC467FAE722BF8EC0375D4FB3907A4DA245C6B76256A4991
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16656

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

CredEnumerateW CredFree CredWriteW

comctl32

InitCommonControls ord410 ord412 ord413

kernel32

DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection EnumResourceNamesW FindResourceW GetEnvironmentVariableW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LeaveCriticalSection LoadLibraryW LoadResource MultiByteToWideChar RaiseException SizeofResource lstrcmpW

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsicmp free fwrite getenv memcpy memmove memset strchr strcmp strcpy strcspn strlen wcschr wcslen wcsrchr

user32

CheckDlgButton CreateWindowExW DestroyWindow DialogBoxParamW EndDialog GetDlgItem GetDlgItemTextW GetFocus GetKeyState GetParent GetWindowLongPtrW GetWindowRect GetWindowTextLengthW GetWindowTextW IsDlgButtonChecked LoadStringW LockSetForegroundWindow SendMessageW SetDlgItemTextW SetFocus SetTimer SetWindowLongPtrW SetWindowPos SetWindowTextW ShowWindow

Name

.text

Size

24KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

804B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

840B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

784B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

104KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e99f59b47f4bb9f4bda777e70f080c20fe978306ada47c1dfab9714f1702088e

advapi32

comctl32

kernel32

ntdll

ucrtbase

user32

generic