69748a5f235f31c998296b1496e7c061153a914e19922e48dfa41fda31e0e389

Sharing

Copy URL Twitter E-mail

General

Target
69748a5f235f31c998296b1496e7c061153a914e19922e48dfa41fda31e0e389
Size 764KB
Sample260907-tk2bascn2v
SHA256 69748a5f235f31c998296b1496e7c061153a914e19922e48dfa41fda31e0e389
MD5 088f01b73b8efb67f031d463cf4944a4
SHA1 f60c97caa8651f425aa60a82ee971d010bccc980
SHA512 98a2e0dabef44f151437f5b82017fb7eaa8da7f0ef359eab87b5dd6abcfd01e560d97308ce11824cfee33971a4d689ff18a7d9717c35e3e9056bf323507764d4
SSDEEP 12288:1UWlFi758HAiozbbaW/Kb3egndev0PEVT:T86rnde8PEVT
TLSH
T174F41D1467EA8904F5F7AF38A8B917952E7ABD626F30C28F4A00614D18B5ED0CD75B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69748a5f235f31c998296b1496e7c061153a914e19922e48dfa41fda31e0e389

File Explorer

69748a5f235f31c998296b1496e7c061153a914e19922e48dfa41fda31e0e389

.exe 764KB

69748a5f235f31c998296b1496e7c061153a914e19922e48dfa41fda31e0e389

IMPHASH 6b36d059758cc721bf568cb054fa5837
SHA256 69748a5f235f31c998296b1496e7c061153a914e19922e48dfa41fda31e0e389
MD5 088f01b73b8efb67f031d463cf4944a4
SHA1 f60c97caa8651f425aa60a82ee971d010bccc980
SHA512 98a2e0dabef44f151437f5b82017fb7eaa8da7f0ef359eab87b5dd6abcfd01e560d97308ce11824cfee33971a4d689ff18a7d9717c35e3e9056bf323507764d4
SSDEEP 12288:1UWlFi758HAiozbbaW/Kb3egndev0PEVT:T86rnde8PEVT
TLSH
T174F41D1467EA8904F5F7AF38A8B917952E7ABD626F30C28F4A00614D18B5ED0CD75B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

52224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ShellAboutW Shell_NotifyIconW

shlwapi

StrFormatByteSizeW StrFormatKBSizeW

comctl32

CreateStatusWindowW ImageList_Create ImageList_Remove ImageList_ReplaceIcon InitCommonControls

user32

AppendMenuW BeginPaint BringWindowToTop CallWindowProcW CascadeWindows CheckMenuItem CheckMenuRadioItem CopyRect CreateDialogParamW CreateIconIndirect CreatePopupMenu DefWindowProcW DeleteMenu DestroyIcon DestroyMenu DialogBoxParamW DrawMenuBar DrawTextW EnableMenuItem EnableWindow EndDialog EndPaint EnumWindows FillRect GetClassLongW GetClientRect GetCursorPos GetDC GetDlgItem GetGuiResources GetMenu GetMenuItemCount GetMenuState GetParent GetSubMenu GetSysColor GetSystemMetrics GetWindow GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextW GetWindowThreadProcessId InsertMenuW InvalidateRect IsHungAppWindow IsIconic IsWindow IsWindowVisible KillTimer LoadBitmapW LoadIconW LoadImageA LoadImageW LoadMenuW LoadStringA LoadStringW MapWindowPoints MessageBoxA MessageBoxW OpenIcon PostMessageW ReleaseDC RemoveMenu SendMessageA SendMessageTimeoutW SendMessageW SetFocus SetForegroundWindow SetMenuDefaultItem SetTimer SetWindowLongW SetWindowPlacement SetWindowPos SetWindowTextW ShowWindow SwitchToThisWindow TileWindows TrackPopupMenu TrackPopupMenuEx WinHelpW wsprintfW

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreatePen CreateSolidBrush DeleteDC DeleteObject ExcludeClipRect ExtTextOutW LineTo MoveToEx RestoreDC SaveDC SelectObject SetBkColor SetPixel SetTextColor

advapi32

AdjustTokenPrivileges GetUserNameW ImpersonateLoggedOnUser LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW RevertToSelf

ucrtbase

__p___argc __p___argv __stdio_common_vswprintf _configure_narrow_argv _crt_atexit _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type _ui64tow _wcsupr exit log10 memcpy memset strcmp wcscat wcslen wcsstr

kernel32

CloseHandle CreateEventW CreateProcessW CreateThread EnterCriticalSection FormatMessageW GetCommandLineA GetModuleHandleA GetModuleHandleW GetPriorityClass GetProcAddress GetProcessAffinityMask GetProcessIoCounters GetStartupInfoA GetSystemInfo GetVersionExW HeapAlloc HeapFree InitializeCriticalSection IsWow64Process LeaveCriticalSection LocalFree MultiByteToWideChar OpenProcess ReadProcessMemory ResetEvent SetEvent SetPriorityClass SetProcessAffinityMask TerminateProcess WaitForSingleObject WriteProcessMemory lstrcmpW

ntdll

NtQueryInformationProcess NtQuerySystemInformation _aulldiv _aullrem _chkstk

Sharing

General

Malware Config

Signatures

File Explorer

69748a5f235f31c998296b1496e7c061153a914e19922e48dfa41fda31e0e389

shell32

shlwapi

comctl32

user32

gdi32

advapi32

ucrtbase

kernel32

ntdll

generic