821abdf2a6ec2d613fa5fcd2f8bf8c60930a0a76fa341baf1209422aad9709ac

Sharing

Copy URL Twitter E-mail

General

Target
821abdf2a6ec2d613fa5fcd2f8bf8c60930a0a76fa341baf1209422aad9709ac
Size 692KB
Sample260907-ts8ekshh55
SHA256 821abdf2a6ec2d613fa5fcd2f8bf8c60930a0a76fa341baf1209422aad9709ac
MD5 15eba97040e9e3203d1d1008874db541
SHA1 422eaaf7d71ab61688ae065a980ae51574521bb1
SHA512 4ed0ff511d4f0c8471d91a7de47848f90dcff8cf4712e354baca9cf8383b4f566e24ae072f8436c7ad21c7374555c38c843c22a4420cc62b43d3a50f5a7a6bc0
SSDEEP 6144:BZe+cOdfhCO0wbyGuhPG7YY7Df+FsZlFbYNYwLe:BZvcX5UyGWPLY7Dv/FbYNYwL
TLSH
T1BAE49211ABE8CB46F0B387346CF553603A36BC666B33C78FAA08692D14717D19DB1B16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
821abdf2a6ec2d613fa5fcd2f8bf8c60930a0a76fa341baf1209422aad9709ac

File Explorer

821abdf2a6ec2d613fa5fcd2f8bf8c60930a0a76fa341baf1209422aad9709ac

.exe 692KB

821abdf2a6ec2d613fa5fcd2f8bf8c60930a0a76fa341baf1209422aad9709ac

IMPHASH 7a1512124e8658f493a2bf799b9391d8
SHA256 821abdf2a6ec2d613fa5fcd2f8bf8c60930a0a76fa341baf1209422aad9709ac
MD5 15eba97040e9e3203d1d1008874db541
SHA1 422eaaf7d71ab61688ae065a980ae51574521bb1
SHA512 4ed0ff511d4f0c8471d91a7de47848f90dcff8cf4712e354baca9cf8383b4f566e24ae072f8436c7ad21c7374555c38c843c22a4420cc62b43d3a50f5a7a6bc0
SSDEEP 6144:BZe+cOdfhCO0wbyGuhPG7YY7Df+FsZlFbYNYwLe:BZvcX5UyGWPLY7Dv/FbYNYwL
TLSH
T1BAE49211ABE8CB46F0B387346CF553603A36BC666B33C78FAA08692D14717D19DB1B16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

48352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comdlg32

ChooseFontW FindTextW GetOpenFileNameW GetSaveFileNameW PageSetupDlgW PrintDlgW ReplaceTextW

ole32

StgCreateDocfile

shell32

DragAcceptFiles DragFinish DragQueryFileW SHGetFolderPathW ShellAboutW

user32

BeginPaint CallWindowProcW CheckDlgButton CheckMenuItem CheckRadioButton ClientToScreen CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW DrawEdge EnableMenuItem EnableWindow EndDialog EndPaint FillRect GetClientRect GetDC GetDlgItem GetMenu GetMenuItemInfoW GetMessagePos GetMessageW GetParent GetScrollInfo GetScrollPos GetSubMenu GetSysColorBrush GetSystemMetrics GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextA GetWindowTextLengthW GetWindowTextW InsertMenuItemW InvalidateRect IsDialogMessageW IsDlgButtonChecked IsWindowVisible LoadAcceleratorsW LoadCursorW LoadIconW LoadImageW LoadMenuW LoadStringW MapWindowPoints MessageBoxA MessageBoxIndirectW MessageBoxW MoveWindow PeekMessageW PostMessageW PostQuitMessage RegisterClassExW RegisterWindowMessageW ReleaseDC RemoveMenu ScreenToClient ScrollWindow SendMessageW SetActiveWindow SetCursor SetFocus SetMenu SetMenuItemInfoW SetScrollInfo SetScrollPos SetWindowLongW SetWindowPlacement SetWindowTextA SetWindowTextW ShowWindow TrackPopupMenu TrackPopupMenuEx TranslateAcceleratorW TranslateMessage wsprintfW

gdi32

BitBlt CombineRgn CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateFontW CreatePen CreateRectRgnIndirect DeleteDC DeleteObject EndDoc EndPage EnumFontFamiliesExW FillRgn GetCurrentObject GetDeviceCaps GetStockObject GetTextExtentPointW LineTo MoveToEx Rectangle SelectObject SetBkMode SetRectRgn SetTextAlign StartDocW StartPage StretchBlt TextOutW

advapi32

RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

CreateStatusWindowW CreateToolbarEx InitCommonControlsEx PropertySheetW

ucrtbase

__acrt_iob_func __p___argc __p___argv __stdio_common_vsprintf __stdio_common_vswprintf _configure_narrow_argv _crt_atexit _errno _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type _strdup _wcsdup atoi calloc exit free fwrite getenv isspace malloc memcpy memmove memset qsort realloc strchr strcmp strcpy strcspn strlen wcscat wcslen wcstod

kernel32

CloseHandle CreateFileW GetCommandLineA GetCommandLineW GetDateFormatW GetLocalTime GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoA GetTickCount GetTimeFormatW GlobalLock GlobalUnlock HeapAlloc HeapReAlloc LoadLibraryW MulDiv ReadFile SetFilePointer WriteFile lstrcmpW lstrcmpiW

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

821abdf2a6ec2d613fa5fcd2f8bf8c60930a0a76fa341baf1209422aad9709ac

comdlg32

ole32

shell32

user32

gdi32

advapi32

comctl32

ucrtbase

kernel32

ntdll

generic