b7b8411b99eb6ed9e137ce8bf7918557f2b8471e39d62e86b355055e8859a46e

Sharing

Copy URL Twitter E-mail

General

Target
b7b8411b99eb6ed9e137ce8bf7918557f2b8471e39d62e86b355055e8859a46e
Size 996KB
Sample260907-vm1yzs1fra
SHA256 b7b8411b99eb6ed9e137ce8bf7918557f2b8471e39d62e86b355055e8859a46e
MD5 4d8c1bf0f36001a9eca192424d581c98
SHA1 58682cc54e67023f02a58152699fd216941e7778
SHA512 5976cfe4c086fd9c585ba4f7071a58efbeb120bdf8d34a56d8bf18c4a6b2054af3c09a3d0345747ff88246fc471c02e408f9ed5b2cba00191a6ee69b49f2a524
SSDEEP 6144:t+2jnTciaOYyPukYQC/8tUDdwxvFzStPmcBRbnY/Rwk9ly4/9Uq:tBj7a5MlYQPtU+xvF+tJk/s4FB
TLSH
T16C25822123E98216F1F39B3429F586507E327C11AB32D6FF564066ED0BB3BD19A74722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7b8411b99eb6ed9e137ce8bf7918557f2b8471e39d62e86b355055e8859a46e

File Explorer

b7b8411b99eb6ed9e137ce8bf7918557f2b8471e39d62e86b355055e8859a46e

.exe 996KB

b7b8411b99eb6ed9e137ce8bf7918557f2b8471e39d62e86b355055e8859a46e

IMPHASH b627a45224fc146ec63eba5ba511a3d3
SHA256 b7b8411b99eb6ed9e137ce8bf7918557f2b8471e39d62e86b355055e8859a46e
MD5 4d8c1bf0f36001a9eca192424d581c98
SHA1 58682cc54e67023f02a58152699fd216941e7778
SHA512 5976cfe4c086fd9c585ba4f7071a58efbeb120bdf8d34a56d8bf18c4a6b2054af3c09a3d0345747ff88246fc471c02e408f9ed5b2cba00191a6ee69b49f2a524
SSDEEP 6144:t+2jnTciaOYyPukYQC/8tUDdwxvFzStPmcBRbnY/Rwk9ly4/9Uq:tBj7a5MlYQPtU+xvF+tJk/s4FB
TLSH
T16C25822123E98216F1F39B3429F586507E327C11AB32D6FF564066ED0BB3BD19A74722
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

71632

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comdlg32

ChooseColorW ChooseFontW GetOpenFileNameW

comctl32

ord320 ord388 ord323 ord324 InitCommonControls PropertySheetW

shell32

ord155 SHBindToParent SHBrowseForFolderW SHCreateDirectoryExW SHFileOperationW ord195 SHGetDesktopFolder SHGetFolderLocation SHGetFolderPathW ShellExecuteW

ole32

CoCreateInstance CoInitializeEx CoTaskMemFree CoUninitialize PropVariantClear

winmm

PlaySoundW midiOutGetDevCapsW midiOutGetNumDevs

shlwapi

PathFindExtensionW PathFindFileNameW PathRemoveExtensionW StrDupW StrRetToBufW StrRetToStrW

uxtheme

ord4 CloseThemeData ord3 DrawThemeBackground DrawThemeParentBackground ord9 ord10 ord8 GetCurrentThemeName GetThemeMargins IsThemeActive IsThemeBackgroundPartiallyTransparent OpenThemeDataForDpi ord2

user32

AdjustWindowRectEx CheckDlgButton CheckRadioButton DestroyIcon DialogBoxParamW DrawEdge DrawFocusRect DrawFrameControl DrawIconEx EnableWindow EndDialog EnumWindows FillRect FrameRect GetClientRect GetDC GetDesktopWindow GetDlgCtrlID GetDlgItem GetDlgItemInt GetDpiForWindow GetMenu GetParent GetPropW GetSysColor GetSysColorBrush GetSystemMetrics GetWindowLongPtrW GetWindowLongW GetWindowTextLengthW GetWindowTextW InvalidateRect IsDlgButtonChecked KillTimer LoadCursorW LoadIconW LoadImageW LoadStringW MessageBoxIndirectW MessageBoxW MoveWindow ReleaseDC SendDlgItemMessageW SendMessageW SetCursor SetDlgItemInt SetDlgItemTextA SetDlgItemTextW SetFocus SetSysColors SetTimer SetWindowLongPtrW SetWindowPos SetWindowTextA SetWindowTextW ShowWindow SystemParametersInfoW

gdi32

CreateFontIndirectW CreateFontW CreateSolidBrush DeleteObject GetDeviceCaps GetObjectW SetBkColor SetTextColor

advapi32

RegCloseKey RegCreateKeyExW RegCreateKeyW RegDeleteKeyExW RegDeleteKeyW RegDeleteTreeW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegOpenKeyW RegQueryValueExW RegSetValueExW

ucrtbase

__acrt_iob_func __p___argc __p___wargv __stdio_common_vsprintf __stdio_common_vswprintf __stdio_common_vswscanf _assert _configure_wide_argv _crt_atexit _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _strdup _wcsdup _wcsicmp _wcsnicmp bsearch exit free fwrite getenv malloc memcpy memmove realloc setlocale strchr strcmp strcpy strcspn strlen strrchr toupper wcscat wcschr wcscmp wcscpy wcslen wcsncmp wcsrchr wcstol wcstoul

kernel32

CloseHandle CreateFileW CreateProcessW DeviceIoControl ExitProcess FindClose FindFirstFileW FindNextFileW FormatMessageA GetCommandLineW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetStartupInfoW GetTickCount GetVolumeInformationW GlobalGetAtomNameW HeapAlloc HeapReAlloc IsBadStringPtrA IsBadStringPtrW IsWow64Process MulDiv MultiByteToWideChar SetVolumeLabelW WaitForSingleObject WideCharToMultiByte Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection WriteFile lstrcmpiW

ntdll

RtlDosPathNameToNtPathName_U RtlFreeUnicodeString _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

b7b8411b99eb6ed9e137ce8bf7918557f2b8471e39d62e86b355055e8859a46e

comdlg32

comctl32

shell32

ole32

winmm

shlwapi

uxtheme

user32

gdi32

advapi32

ucrtbase

kernel32

ntdll

generic