ef9d9ce9c14f255ae07e51c467703b14a2b1bc101b7dd04fdc64c8b987ff920f

Sharing

Copy URL Twitter E-mail

General

Target
ef9d9ce9c14f255ae07e51c467703b14a2b1bc101b7dd04fdc64c8b987ff920f
Size 89KB
Sample260908-kceynawbrf
SHA256 ef9d9ce9c14f255ae07e51c467703b14a2b1bc101b7dd04fdc64c8b987ff920f
MD5 52a3b4a2d8a3ee3f0f3cd765e59a28b9
SHA1 c3e993fb0340be57fb0be514f5943378cda1b244
SHA512 22ddeb0aa8b334c0f506c41127f1c39c926df1dcec44ea8c6962858a2477af698c5c6eb966e8e98f91caa040fb14bf107de3a7c7bfe48343781a8182dc4fbfde
SSDEEP 768:IY/JGu2POxVu0FTWNUcYe8lo7dqEg86HnoW:VJGu2glr63Iv
TLSH
T13A9331D0BB786591F6B2A23E96B78361573CFBE089E18B074F1876255D23AD11CD2313
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef9d9ce9c14f255ae07e51c467703b14a2b1bc101b7dd04fdc64c8b987ff920f

File Explorer

ef9d9ce9c14f255ae07e51c467703b14a2b1bc101b7dd04fdc64c8b987ff920f

.exe 89KB

ef9d9ce9c14f255ae07e51c467703b14a2b1bc101b7dd04fdc64c8b987ff920f

IMPHASH 2d7cfb4f1d460d2347f61e0736efb442
SHA256 ef9d9ce9c14f255ae07e51c467703b14a2b1bc101b7dd04fdc64c8b987ff920f
MD5 52a3b4a2d8a3ee3f0f3cd765e59a28b9
SHA1 c3e993fb0340be57fb0be514f5943378cda1b244
SHA512 22ddeb0aa8b334c0f506c41127f1c39c926df1dcec44ea8c6962858a2477af698c5c6eb966e8e98f91caa040fb14bf107de3a7c7bfe48343781a8182dc4fbfde
SSDEEP 768:IY/JGu2POxVu0FTWNUcYe8lo7dqEg86HnoW:VJGu2glr63Iv
TLSH
T13A9331D0BB786591F6B2A23E96B78361573CFBE089E18B074F1876255D23AD11CD2313
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

comctl32

InitCommonControls

comdlg32

ChooseFontW

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateEllipticRgn CreateFontIndirectW CreatePen DeleteDC DeleteObject Ellipse GetStockObject GetTextExtentPointW LineTo MoveToEx OffsetRgn OffsetWindowOrgEx SelectObject SetBkColor SetBkMode SetTextColor SetViewportOrgEx TextOutW

kernel32

GetCommandLineA GetDateFormatW GetLocalTime GetModuleHandleA GetStartupInfoA GetTimeFormatW

shell32

ShellAboutW

ucrtbase

__p___argc __p___argv _configure_narrow_argv _crt_atexit _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type cos exit sin

user32

BeginPaint CheckMenuItem CheckMenuRadioItem CreateWindowExW DefWindowProcW DispatchMessageW EnableMenuItem EndPaint FillRect GetDC GetMessageW GetSubMenu GetSysColor GetSysColorBrush GetWindowLongW GetWindowRect InvalidateRect KillTimer LoadCursorW LoadIconW LoadMenuW LoadStringW MapWindowPoints MessageBoxW PostQuitMessage RegisterClassW ReleaseDC SetMenu SetTimer SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextW ShowWindow TranslateMessage UpdateWindow

Name

.text

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

604B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ef9d9ce9c14f255ae07e51c467703b14a2b1bc101b7dd04fdc64c8b987ff920f

comctl32

comdlg32

gdi32

kernel32

shell32

ucrtbase

user32

generic