109239cd26fe81c52278d59e15f9147d103b385dea638f66d406e192b6ea7e40

General

Target
109239cd26fe81c52278d59e15f9147d103b385dea638f66d406e192b6ea7e40
Size 30KB
Sample260916-hyjgvs1v3j
SHA256 109239cd26fe81c52278d59e15f9147d103b385dea638f66d406e192b6ea7e40
MD5 c3251f33b6280f137ce12b959a2f48cb
SHA1 0aea1e5391177a483d0cc22bc3e09a753f5732b3
SHA512 aaa10871dc5d85b0c184322739297d74538826148122bc8017663d944eebc7b801ec66f36e880de76a28925b6067990c72e56fd78943f9bede1d18211e9082e7
SSDEEP 768:JOuadg0vJoUdRqXAjGOaNMwXgO0qcSbJ4HMBfU47DSwM:Atdad10qcSbJ4sVUoDPM
TLSH
T1CBE24C06A7E8067DF2B2D638AC794517C9B1FD551624D31F55A08A9E0F233A1DC2B732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
109239cd26fe81c52278d59e15f9147d103b385dea638f66d406e192b6ea7e40

File Explorer

109239cd26fe81c52278d59e15f9147d103b385dea638f66d406e192b6ea7e40

.exe 30KB

109239cd26fe81c52278d59e15f9147d103b385dea638f66d406e192b6ea7e40

IMPHASH bee6b25fe340104612648055572a9c6e
SHA256 109239cd26fe81c52278d59e15f9147d103b385dea638f66d406e192b6ea7e40
MD5 c3251f33b6280f137ce12b959a2f48cb
SHA1 0aea1e5391177a483d0cc22bc3e09a753f5732b3
SHA512 aaa10871dc5d85b0c184322739297d74538826148122bc8017663d944eebc7b801ec66f36e880de76a28925b6067990c72e56fd78943f9bede1d18211e9082e7
SSDEEP 768:JOuadg0vJoUdRqXAjGOaNMwXgO0qcSbJ4HMBfU47DSwM:Atdad10qcSbJ4sVUoDPM
TLSH
T1CBE24C06A7E8067DF2B2D638AC794517C9B1FD551624D31F55A08A9E0F233A1DC2B732
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

15756

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

ord410 ord413 ord412 InitCommonControlsEx

comdlg32

GetOpenFileNameW CommDlgExtendedError

shell32

ShellExecuteW DragFinish DragAcceptFiles DragQueryFileW

advapi32

CreateServiceW RegOpenKeyExW OpenServiceW QueryServiceStatusEx RegSetValueExW ControlService RegCloseKey CloseServiceHandle OpenSCManagerW RegCreateKeyExW DeleteService StartServiceW

user32

SetWindowLongPtrW SendMessageW EndDialog GetWindowLongPtrW SetTimer DestroyIcon SetDlgItemTextW SendDlgItemMessageW IsDlgButtonChecked GetWindowRect IsZoomed GetDlgItem KillTimer CheckDlgButton DialogBoxParamW LoadImageW IsIconic EnableWindow MonitorFromRect GetSystemMetrics GetMonitorInfoW GetWindow SetWindowPos ChangeWindowMessageFilterEx MessageBoxW GetDlgItemTextW

kernel32

ExitProcess CreateThread WaitForSingleObject GetModuleHandleW GetProcAddress GetTickCount64 Sleep GetFileAttributesW GetFullPathNameW FlushFileBuffers lstrcmpW lstrcmpiW CloseHandle GetLastError GetPrivateProfileStringW CreateFileW GetTempPathW WriteFile SetLastError lstrlenW WritePrivateProfileStringW GetProcessHeap LocalFree HeapAlloc FormatMessageW HeapFree

Sharing

General

Malware Config

Signatures

File Explorer

109239cd26fe81c52278d59e15f9147d103b385dea638f66d406e192b6ea7e40

comctl32

comdlg32

shell32

advapi32

user32

kernel32

generic