3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584

Sharing

Copy URL Twitter E-mail

General

Target
3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584
Size 257KB
Sample260916-mcjmysak2z
SHA256 3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584
MD5 ccfca0633bf9b52e0f27265935d6a1a7
SHA1 2237872be29fe8258c4af9827d684aea2558bbe8
SHA512 7497968da062336c3cfb3e700bee943204498a2f1d9eaaeac82924703ed3342d000e8d8a40b7f4eb1289adf1df817c011a649e88972a3ab4c54f373ef4f3869e
SSDEEP 3072:EoZH2r5TrMhApAv0aA9cftLQo+oMBSqZn5WalB7FJzmIjMbJc5Nxmgk6ikTxRB:EoZH2GhApAv0aA9cftUZHt5CqTxn
TLSH
T13C44C614EBF1E517F5B29EB52AF343A65936F8556B30850BAB84390F1C31E50CBAB702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584

File Explorer

3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584

.exe 257KB

3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584

IMPHASH 402a152b8c96c2eb7925e942314903dc
SHA256 3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584
MD5 ccfca0633bf9b52e0f27265935d6a1a7
SHA1 2237872be29fe8258c4af9827d684aea2558bbe8
SHA512 7497968da062336c3cfb3e700bee943204498a2f1d9eaaeac82924703ed3342d000e8d8a40b7f4eb1289adf1df817c011a649e88972a3ab4c54f373ef4f3869e
SSDEEP 3072:EoZH2r5TrMhApAv0aA9cftLQo+oMBSqZn5WalB7FJzmIjMbJc5Nxmgk6ikTxRB:EoZH2GhApAv0aA9cftUZHt5CqTxn
TLSH
T13C44C614EBF1E517F5B29EB52AF343A65936F8556B30850BAB84390F1C31E50CBAB702
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31261

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ntdll

DbgPrint

advapi32

RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

CreateStatusWindowW InitCommonControlsEx

kernel32

DeleteCriticalSection EnterCriticalSection FindResourceW FormatMessageW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetProcessHeap GetStartupInfoW GetSystemTimeAsFileTime GetTickCount HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection LeaveCriticalSection LoadLibraryW LoadResource LocalAlloc LocalFree LockResource MulDiv QueryPerformanceCounter SetUnhandledExceptionFilter SizeofResource Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery lstrlenW

msvcrt

__dllonexit __lconv_init __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _assert _cexit _fpreset _initterm _iob _lock _onexit _unlock _vsnwprintf _wcmdln _wcsicmp abort calloc exit free fwrite malloc memmove signal strncmp vfprintf swprintf wcscmp wcscpy wcslen

shell32

ShellAboutW

winmm

PlaySoundW mixerClose mixerGetControlDetailsW mixerGetDevCapsW mixerGetLineControlsW mixerGetLineInfoW mixerGetNumDevs mixerOpen mixerSetControlDetails

gdi32

CreateFontW DeleteObject GdiGetCharDimensions GetDeviceCaps SelectObject

user32

AdjustWindowRect CheckDlgButton CheckMenuItem CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW EnableMenuItem EnableWindow EndDialog GetClassLongW GetClientRect GetCursorPos GetDC GetDesktopWindow GetDialogBaseUnits GetDlgCtrlID GetDlgItem GetDlgItemTextW GetMenu GetMessageW GetWindowLongW GetWindowPlacement GetWindowRect LoadCursorW LoadIconW LoadMenuW LoadStringW MapWindowPoints MessageBoxW PostQuitMessage RegisterClassExW RegisterHotKey ReleaseDC SendDlgItemMessageW SendMessageW SetDlgItemTextW SetRectEmpty SetWindowLongW SetWindowPos SetWindowTextW ShowWindow TranslateMessage UnregisterClassW UnregisterHotKey wsprintfW

Name

.text

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

160KB

Virtual Size

160KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

55KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584

ntdll

advapi32

comctl32

kernel32

msvcrt

shell32

winmm

gdi32

user32

generic