19c8893ed70f482f60ffed55a6444aec655c4765e83cc6042ca0775bad1c17ee

Sharing

Copy URL Twitter E-mail

General

Target
19c8893ed70f482f60ffed55a6444aec655c4765e83cc6042ca0775bad1c17ee
Size 123KB
Sample260916-mdck2aak31
SHA256 19c8893ed70f482f60ffed55a6444aec655c4765e83cc6042ca0775bad1c17ee
MD5 de68da59ab08c78fab0ae2500e2b3a1e
SHA1 cc8a0637677ffe66561bbfc8c8db37433de000ee
SHA512 b57692dc19c7bdcb4c4af99e2a5af5ad742c0651a770a4857a10526eba5057b6d17a03078392ef5dc4b0ba0020de461c22d12c2e7dc4f732ccb44553fd685e74
SSDEEP 3072:S7edtTo17TZtDh/vVy5qy78qqykD3WfnGsc+:SYt0pDh/v0zkD0nG
TLSH
T1A8C3D711EFCAD866FDA126785CB3C2B90379FC209AD2CA4B57C45D5F7E6061188E1F12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19c8893ed70f482f60ffed55a6444aec655c4765e83cc6042ca0775bad1c17ee

File Explorer

19c8893ed70f482f60ffed55a6444aec655c4765e83cc6042ca0775bad1c17ee

.exe 123KB

19c8893ed70f482f60ffed55a6444aec655c4765e83cc6042ca0775bad1c17ee

IMPHASH 2bbd078b5315b80dc099917628dc4802
SHA256 19c8893ed70f482f60ffed55a6444aec655c4765e83cc6042ca0775bad1c17ee
MD5 de68da59ab08c78fab0ae2500e2b3a1e
SHA1 cc8a0637677ffe66561bbfc8c8db37433de000ee
SHA512 b57692dc19c7bdcb4c4af99e2a5af5ad742c0651a770a4857a10526eba5057b6d17a03078392ef5dc4b0ba0020de461c22d12c2e7dc4f732ccb44553fd685e74
SSDEEP 3072:S7edtTo17TZtDh/vVy5qy78qqykD3WfnGsc+:SYt0pDh/v0zkD0nG
TLSH
T1A8C3D711EFCAD866FDA126785CB3C2B90379FC209AD2CA4B57C45D5F7E6061188E1F12
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18773

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegEnumValueW RegOpenKeyExW RegQueryInfoKeyW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

comdlg32

GetOpenFileNameW

kernel32

DeleteCriticalSection EnterCriticalSection FormatMessageW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetFileAttributesW GetLastError GetModuleHandleA GetProcAddress GetStartupInfoW GetSystemTimeAsFileTime GetTickCount GetUserDefaultUILanguage InitializeCriticalSection LeaveCriticalSection LoadLibraryW LocalFree QueryPerformanceCounter SearchPathW SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcrt

__dllonexit __lconv_init __set_app_type __setusermatherr __wargv __wgetmainargs __winitenv _amsg_exit _cexit _fpreset _initterm _iob _lock _onexit _unlock _vsnwprintf _wcmdln abort calloc exit free fwrite malloc memmove memset signal strncmp vfprintf wcscmp wcsrchr

shell32

DragAcceptFiles DragFinish DragQueryFileW ShellAboutW ShellExecuteW

winmm

mciGetErrorStringW mciSendCommandW

user32

CharLowerBuffW CheckMenuItem CreateWindowExW DefWindowProcW DestroyAcceleratorTable DispatchMessageW EnableMenuItem GetClientRect GetMenu GetMenuItemInfoW GetMessageW GetSubMenu GetSystemMetrics GetWindowRect InsertMenuItemW KillTimer LoadAcceleratorsW LoadCursorW LoadIconW LoadImageW LoadStringW MessageBoxW MoveWindow PostMessageW PostQuitMessage RegisterClassExW SendMessageW SetParent SetProcessDefaultLayout SetTimer SetWindowTextW ShowWindow TranslateAcceleratorW TranslateMessage UpdateWindow

Name

.text

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

19c8893ed70f482f60ffed55a6444aec655c4765e83cc6042ca0775bad1c17ee

advapi32

comctl32

comdlg32

kernel32

msvcrt

shell32

winmm

user32

generic