SisterLocation[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SisterLocation.exe
Size 780.8MB
Sample260916-sm57lasbne
SHA256 e26b92e0eab6219451057db543b5d0da78f3f166f76faf822a5e5c173dc2070c
MD5 68c5a728de04ce4ee7400a21e2a8d339
SHA1 346abce011bbc56255605bcc46ebf37fa18546b2
SHA512 bbb80675c23edb1586be8c1c80705ac276e7f21b9d41e91c096e583f4524ba010cd756113e0ccca736c0fb23e49ccbc2ad4fbadc7f989cc7507289ab82f96a7f
SSDEEP 25165824:WQzVfEoEi71Cimdgsp/r+S/XSAMI3ie8A9Q:TztEop7cimdgsdr+SQ3A6
TLSH
T13389338CE6E7D842DCAB5033C6AA3E30A7BE0027436244DB527579442E965FD0F76A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SisterLocation.exe

File Explorer

SisterLocation.exe

.exe 780.8MB

SisterLocation.exe

IMPHASH e933eb80698516b8bbfa04a4e8f906f5
SHA256 e26b92e0eab6219451057db543b5d0da78f3f166f76faf822a5e5c173dc2070c
MD5 68c5a728de04ce4ee7400a21e2a8d339
SHA1 346abce011bbc56255605bcc46ebf37fa18546b2
SHA512 bbb80675c23edb1586be8c1c80705ac276e7f21b9d41e91c096e583f4524ba010cd756113e0ccca736c0fb23e49ccbc2ad4fbadc7f989cc7507289ab82f96a7f
SSDEEP 25165824:WQzVfEoEi71Cimdgsp/r+S/XSAMI3ie8A9Q:TztEop7cimdgsdr+SQ3A6
TLSH
T13389338CE6E7D842DCAB5033C6AA3E30A7BE0027436244DB527579442E965FD0F76A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

463014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

winmm

timeBeginPeriod joyGetDevCapsW joyGetPosEx timeGetTime timeEndPeriod

kernel32

GetVersion GetTempFileNameW GlobalAddAtomW GlobalDeleteAtom GetModuleHandleW lstrlenW GetLocaleInfoA LockResource VirtualProtect VirtualQuery SetLastError LoadResource SizeofResource FindResourceA FindResourceW IsBadReadPtr IsBadWritePtr LoadLibraryExW GetConsoleMode GetConsoleCP FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameA GetFileType GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GlobalFree GetStringTypeW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection GetOEMCP IsValidCodePage GetCPInfo GetProcessHeap GetStdHandle GetModuleHandleExW ExitProcess RtlUnwind GetCommandLineA HeapSize HeapCompact SetEnvironmentVariableW HeapReAlloc DeleteFileW IsProcessorFeaturePresent IsDebuggerPresent GetACP InterlockedDecrement InterlockedIncrement DecodePointer EncodePointer HeapFree HeapAlloc LoadLibraryExA InterlockedExchange RaiseException FileTimeToSystemTime FileTimeToLocalFileTime GetSystemTime GetTempPathW FindClose FindNextFileW FindFirstFileW GetCurrentDirectoryW SetErrorMode WideCharToMultiByte GlobalUnlock GlobalLock GlobalAlloc GetExitCodeProcess GetCommandLineW Sleep SetCurrentDirectoryW CreateDirectoryW CloseHandle SetFilePointer WriteFile GetLastError ReadFile CreateFileW GetCurrentThreadId RemoveDirectoryW GetVersionExW GetModuleFileNameW GetLocaleInfoW MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryW OutputDebugStringW SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers LCMapStringW

user32

IsIconic GetUpdateRect FillRect GetMenuItemID GetMenuStringW ModifyMenuW GetTabbedTextExtentW SystemParametersInfoW DrawEdge DrawTextW PostQuitMessage IntersectRect SetRect DrawFocusRect InvertRect CreateDialogParamA CreateDialogParamW CreateDialogIndirectParamA CreateDialogIndirectParamW DialogBoxParamA DialogBoxIndirectParamA DialogBoxIndirectParamW LoadMenuA LoadMenuW LoadStringA SetLastErrorEx PtInRect GetDlgItem MapVirtualKeyW GetInputState GetDlgItemTextW SendDlgItemMessageW DefMDIChildProcW DrawMenuBar DestroyMenu GetMenuItemCount SetWindowPlacement GetWindowPlacement GetFocus CallWindowProcW RemovePropW SetPropW GetPropW UnionRect DestroyWindow SetScrollPos SetScrollRange CreateWindowExW GetParent EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetFocus GetSysColor GetDesktopWindow RedrawWindow UpdateWindow SetWindowLongW MessageBoxW LoadStringW DialogBoxParamW RegisterClassW RegisterClassExW LoadImageW LoadIconW GetWindow SetDlgItemTextW BeginPaint EndPaint EndDialog GetClassNameW GetTopWindow GetMonitorInfoW MonitorFromWindow GetSystemMetrics OemToCharA GetAsyncKeyState GetActiveWindow ShowCursor SetCapture ReleaseCapture GetKeyState GetWindowRect MapWindowPoints SetWindowPos IsZoomed GetWindowLongW AdjustWindowRectEx SendMessageW LockWindowUpdate IsWindowVisible GetClientRect SetWindowTextW IsDialogMessageW SetTimer GetClipboardData CloseClipboard SetClipboardData EmptyClipboard OpenClipboard IsClipboardFormatAvailable wsprintfW ShowWindow PostMessageW CheckMenuItem EnableMenuItem GetMenu InvalidateRect SetCursorPos ClientToScreen ScreenToClient GetCursorPos GetKeyboardState CopyRect UnhookWindowsHookEx KillTimer SetWindowsHookExW CallNextHookEx DestroyIcon GetKeyboardLayout GetSubMenu DeleteMenu GetMenuState ReleaseDC CreateIconIndirect GetDC MsgWaitForMultipleObjects DispatchMessageW TranslateMessage TranslateMDISysAccel GetMessageW PeekMessageW LoadMenuIndirectW

gdi32

CreatePalette GetDeviceCaps SelectPalette RealizePalette GetObjectW CreateFontIndirectW CreatePen Rectangle SelectObject MoveToEx LineTo CreateSolidBrush GetStockObject SetTextColor SetBkMode DeleteObject GetClipRgn ExcludeClipRect SelectClipRgn GetTextExtentPointW TextOutW SetTextAlign SetROP2 GetNearestPaletteIndex SetPolyFillMode DPtoLP SetBkColor Polygon CreateHatchBrush GetCharWidthW LPtoDP GetTextMetricsW SetDIBits CreateCompatibleBitmap CreateRectRgn CreateBitmap

comdlg32

GetOpenFileNameW GetSaveFileNameW

shell32

DragAcceptFiles DragQueryFileW ShellExecuteExW