94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a

Sharing

Copy URL Twitter E-mail

General

Target
94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a
Size 8.3MB
Sample260916-taepjsbe83
SHA256 94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a
MD5 e2f774b15a85c98a78e162617b3b85aa
SHA1 483c58dca09636c458896fb7b7afbe75300cc441
SHA512 97de2d0b8c1addd640b136fecdf84f5773f3e683eca56b29dc3f2a9dbb7ada71c7ad332c21f90b1d122d3d2d3d4e4ada301e3f77d690232c424a1580da4d7f0c
SSDEEP 98304:DuLUz+7O7GTXLfJBcNOdXvG3hvspHoqjcj3l2QMPX9wFbs2dQWoLuPXz07Lm2v7m:DVz3KX7QOxOwpgj3l2adLoq/ggA2TJp
TLSH
T171963305BBFD3051D5B71BB5B8F9925300A6BB78D87A83BF4610A49F0874EA185F072B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a

File Explorer

94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a

.exe 8.3MB

94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a

IMPHASH b7ed8c660e4ca1446e9ef00b1e8f91c3
SHA256 94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a
MD5 e2f774b15a85c98a78e162617b3b85aa
SHA1 483c58dca09636c458896fb7b7afbe75300cc441
SHA512 97de2d0b8c1addd640b136fecdf84f5773f3e683eca56b29dc3f2a9dbb7ada71c7ad332c21f90b1d122d3d2d3d4e4ada301e3f77d690232c424a1580da4d7f0c
SSDEEP 98304:DuLUz+7O7GTXLfJBcNOdXvG3hvspHoqjcj3l2QMPX9wFbs2dQWoLuPXz07Lm2v7m:DVz3KX7QOxOwpgj3l2adLoq/ggA2TJp
TLSH
T171963305BBFD3051D5B71BB5B8F9925300A6BB78D87A83BF4610A49F0874EA185F072B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26918

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wextract.pdb

advapi32

OpenProcessToken GetTokenInformation RegSetValueExA EqualSid RegQueryValueExA LookupPrivilegeValueA RegCreateKeyExA RegOpenKeyExA RegQueryInfoKeyA RegDeleteValueA AllocateAndInitializeSid FreeSid AdjustTokenPrivileges RegCloseKey

kernel32

GetPrivateProfileIntA GetFileAttributesA IsDBCSLeadByte GetSystemDirectoryA GlobalUnlock GetShortPathNameA CreateDirectoryA FindFirstFileA GetLastError GetProcAddress RemoveDirectoryA SetFileAttributesA GlobalFree FindClose GetPrivateProfileStringA LoadLibraryA LocalAlloc WritePrivateProfileStringA GetModuleFileNameA FindNextFileA CompareStringA _lopen CloseHandle LocalFree DeleteFileA ExitProcess DosDateTimeToFileTime CreateFileA FindResourceA GlobalAlloc ExpandEnvironmentStringsA LoadResource WaitForSingleObject SetEvent GetModuleHandleW FormatMessageA SetFileTime WriteFile GetDriveTypeA GetVolumeInformationA TerminateThread SizeofResource CreateEventA GetExitCodeProcess CreateProcessA ReadFile _llseek GetTempFileNameA ResetEvent LockResource GetSystemInfo LoadLibraryExA CreateMutexA GetCurrentDirectoryA GetVersionExA GetVersion GetTempPathA CreateThread LocalFileTimeToFileTime SetFilePointer GetWindowsDirectoryA lstrcmpA _lclose GlobalLock GetCurrentProcess FreeResource FreeLibrary Sleep InterlockedExchange InterlockedCompareExchange GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess OutputDebugStringA RtlUnwind GetModuleHandleA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount EnumResourceLanguagesA MulDiv GetDiskFreeSpaceA SetCurrentDirectoryA

gdi32

GetDeviceCaps

user32

SetForegroundWindow MsgWaitForMultipleObjects SendDlgItemMessageA GetWindowRect GetDC SetWindowLongA MessageBoxA GetWindowLongA PeekMessageA ReleaseDC GetDlgItem SetWindowPos ShowWindow DispatchMessageA SetWindowTextA EnableWindow CallWindowProcA DialogBoxIndirectParamA GetDlgItemTextA LoadStringA MessageBeep CharUpperA CharNextA ExitWindowsEx CharPrevA EndDialog GetDesktopWindow SetDlgItemTextA SendMessageA GetSystemMetrics

msvcrt

?terminate@@YAXXZ _controlfp _initterm __setusermatherr _ismbblead __p__fmode _cexit _exit exit memset memcpy __set_app_type __getmainargs _amsg_exit __p__commode _XcptFilter _errno _vsnprintf _acmdln

comctl32

ord17

cabinet

ord22 ord23 ord21 ord20

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a

advapi32

kernel32

gdi32

user32

msvcrt

comctl32

cabinet

version

generic