lanshare-desktop[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
lanshare-desktop.exe
Size 8.3MB
Sample260916-tkz38sdk5x
SHA256 eb5e1610ca603878a80f5f1940d95d5555704867d44e23231134731da448a925
MD5 450f057b051550141d53f26c689ac823
SHA1 6e2b645e05d48233f6a8b29c858cfed5fd9f1382
SHA512 a17b2bc5d5f644c7eeea654d3417af9a6dfb3cbc12e6484d5295bf2ef79b3d81c1c899740298ff3a11e18ded7a0e7705b1c7c2a3e938eca4d5014c73f1085f1c
SSDEEP 98304:wApeBItiJQTZl4jV+q2oBm+U4TZ7XcEkcxYL1NGQKuN+zc9:wuAUhzoob4TZ4jyRz8
TLSH
T119964A43F26680ECC56AC075931A6232FA72B84D07357AEB5BA04B213F66FD06B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
lanshare-desktop.exe

File Explorer

lanshare-desktop.exe

.exe 8.3MB

lanshare-desktop.exe

IMPHASH 43d278e05fa553cec662ae55fedad515
SHA256 eb5e1610ca603878a80f5f1940d95d5555704867d44e23231134731da448a925
MD5 450f057b051550141d53f26c689ac823
SHA1 6e2b645e05d48233f6a8b29c858cfed5fd9f1382
SHA512 a17b2bc5d5f644c7eeea654d3417af9a6dfb3cbc12e6484d5295bf2ef79b3d81c1c899740298ff3a11e18ded7a0e7705b1c7c2a3e938eca4d5014c73f1085f1c
SSDEEP 98304:wApeBItiJQTZl4jV+q2oBm+U4TZ7XcEkcxYL1NGQKuN+zc9:wuAUhzoob4TZ4jyRz8
TLSH
T119964A43F26680ECC56AC075931A6232FA72B84D07357AEB5BA04B213F66FD06B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7028160

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

lanshare_desktop.pdb

bcryptprimitives

ProcessPrng

ntdll

NtDeviceIoControlFile NtWriteFile NtReadFile NtCreateNamedPipeFile NtCreateFile RtlGetVersion NtOpenFile NtCancelIoFileEx RtlNtStatusToDosError

kernel32

LCIDToLocaleName GetProcessHeap FindClose HeapFree SetLastError WaitForSingleObject GetCurrentProcessId SetThreadStackGuarantee GetCurrentThread HeapReAlloc SetWaitableTimer SwitchToThread GetSystemTimePreciseAsFileTime GetVolumePathNameW GetDiskFreeSpaceW HeapAlloc GetComputerNameExW GetFullPathNameW lstrlenW MoveFileExW CopyFileExW GetModuleHandleA FlushFileBuffers GetModuleHandleW SetFileCompletionNotificationModes GetCurrentThreadId GetUserDefaultUILanguage DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SystemTimeToFileTime CreateFileMappingW GetCommandLineW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceFrequency LoadLibraryA GetEnvironmentVariableW GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext SetEnvironmentVariableW SetFileInformationByHandle QueryPerformanceCounter AddVectoredExceptionHandler Sleep UnlockFileEx CreateMutexW CreateFileA LockFileEx GetLastError CloseHandle TerminateProcess IsProcessorFeaturePresent CreateProcessW ReadFileEx LoadLibraryW WriteFileEx DeviceIoControl ReleaseSRWLockExclusive AcquireSRWLockExclusive RtlLookupFunctionEntry WaitForSingleObjectEx GetCurrentProcess WideCharToMultiByte ReleaseMutex MultiByteToWideChar CreateDirectoryW FindFirstFileExW GetFileInformationByHandle GetFileInformationByHandleEx FormatMessageW GetModuleFileNameW GetTempPathW SetHandleInformation DeleteFileW GetFinalPathNameByHandleW SleepEx ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW GetFileAttributesW DuplicateHandle SetFilePointerEx FindNextFileW WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle CreateMutexA CreateFileW CancelIoEx CreateIoCompletionPort WakeAllConditionVariable SleepConditionVariableSRW GetQueuedCompletionStatusEx ReadFile WriteFile GetOverlappedResult IsDebuggerPresent RtlPcToFileHeader PostQueuedCompletionStatus EncodePointer TlsAlloc TlsGetValue TlsSetValue GetSystemInfo TlsFree UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeSListHead RtlUnwindEx CreateWaitableTimerExW CreateThread InitializeCriticalSectionAndSpinCount LoadLibraryExW RaiseException LoadLibraryExA FreeLibrary AreFileApisANSI HeapCreate OutputDebugStringA LockFile SetFilePointer GetTickCount MapViewOfFile FormatMessageA GetSystemTime GetSystemTimeAsFileTime GetFileSize LocalFree UnlockFile HeapDestroy HeapCompact DeleteFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapSize HeapValidate UnmapViewOfFile SetEndOfFile GetFullPathNameA GetProcAddress

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

shell32

SHOpenFolderAndSelectItems ILFree SHGetKnownFolderPath SHCreateItemFromParsingName ShellExecuteExW Shell_NotifyIconGetRect ILCreateFromPathW ShellExecuteW DragQueryFileW DragFinish SHAppBarMessage Shell_NotifyIconW

ole32

CoIncrementMTAUsage CoTaskMemFree CoInitialize CoUninitialize CoInitializeEx CoTaskMemAlloc CoCreateInstance RegisterDragDrop RevokeDragDrop OleInitialize CoCreateFreeThreadedMarshaler

user32

SetWindowLongW GetKeyboardLayout GetSystemMenu ClipCursor GetClipCursor ShowCursor MapVirtualKeyExW ToUnicodeEx GetMenu GetWindowTextLengthW RegisterWindowMessageA SetCapture GetWindowTextW DestroyIcon SetWindowTextW GetKeyboardState TrackMouseEvent DestroyWindow IsProcessDPIAware GetAsyncKeyState TrackPopupMenu EnableMenuItem SetPropW SystemParametersInfoW VkKeyScanW CheckMenuItem DrawTextW GetTouchInputInfo CloseTouchInputHandle GetWindowDC OffsetRect MapWindowPoints GetMenuBarInfo ShowWindow GetWindowPlacement SetWindowPlacement PostQuitMessage SystemParametersInfoA FindWindowExW PostThreadMessageW DrawIconEx ReleaseDC AdjustWindowRect GetDC GetParent AppendMenuW InsertMenuW CreateIcon SetMenuItemInfoW CreatePopupMenu CreateMenu CreateAcceleratorTableW PeekMessageW ChangeDisplaySettingsExW GetMonitorInfoW UpdateWindow DestroyAcceleratorTable InvalidateRect ReleaseCapture SetWindowRgn SetCursorPos GetForegroundWindow InvalidateRgn SetWindowPos GetWindowRect PostMessageW FlashWindowEx DestroyMenu GetActiveWindow ClientToScreen FillRect KillTimer SetWindowDisplayAffinity SendInput MapVirtualKeyW SetForegroundWindow RegisterTouchWindow GetSystemMetrics IsWindow CreateWindowExW AdjustWindowRectEx RegisterClassExW LoadCursorW IsWindowEnabled EnableWindow MonitorFromPoint GetWindowLongPtrW EnumDisplayMonitors MonitorFromWindow IsIconic IsWindowVisible GetCursorPos SendMessageW SetCursor GetClientRect RedrawWindow DispatchMessageW TranslateMessage GetMessageW RegisterRawInputDevices GetKeyState SetWindowLongPtrW DefWindowProcW SetTimer ScreenToClient GetWindowLongW MonitorFromRect TranslateAcceleratorW MsgWaitForMultipleObjectsEx GetUpdateRect ValidateRect GetRawInputData DrawMenuBar SetMenu GetMenuItemInfoW ChangeWindowMessageFilterEx RegisterClassW SetFocus GetWindow EnumChildWindows RemoveMenu DispatchMessageA SetParent GetMessageA

oleaut32

SysStringLen SetErrorInfo GetErrorInfo SysFreeString

gdi32

BitBlt CreateRectRgn CreateSolidBrush GetDeviceCaps SetTextColor SetBkMode DeleteDC SelectObject CombineRgn CreateDIBSection DeleteObject CreateCompatibleDC

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

comctl32

DefSubclassProc TaskDialogIndirect SetWindowSubclass RemoveWindowSubclass

shlwapi

SHCreateMemStream

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

advapi32

EventWriteTransfer EventSetInformation RegQueryValueExW RegCloseKey RegGetValueW RegOpenKeyExW EventUnregister SystemFunction036 EventRegister

ws2_32

shutdown send recv freeaddrinfo getaddrinfo WSACleanup WSAStartup WSAIoctl sendto accept WSASend recvfrom bind ioctlsocket setsockopt WSASocketW getsockopt connect closesocket getsockname WSAGetLastError getpeername listen

iphlpapi

GetAdaptersAddresses

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

pow log fmod trunc round floor roundf __setusermatherr

api-ms-win-crt-string-l1-1-0

strcmp _wcsicmp wcscmp wcslen strlen strcspn strspn strcpy_s wcsncmp strncmp

api-ms-win-crt-heap-l1-1-0

_msize calloc malloc free _callnewh realloc _set_new_mode

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _initterm_e _set_app_type exit _initialize_onexit_table _exit _register_onexit_function __p___argc __p___argv _cexit _endthreadex _crt_atexit terminate abort _initterm _register_thread_local_exe_atexit_callback _seh_filter_exe _c_exit _beginthreadex

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol _wtoi

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale