bb598d507a716c77bd19ea3bbf3c140a55116602ac7403f6dbedad8008a38ddb

Sharing

Copy URL Twitter E-mail

General

Target
bb598d507a716c77bd19ea3bbf3c140a55116602ac7403f6dbedad8008a38ddb
Size 4.0MB
Sample260924-ml5lsabd98
SHA256 bb598d507a716c77bd19ea3bbf3c140a55116602ac7403f6dbedad8008a38ddb
MD5 e4f0b11181face0ff64edd04171dc6e3
SHA1 cc132ae3a862eb9f455df5fa422565c7481412ad
SHA512 d54c08d7c16309eba9625ff44bd6062033268b6831ad4daa5e3dff42cd47ff4f702d80efdb75518ceea6c9ddd8fddba6c1b39a1248185565bfa3763e27eeeee2
SSDEEP 98304:7x7a7vgeN0C/ym211fcnGvvRR0qzxsVelkbL6:97Aa9AqiqCQC2
TLSH
T182163321B6F4CDBAD293103096EDABBA61E6D6544F219E8713C09E1E3F348E1F13166D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb598d507a716c77bd19ea3bbf3c140a55116602ac7403f6dbedad8008a38ddb

File Explorer

bb598d507a716c77bd19ea3bbf3c140a55116602ac7403f6dbedad8008a38ddb

.exe 4.0MB

bb598d507a716c77bd19ea3bbf3c140a55116602ac7403f6dbedad8008a38ddb

IMPHASH eb0cbb54ca401e820f6974e6548a4451
SHA256 bb598d507a716c77bd19ea3bbf3c140a55116602ac7403f6dbedad8008a38ddb
MD5 e4f0b11181face0ff64edd04171dc6e3
SHA1 cc132ae3a862eb9f455df5fa422565c7481412ad
SHA512 d54c08d7c16309eba9625ff44bd6062033268b6831ad4daa5e3dff42cd47ff4f702d80efdb75518ceea6c9ddd8fddba6c1b39a1248185565bfa3763e27eeeee2
SSDEEP 98304:7x7a7vgeN0C/ym211fcnGvvRR0qzxsVelkbL6:97Aa9AqiqCQC2
TLSH
T182163321B6F4CDBAD293103096EDABBA61E6D6544F219E8713C09E1E3F348E1F13166D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

165452

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysAllocStringLen SysAllocString VariantClear SysFreeString SysStringLen

ole32

CoUninitialize CoTaskMemFree CoCreateInstance CoInitialize OleInitialize

user32

CheckDlgButton IsDlgButtonChecked DestroyIcon EndDialog SetDlgItemTextW GetFocus SetFocus GetKeyState InvalidateRect SetWindowTextW EnableWindow PostMessageW MessageBoxW DialogBoxParamW SetWindowLongW SetTimer GetParent ShowWindow MoveWindow ScreenToClient GetDlgItem GetWindowRect MapDialogRect MonitorFromWindow GetMonitorInfoA SystemParametersInfoW GetWindowTextLengthW GetWindowTextW SendMessageW LoadStringW SetClipboardData EmptyClipboard CloseClipboard OpenClipboard CharUpperW LoadIconW SetCursor LoadCursorW KillTimer GetWindowLongW

shell32

SHBrowseForFolderW SHGetFileInfoW SHGetPathFromIDListW

msvcrt

memset strlen _beginthreadex _except_handler3 ??1type_info@@UAE@XZ ?terminate@@YAXXZ __dllonexit _onexit _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp wcsstr free malloc memcpy memmove _purecall memcmp _CxxThrowException __CxxFrameHandler wcscmp

kernel32

GetStartupInfoA InitializeCriticalSection ReleaseSemaphore CreateSemaphoreW ResetEvent SetEvent CreateEventW WaitForSingleObject GetVersion IsProcessorFeaturePresent VirtualFree VirtualAlloc SetPriorityClass WaitForMultipleObjects DeleteCriticalSection Sleep EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime GlobalMemoryStatus GetSystemInfo GetCurrentProcess GetProcessAffinityMask GetModuleHandleW FileTimeToLocalFileTime FileTimeToSystemTime CompareFileTime GlobalFree GlobalAlloc SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetLogicalDriveStringsW GetFileAttributesW GetModuleHandleA GetProcAddress FindNextFileW FindFirstFileW FindClose GetStdHandle GetFileInformationByHandle GetTickCount GetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW MoveFileW RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime CloseHandle GetSystemDirectoryW FormatMessageW GetModuleFileNameW LoadLibraryExW GlobalLock GlobalUnlock MultiByteToWideChar GetLastError GetCommandLineW GetVersionExW LocalFree

Sharing

General

Malware Config

Signatures

File Explorer

bb598d507a716c77bd19ea3bbf3c140a55116602ac7403f6dbedad8008a38ddb

oleaut32

ole32

user32

shell32

msvcrt

kernel32

generic