5a7de430cb340eef814222e65361e90cda48c23fe453cfe03684e1c71baeab63

Sharing

Copy URL Twitter E-mail

General

Target
5a7de430cb340eef814222e65361e90cda48c23fe453cfe03684e1c71baeab63
Size 694KB
Sample260924-mnn2tabe53
SHA256 5a7de430cb340eef814222e65361e90cda48c23fe453cfe03684e1c71baeab63
MD5 a6758620e84f208aa67dbe64473cf015
SHA1 a321bb3a4d2eea27e2d10bc6270427283d8ed7a2
SHA512 2d56d7a79bc62c8b01c5138b3ed9ff86d443dedc2c1b1a4d25cfd82483d9fe998801a047210c67ba964a3063543bc0c5f1ab746c22c7e749ac5bf643c0c4fdc7
SSDEEP 12288:9vCFAalDl+hyVh363uB2doMQ21xRJEaFY0Goh:5udls2h3Uueo41xRCZ0G
TLSH
T18FE47C02E69241ECD07B803645AB6217F371381403649EEB9790DAAD5F337E1AE7BB07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a7de430cb340eef814222e65361e90cda48c23fe453cfe03684e1c71baeab63

File Explorer

5a7de430cb340eef814222e65361e90cda48c23fe453cfe03684e1c71baeab63

.dll 694KB

5a7de430cb340eef814222e65361e90cda48c23fe453cfe03684e1c71baeab63

IMPHASH 649c2fa5a1e4968f6989dd1f8c70bc4e
SHA256 5a7de430cb340eef814222e65361e90cda48c23fe453cfe03684e1c71baeab63
MD5 a6758620e84f208aa67dbe64473cf015
SHA1 a321bb3a4d2eea27e2d10bc6270427283d8ed7a2
SHA512 2d56d7a79bc62c8b01c5138b3ed9ff86d443dedc2c1b1a4d25cfd82483d9fe998801a047210c67ba964a3063543bc0c5f1ab746c22c7e749ac5bf643c0c4fdc7
SSDEEP 12288:9vCFAalDl+hyVh363uB2doMQ21xRJEaFY0Goh:5udls2h3Uueo41xRCZ0G
TLSH
T18FE47C02E69241ECD07B803645AB6217F371381403649EEB9790DAAD5F337E1AE7BB07
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

458252

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameA GetConsoleMode GetConsoleCP HeapSize DeleteCriticalSection GetFileType LeaveCriticalSection EnterCriticalSection GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter RtlCaptureContext GetModuleFileNameW WriteFile GetStdHandle WideCharToMultiByte GetModuleHandleExW ExitProcess GetProcessHeap SetLastError GetCPInfo GetOEMCP GetACP IsValidCodePage GetCommandLineA RaiseException RtlPcToFileHeader GetStringTypeW RtlUnwindEx RtlLookupFunctionEntry ExitThread CreateThread DecodePointer EncodePointer IsProcessorFeaturePresent IsDebuggerPresent HeapAlloc HeapFree GetLastError LCMapStringW OutputDebugStringW SetStdHandle FlushFileBuffers ReadFile ReadConsoleW CreateFileW HeapReAlloc SetFilePointerEx WriteConsoleW GetNumberFormatW GetLocaleInfoW Sleep GetTickCount MultiByteToWideChar WritePrivateProfileStringW LoadLibraryExA GetPrivateProfileStringW GetPrivateProfileIntW GetProcessAffinityMask ResumeThread GetCurrentProcess WaitForSingleObject CloseHandle GlobalHandle GlobalFree GlobalUnlock GlobalLock GlobalAlloc MulDiv LocalFree LocalAlloc GetCurrentThreadId VerifyVersionInfoW GetModuleHandleA VerSetConditionMask LoadLibraryExW GetProcAddress GetModuleHandleW RtlVirtualUnwind FreeLibrary

user32

GetMonitorInfoW MonitorFromPoint IsZoomed IsIconic LoadIconW SetWindowTextW SetParent GetClassLongW CheckMenuItem CreateDialogParamW SetWindowPos DestroyWindow IsWindow ScreenToClient GetKeyState GetDlgItemTextW SetDlgItemTextW MoveWindow ShowWindow ClientToScreen GetWindowContextHelpId SetWindowContextHelpId EnableMenuItem LoadMenuW IsClipboardFormatAvailable EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard LoadCursorW SetCursor MessageBeep SetActiveWindow UpdateWindow EnableWindow SetFocus SendDlgItemMessageW IsDlgButtonChecked CheckRadioButton GetDlgItemInt SetDlgItemInt EndDialog DialogBoxParamW PostMessageW DrawIconEx LoadImageW GetClassNameW EnumChildWindows GetParent GetWindowLongW InflateRect CopyRect FrameRect FillRect DrawFocusRect GetSysColor MessageBoxW GetWindowRect GetClientRect GetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC DrawTextExW DrawTextW SetMenuItemInfoW GetMenuItemInfoW TrackPopupMenu GetMenuItemCount GetSubMenu DestroyMenu GetMenuStringW GetSystemMetrics IsWindowEnabled GetFocus GetDlgCtrlID GetDlgItem IsWindowVisible DrawFrameControl DrawEdge SystemParametersInfoW RedrawWindow SendMessageW

gdi32

GetStockObject GetDeviceCaps CreateSolidBrush CreatePen CreateFontIndirectW CreateCompatibleDC CreateCompatibleBitmap BitBlt DeleteObject SetTextColor LineTo GetTextExtentPoint32W MoveToEx CreateBitmap CreateICW GetDIBits RealizePalette SelectPalette StretchDIBits SetStretchBltMode GetObjectW DeleteDC StretchBlt CreateDIBSection SetDIBColorTable SetDIBitsToDevice SelectObject Rectangle SetBkColor SetBkMode SetROP2 CreatePalette

comdlg32

ChooseColorW

comctl32

ord412 ord410 ord413

Name

.text

Size

520KB

Virtual Size

519KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

112KB

Virtual Size

111KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.debug_l

Size

512B

Virtual Size

123B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.debug_i

Size

512B

Virtual Size

189B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.debug_a

Size

512B

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.debug_a

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.debug_f

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

5a7de430cb340eef814222e65361e90cda48c23fe453cfe03684e1c71baeab63

kernel32

user32

gdi32

comdlg32

comctl32

generic