4af52e5cafdcb926873c9dbe3bcfac586e07b1ec4ffc853ef063758b1514c26a

Sharing

Copy URL Twitter E-mail

General

Target
4af52e5cafdcb926873c9dbe3bcfac586e07b1ec4ffc853ef063758b1514c26a
Size 430KB
Sample260924-szr6hawbpc
SHA256 4af52e5cafdcb926873c9dbe3bcfac586e07b1ec4ffc853ef063758b1514c26a
MD5 51dad021d668c467dd0f356589117e12
SHA1 6b9f4f27fa6e27f406ab9160f2fbc21d9f3d4efe
SHA512 18aa3d185172555b4ecb57dcdc040a389451ce17a34fd64c79cb161081aa0d2d88263e7902a679e1a6a525ffe905006516960a8ccd2cb6d4ec82ff73fe11d687
SSDEEP 6144:C0SoUv51Tnuoj42UaZCTJKetKV5/wW3VVt1yyMcv5OgdrIWEUn9hHylHUkskMY:9SoUvXnuorgTtKrZ3Vn1a0doKRylpsG
TLSH
T19B94CF2076E1C932E572013519E8ABB6907DBD384F6184DB7B940B3EAE305D35D31BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4af52e5cafdcb926873c9dbe3bcfac586e07b1ec4ffc853ef063758b1514c26a

File Explorer

4af52e5cafdcb926873c9dbe3bcfac586e07b1ec4ffc853ef063758b1514c26a

.exe 430KB

4af52e5cafdcb926873c9dbe3bcfac586e07b1ec4ffc853ef063758b1514c26a

IMPHASH 851549fec3ff403e068286768fba9db7
SHA256 4af52e5cafdcb926873c9dbe3bcfac586e07b1ec4ffc853ef063758b1514c26a
MD5 51dad021d668c467dd0f356589117e12
SHA1 6b9f4f27fa6e27f406ab9160f2fbc21d9f3d4efe
SHA512 18aa3d185172555b4ecb57dcdc040a389451ce17a34fd64c79cb161081aa0d2d88263e7902a679e1a6a525ffe905006516960a8ccd2cb6d4ec82ff73fe11d687
SSDEEP 6144:C0SoUv51Tnuoj42UaZCTJKetKV5/wW3VVt1yyMcv5OgdrIWEUn9hHylHUkskMY:9SoUvXnuorgTtKrZ3Vn1a0doKRylpsG
TLSH
T19B94CF2076E1C932E572013519E8ABB6907DBD384F6184DB7B940B3EAE305D35D31BAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

GetSecurityDescriptorDacl RegCloseKey RegCreateKeyExW RegDeleteValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW ChangeServiceConfigW ChangeServiceConfig2W CloseServiceHandle ControlService OpenSCManagerW OpenServiceW QueryServiceConfigW QueryServiceConfig2W QueryServiceStatusEx StartServiceW ConvertStringSecurityDescriptorToSecurityDescriptorW SetNamedSecurityInfoW

crypt32

CryptStringToBinaryA CryptBinaryToStringA

ole32

CoInitializeEx CoUninitialize CoCreateInstance

shell32

SHGetFolderPathW

user32

DispatchMessageW SendMessageW DefWindowProcW PostQuitMessage TranslateMessage GetMessageW CreateWindowExW ShowWindow EnableWindow DrawTextW UpdateWindow GetDC RegisterClassExW ReleaseDC BeginPaint EndPaint InvalidateRect SetWindowTextW GetWindowTextW GetClientRect AdjustWindowRectEx MessageBoxW DrawFocusRect FillRect InflateRect GetWindowLongW SetWindowLongW LoadCursorW LoadImageW IsDialogMessageW LoadIconW

gdi32

GetTextMetricsW SetTextColor SetBkMode SetBkColor SelectObject RoundRect GetTextExtentPoint32W TextOutW DeleteObject DeleteDC CreateSolidBrush CreatePen CreateFontW CreateCompatibleDC CreateCompatibleBitmap BitBlt GetDeviceCaps

gdiplus

GdipSetPixelOffsetMode GdiplusStartup GdiplusShutdown GdipCreatePath GdipDeletePath GdipClosePathFigure GdipAddPathLine GdipAddPathArc GdipAddPathBezier GdipAddPathClosedCurve2 GdipDeleteBrush GdipCreateSolidFill GdipCreatePen1 GdipDeletePen GdipSetPenStartCap GdipSetPenEndCap GdipSetPenLineJoin GdipCreateFromHDC GdipDeleteGraphics GdipSetCompositingQuality GdipSetSmoothingMode GdipDrawLine GdipDrawLines GdipDrawEllipse GdipDrawPath GdipFillRectangleI GdipFillPolygon GdipFillEllipse GdipFillPath

comctl32

InitCommonControlsEx

kernel32

FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapFree HeapAlloc SetStdHandle GetModuleHandleExW ExitProcess GetModuleFileNameW GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc GetConsoleOutputCP GetConsoleMode SetFilePointerEx GetStdHandle LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer SetLastError RtlUnwind RaiseException GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter DecodePointer IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar MoveFileW WriteConsoleW CreateDirectoryW CreateFileW DeleteFileW FlushFileBuffers GetFileAttributesW GetFileSizeEx ReadFile WriteFile CloseHandle GetLastError CreateMutexW Sleep GetCurrentProcessId GetTickCount GetModuleHandleW GetProcAddress LocalFree MulDiv FormatMessageW

Sharing

General

Malware Config

Signatures

File Explorer

4af52e5cafdcb926873c9dbe3bcfac586e07b1ec4ffc853ef063758b1514c26a

advapi32

crypt32

ole32

shell32

user32

gdi32

gdiplus

comctl32

kernel32

generic