83050562c3e3451f5f14da4cd60788cfd107d7e18a208fe0345fc568e57d7140

Sharing

Copy URL Twitter E-mail

General

Target
83050562c3e3451f5f14da4cd60788cfd107d7e18a208fe0345fc568e57d7140
Size 232KB
Sample260929-v5nrdazdkf
SHA256 83050562c3e3451f5f14da4cd60788cfd107d7e18a208fe0345fc568e57d7140
MD5 08a1c2f6f3937f369aa30605324415d5
SHA1 718f77bbd8259a2fb0c685c84ac0124335bf614f
SHA512 cf4b283a3110e7d6436892edb1c4b56e90ba89e05320ca384ec1e4e7cf42242df083d8369b736ab860e3cb4c31bab83932a39a301034fca4f1a6aebd5cd4c755
SSDEEP 6144:ztlIoX2xXM7OFF4e5xzSXmMQ/HYi+0544ELIy9:zjlX2dV4e5xzSXVS54Ey9
TLSH
T1B3343A1166918072E3660B3459E4EAB5992EBD314FA0A5CFF3A43F7A89301C35A3771F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83050562c3e3451f5f14da4cd60788cfd107d7e18a208fe0345fc568e57d7140

File Explorer

83050562c3e3451f5f14da4cd60788cfd107d7e18a208fe0345fc568e57d7140

.exe 232KB

83050562c3e3451f5f14da4cd60788cfd107d7e18a208fe0345fc568e57d7140

IMPHASH bd894f5af46663afa80a61ddfa903d23
SHA256 83050562c3e3451f5f14da4cd60788cfd107d7e18a208fe0345fc568e57d7140
MD5 08a1c2f6f3937f369aa30605324415d5
SHA1 718f77bbd8259a2fb0c685c84ac0124335bf614f
SHA512 cf4b283a3110e7d6436892edb1c4b56e90ba89e05320ca384ec1e4e7cf42242df083d8369b736ab860e3cb4c31bab83932a39a301034fca4f1a6aebd5cd4c755
SSDEEP 6144:ztlIoX2xXM7OFF4e5xzSXmMQ/HYi+0544ELIy9:zjlX2dV4e5xzSXVS54Ey9
TLSH
T1B3343A1166918072E3660B3459E4EAB5992EBD314FA0A5CFF3A43F7A89301C35A3771F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

66256

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\weasel\weasel\output\WeaselSetup.pdb

kernel32

GetThreadUILanguage Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection SetEnvironmentVariableW WaitForSingleObject CloseHandle LoadLibraryW FreeLibrary GetFileAttributesW SizeofResource LockResource LoadResource FindResourceW FindResourceExW InitializeCriticalSectionEx DecodePointer DeleteCriticalSection RaiseException MultiByteToWideChar GetUserDefaultUILanguage lstrcmpiW LeaveCriticalSection EnterCriticalSection LoadLibraryExW GetCurrentThreadId SetThreadUILanguage SetThreadLocale Sleep GetExitCodeProcess SetLastError GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetStdHandle FreeEnvironmentStringsW GetSystemDirectoryW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage SetFilePointerEx GetStringTypeW LCMapStringW GetFileType WriteFile GetStdHandle GetCPInfo GetModuleFileNameW GetCurrentProcess GetModuleHandleW GetProcAddress DeleteFileW MoveFileExW CopyFileW HeapDestroy GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize ExitProcess GetLastError GetSystemWow64DirectoryW GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind GetCurrentProcessId GetStartupInfoW TerminateProcess SetUnhandledExceptionFilter GetEnvironmentStringsW ExpandEnvironmentStringsW IsDebuggerPresent OutputDebugStringW EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree LoadLibraryExA LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx WideCharToMultiByte QueryPerformanceCounter ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime UnhandledExceptionFilter WriteConsoleW

user32

CheckRadioButton GetDlgItem MessageBoxExW EnableWindow SetWindowTextW EndDialog SetWindowPos DialogBoxParamW MessageBoxW LoadStringW GetActiveWindow DestroyWindow CharNextW MapWindowPoints SetWindowLongW SendMessageW UnregisterClassW SetFocus GetWindowTextLengthW GetWindowTextW IsDlgButtonChecked GetWindow GetWindowLongW MonitorFromWindow GetMonitorInfoW GetWindowRect GetParent GetClientRect

advapi32

RegGetValueW RegQueryValueExW FreeSid CheckTokenMembership AllocateAndInitializeSid RegDeleteValueW RegEnumKeyExW RegQueryInfoKeyW RegOpenKeyW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegDeleteKeyExW RegDeleteKeyW RegCloseKey

shell32

ShellExecuteExW SHCreateShellItem ShellExecuteW SHParseDisplayName

ole32

CoUninitialize StringFromGUID2 CoCreateInstance CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoInitialize

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

Sharing

General

Malware Config

Signatures

File Explorer

83050562c3e3451f5f14da4cd60788cfd107d7e18a208fe0345fc568e57d7140

kernel32

user32

advapi32

shell32

ole32

oleaut32

comctl32

generic