d09d4a707d12bbc39f7d9c734481741c5405294d1433efa0329770eb5f651990

Sharing

Copy URL Twitter E-mail

General

Target
d09d4a707d12bbc39f7d9c734481741c5405294d1433efa0329770eb5f651990
Size 208KB
Sample260930-a442rayz5k
SHA256 d09d4a707d12bbc39f7d9c734481741c5405294d1433efa0329770eb5f651990
MD5 65cd1d0a516e2b2cb1e09372c548a33c
SHA1 de121430e2226d77703d0acca13f0d7e5d7972c2
SHA512 3dc55c7178781475a6e2b9e467f4781644dbda7880cf9eabf20c0f364c372fee1fc763731a5a0f664b7c12a3c42f22ef2a2335d23d149a39eda30721ef7a2c15
SSDEEP 1536:iFIrXcwlHTkC//jzlxGljgUO8StRTu5Wujir5p16Vt9Xm4FP+aRCKR4r4irFKjl:VJlHgZ+vu5Zir5p1qRHFbQr9r72U
TLSH
T193244B60B5C2A72BDE6F43B1B4EBB7257279B4306B734AC352051C7A4DE63E15038B62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d09d4a707d12bbc39f7d9c734481741c5405294d1433efa0329770eb5f651990

File Explorer

d09d4a707d12bbc39f7d9c734481741c5405294d1433efa0329770eb5f651990

.exe 208KB

d09d4a707d12bbc39f7d9c734481741c5405294d1433efa0329770eb5f651990

IMPHASH 3d5403b81a82e04d9fb93560e7f76c31
SHA256 d09d4a707d12bbc39f7d9c734481741c5405294d1433efa0329770eb5f651990
MD5 65cd1d0a516e2b2cb1e09372c548a33c
SHA1 de121430e2226d77703d0acca13f0d7e5d7972c2
SHA512 3dc55c7178781475a6e2b9e467f4781644dbda7880cf9eabf20c0f364c372fee1fc763731a5a0f664b7c12a3c42f22ef2a2335d23d149a39eda30721ef7a2c15
SSDEEP 1536:iFIrXcwlHTkC//jzlxGljgUO8StRTu5Wujir5p16Vt9Xm4FP+aRCKR4r4irFKjl:VJlHgZ+vu5Zir5p1qRHFbQr9r72U
TLSH
T193244B60B5C2A72BDE6F43B1B4EBB7257279B4306B734AC352051C7A4DE63E15038B62
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

56000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

rpcrt4

UuidCreate

user32

AdjustWindowRect AppendMenuW BeginPaint ChangeDisplaySettingsExW ClientToScreen ClipCursor CopyIcon CreateDesktopW CreateIcon CreatePopupMenu CreateWindowExW DefWindowProcW DestroyIcon DestroyMenu DestroyWindow DispatchMessageW DrawCaptionTempW DrawFrameControl DrawIconEx DrawTextW EndPaint EnumDisplayDevicesW EnumDisplaySettingsExW ExitWindowsEx GetAncestor GetClientRect GetDC GetDesktopWindow GetForegroundWindow GetMenuInfo GetMenuItemCount GetMenuItemInfoW GetMessageW GetProcessWindowStation GetSystemMetrics GetThreadDesktop GetUserObjectInformationW GetWindow GetWindowLongW GetWindowRect GetWindowThreadProcessId InsertMenuItemW IntersectRect InvalidateRect IsIconic IsWindowEnabled IsWindowVisible KillTimer LoadCursorA LoadCursorW LoadIconW LoadStringW MessageBoxW MsgWaitForMultipleObjects PaintDesktop PeekMessageW PostMessageW PostQuitMessage RegisterClassExW RegisterClassW ReleaseDC SendMessageW SendNotifyMessageW SetCursor SetForegroundWindow SetMenuInfo SetMenuItemInfoW SetParent SetShellWindow SetThreadDesktop SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SubtractRect SystemParametersInfoW TrackPopupMenuEx TranslateMessage UnregisterClassW UpdateLayeredWindow UpdateWindow

gdi32

CreateCompatibleDC CreateDIBSection CreateFontIndirectW DeleteDC DeleteObject GetDeviceCaps GetTextExtentPointA GetTextExtentPointW GetTextMetricsW SelectObject SetBkMode SetTextColor

advapi32

RegCloseKey RegCreateKeyExW RegGetValueW RegOpenKeyW RegQueryValueExW RegSetValueExA RegSetValueExW

win32u

NtUserMessageCall

ucrtbase

__acrt_iob_func __p___argc __p___wargv __stdio_common_vsprintf __stdio_common_vswprintf _assert _configure_wide_argv _crt_atexit _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _strdup _wcsicmp _wcsnicmp calloc exit free fwrite getenv iswspace malloc memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen wcschr wcscmp wcscpy wcslen wcstoul

kernel32

CloseHandle CompareStringW CreateEventW CreateFileW CreateMutexW CreateProcessW CreateThread DuplicateHandle EnterCriticalSection ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetFullPathNameW GetModuleHandleW GetOverlappedResult GetProcAddress GetStartupInfoW GetTickCount HeapAlloc HeapReAlloc InitializeCriticalSectionEx IsBadStringPtrA IsBadStringPtrW LeaveCriticalSection LoadLibraryW MapViewOfFile MulDiv MultiByteToWideChar OpenProcess ReadDirectoryChangesW ResolveDelayLoadedAPI SetThreadDescription UnmapViewOfFile WaitForMultipleObjects WaitForSingleObject lstrcmpiW

ntdll

NtSetInformationProcess _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

d09d4a707d12bbc39f7d9c734481741c5405294d1433efa0329770eb5f651990

rpcrt4

user32

gdi32

advapi32

win32u

ucrtbase

kernel32

ntdll

generic