235da46fa5becf44ed5f62f46ad1cabad4ba422ef35a9587a925c2a9a20016c9

Sharing

Copy URL Twitter E-mail

General

Target
235da46fa5becf44ed5f62f46ad1cabad4ba422ef35a9587a925c2a9a20016c9
Size 484KB
Sample260930-d4ryzay1fv
SHA256 235da46fa5becf44ed5f62f46ad1cabad4ba422ef35a9587a925c2a9a20016c9
MD5 defa6b4a197cd23856822971998ac67f
SHA1 dea2c9d8ad9958b71bcec7a664594698a9d6c8ed
SHA512 f2e616f12242b5139f0fc96c2d2a6e4556edc49a31432627210c43628a04d37b882d37985a3ff3a75c4b9537c7202db42f63760d5974733174c78fe58d43479f
SSDEEP 12288:iu4lNAtYytvS5Aku1YLQxdkUoDj9JU01tuMsTp:iwhtvSLuBeUoPo0uM
TLSH
T127B4CF20B690C033E51312754879A77A992FAA705B3095C797EC0E7EBF663C39B3034A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
235da46fa5becf44ed5f62f46ad1cabad4ba422ef35a9587a925c2a9a20016c9

File Explorer

235da46fa5becf44ed5f62f46ad1cabad4ba422ef35a9587a925c2a9a20016c9

.exe 484KB

235da46fa5becf44ed5f62f46ad1cabad4ba422ef35a9587a925c2a9a20016c9

IMPHASH 1c987a054a75dee2dd9dc04e22456d2f
SHA256 235da46fa5becf44ed5f62f46ad1cabad4ba422ef35a9587a925c2a9a20016c9
MD5 defa6b4a197cd23856822971998ac67f
SHA1 dea2c9d8ad9958b71bcec7a664594698a9d6c8ed
SHA512 f2e616f12242b5139f0fc96c2d2a6e4556edc49a31432627210c43628a04d37b882d37985a3ff3a75c4b9537c7202db42f63760d5974733174c78fe58d43479f
SSDEEP 12288:iu4lNAtYytvS5Aku1YLQxdkUoDj9JU01tuMsTp:iwhtvSLuBeUoPo0uM
TLSH
T127B4CF20B690C033E51312754879A77A992FAA705B3095C797EC0E7EBF663C39B3034A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

100626

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\PCProjects\Pakages\Pakage1.0\AICONExe\Release\AICONExe.pdb

user32

GetSystemMetrics PostMessageW

advapi32

RegOpenKeyW RegCloseKey RegEnumValueA RegOpenKeyExA

shell32

ShellExecuteA

ws2_32

getsockopt socket gethostbyname closesocket __WSAFDIsSet recv htons select WSAStartup connect inet_ntoa send

netapi32

Netbios

kernel32

CompareStringW SetEnvironmentVariableA GetModuleHandleW WriteConsoleW HeapReAlloc GetStringTypeW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetLocaleInfoW FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle GetTimeZoneInformation IsValidCodePage GetOEMCP GetACP HeapSize IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter GetCurrentProcessId InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SetFilePointer WriteFile ReadFile CreateFileW GetLastError CloseHandle Sleep CreateThread GetCommandLineA CreateMutexW WaitForSingleObject ReleaseMutex FindResourceA FreeLibrary LoadResource UpdateResourceA EndUpdateResourceW EnumResourceTypesA SizeofResource EnumResourceLanguagesA SetLastError BeginUpdateResourceW LoadLibraryA LockResource BeginUpdateResourceA UpdateResourceW EnumResourceNamesA EndUpdateResourceA WideCharToMultiByte MultiByteToWideChar GetCurrentProcess LoadLibraryW GetVersionExW GetFileAttributesA TerminateProcess GetProcAddress GetSystemInfo InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer InterlockedExchange GetCommandLineW HeapSetInformation GetSystemTimeAsFileTime HeapFree HeapAlloc RaiseException RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId HeapCreate QueryPerformanceCounter GetTickCount

Sharing

General

Malware Config

Signatures

File Explorer

235da46fa5becf44ed5f62f46ad1cabad4ba422ef35a9587a925c2a9a20016c9

user32

advapi32

shell32

ws2_32

netapi32

kernel32

generic