682dd75a5ec867f9d46644e5ce3ae69d7dd5cf2f7045a5a230b105cd63116828

Sharing

Copy URL Twitter E-mail

General

Target
682dd75a5ec867f9d46644e5ce3ae69d7dd5cf2f7045a5a230b105cd63116828
Size 117KB
Sample260930-jtkd2axvgz
SHA256 682dd75a5ec867f9d46644e5ce3ae69d7dd5cf2f7045a5a230b105cd63116828
MD5 83d2a481d81ca762c354fa822924d53a
SHA1 f847a40fc73d7db6ddf0c1ed16c50bc2cbb4c6f1
SHA512 6d5e61c8cf6d0dee54692474740c76b5b3a6dd87b4d22321b27f73efd8bb39782ab0568d62658ca93cd35b05f71e6039c21d76d8d06381bcf833460948c6dd6b
SSDEEP 3072:4msb6wUxfE5cKvznKB4JmO8mS1SKkU64jsoe3VK4x7:4rNU14vGBE8rFcnowKk7
TLSH
T1D7C38D01B5C08072E5B6293119B4DBB2993EFD740F605EEBA3C80ABD5E306D19935B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
682dd75a5ec867f9d46644e5ce3ae69d7dd5cf2f7045a5a230b105cd63116828

File Explorer

682dd75a5ec867f9d46644e5ce3ae69d7dd5cf2f7045a5a230b105cd63116828

.exe 117KB

682dd75a5ec867f9d46644e5ce3ae69d7dd5cf2f7045a5a230b105cd63116828

IMPHASH 0ed0b5c968bb01330b52da4d29e5f25c
SHA256 682dd75a5ec867f9d46644e5ce3ae69d7dd5cf2f7045a5a230b105cd63116828
MD5 83d2a481d81ca762c354fa822924d53a
SHA1 f847a40fc73d7db6ddf0c1ed16c50bc2cbb4c6f1
SHA512 6d5e61c8cf6d0dee54692474740c76b5b3a6dd87b4d22321b27f73efd8bb39782ab0568d62658ca93cd35b05f71e6039c21d76d8d06381bcf833460948c6dd6b
SSDEEP 3072:4msb6wUxfE5cKvznKB4JmO8mS1SKkU64jsoe3VK4x7:4rNU14vGBE8rFcnowKk7
TLSH
T1D7C38D01B5C08072E5B6293119B4DBB2993EFD740F605EEBA3C80ABD5E306D19935B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10800

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RemoveDirectoryW DeleteFileW QueryFullProcessImageNameW DecodePointer GetCurrentProcessId Process32FirstW Process32NextW GetLastError CreateToolhelp32Snapshot OpenProcess TerminateProcess CloseHandle CreateFileW GetTempPathW WriteFile GetLocalTime GetFileAttributesW GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx GetProcessHeap LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW WriteConsoleW

user32

MessageBoxW

advapi32

RegCreateKeyExW RegDeleteTreeW RegSetValueExW RegDeleteValueW CloseServiceHandle OpenSCManagerW DeleteService ControlService OpenServiceW RegCloseKey RegOpenKeyExW RegQueryValueExW

shell32

SHGetKnownFolderPath

ole32

CoCreateInstance CoTaskMemFree CoInitializeEx CoUninitialize

oleaut32

SysAllocString SysFreeString VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

682dd75a5ec867f9d46644e5ce3ae69d7dd5cf2f7045a5a230b105cd63116828

kernel32

user32

advapi32

shell32

ole32

oleaut32

generic