daad453f3eb0ee1bf53530af3d2fdda2e8ed407cf68fdd534b1ecee5a98e2634

Sharing

Copy URL Twitter E-mail

General

Target
daad453f3eb0ee1bf53530af3d2fdda2e8ed407cf68fdd534b1ecee5a98e2634
Size 192KB
Sample260930-prr9rafd94
SHA256 daad453f3eb0ee1bf53530af3d2fdda2e8ed407cf68fdd534b1ecee5a98e2634
MD5 c5decafde8c7b2506000e7ac393f7cf8
SHA1 52b756c8588287b5f2b8f12ebdbe7b545f142f61
SHA512 d7a9057f93da0f0dac8a69b26d891e6a87e481aa8b2e9906336688ad53bc93834c107a7df86c237ae4345728e8dbf400476251efab65c0891d7687a58caa766a
SSDEEP 3072:7xyfN6CYCganczk3/IcqhKG4W+4/+9TL2PoICeSsBF+KQYv9bpnie4WyZ1ERgldk:7xyfonzkvznF46ac
TLSH
T1D914E57257E4C006F1B68B309AF087827736BD510F25C9DFAB91674E28756E0CB36B62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daad453f3eb0ee1bf53530af3d2fdda2e8ed407cf68fdd534b1ecee5a98e2634

File Explorer

daad453f3eb0ee1bf53530af3d2fdda2e8ed407cf68fdd534b1ecee5a98e2634

.exe 192KB

daad453f3eb0ee1bf53530af3d2fdda2e8ed407cf68fdd534b1ecee5a98e2634

IMPHASH 13014236042ba477e9696d60bf6200be
SHA256 daad453f3eb0ee1bf53530af3d2fdda2e8ed407cf68fdd534b1ecee5a98e2634
MD5 c5decafde8c7b2506000e7ac393f7cf8
SHA1 52b756c8588287b5f2b8f12ebdbe7b545f142f61
SHA512 d7a9057f93da0f0dac8a69b26d891e6a87e481aa8b2e9906336688ad53bc93834c107a7df86c237ae4345728e8dbf400476251efab65c0891d7687a58caa766a
SSDEEP 3072:7xyfN6CYCganczk3/IcqhKG4W+4/+9TL2PoICeSsBF+KQYv9bpnie4WyZ1ERgldk:7xyfonzkvznF46ac
TLSH
T1D914E57257E4C006F1B68B309AF087827736BD510F25C9DFAB91674E28756E0CB36B62
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20768

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

AdjustWindowRect BeginPaint CheckMenuItem CreateWindowExW DefWindowProcW DialogBoxParamW DispatchMessageW EndDialog EndPaint GetDC GetDlgItemInt GetDlgItemTextW GetMenu GetMessageW GetMonitorInfoW GetSystemMetrics IntersectRect LoadAcceleratorsW LoadBitmapW LoadCursorW LoadIconW LoadImageW LoadStringW MessageBoxW MonitorFromRect MoveWindow PostQuitMessage RedrawWindow RegisterClassExW ReleaseCapture ReleaseDC SendMessageW SetCapture SetDlgItemInt SetDlgItemTextW SetTimer ShowWindow TranslateAcceleratorW TranslateMessage UpdateWindow wsprintfW

gdi32

BitBlt CreateCompatibleDC DeleteDC DeleteObject GetStockObject SelectObject

advapi32

RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

InitCommonControls

ucrtbase

__acrt_iob_func __p___argc __p___wargv __stdio_common_vsprintf _configure_wide_argv _crt_atexit _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _strdup _time64 exit free fwrite getenv memmove rand srand strchr strcmp strcpy strcspn strlen wcslen

kernel32

DelayLoadFailureHook ExitProcess GetCommandLineW GetModuleHandleW GetProcAddress GetStartupInfoW GetTickCount HeapAlloc HeapReAlloc ResolveDelayLoadedAPI

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

daad453f3eb0ee1bf53530af3d2fdda2e8ed407cf68fdd534b1ecee5a98e2634

user32

gdi32

advapi32

comctl32

ucrtbase

kernel32

ntdll

generic