e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898

Sharing

Copy URL Twitter E-mail

General

Target
e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898
Size 400KB
Sample260930-ptz3dafe65
SHA256 e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898
MD5 596763b69d0d1df4a509bd5ef34c6c60
SHA1 ee73527c24b35909884aabc6051c30b9abbd49ce
SHA512 ac562ac0d5a50286fdfe147508be181da3adbf02919134ba8d789013eeb708df1009730d76e05227d59e06e7f533064035bf8f5d8b5c0b4a38b9dbb541418cab
SSDEEP 3072:B5wh0NYQfe5KPXj01yQbtClSvqOB9A0uPY+jC2gai8O4VEA6hHFssICmps7Inr:B5wSNYQgOXqyBlGsNn
TLSH
T120944055AFED8556F0F3AF396DB547516A36BC61BE30D68E0B00256E8C30B90DA70B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898

File Explorer

e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898

.exe 400KB

e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898

IMPHASH 9618827e7636ee4ad15298d7e1f584be
SHA256 e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898
MD5 596763b69d0d1df4a509bd5ef34c6c60
SHA1 ee73527c24b35909884aabc6051c30b9abbd49ce
SHA512 ac562ac0d5a50286fdfe147508be181da3adbf02919134ba8d789013eeb708df1009730d76e05227d59e06e7f533064035bf8f5d8b5c0b4a38b9dbb541418cab
SSDEEP 3072:B5wh0NYQfe5KPXj01yQbtClSvqOB9A0uPY+jC2gai8O4VEA6hHFssICmps7Inr:B5wSNYQgOXqyBlGsNn
TLSH
T120944055AFED8556F0F3AF396DB547516A36BC61BE30D68E0B00256E8C30B90DA70B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comdlg32

GetOpenFileNameW GetSaveFileNameW

comctl32

CreateStatusWindowW CreateToolbarEx InitCommonControls

shell32

ShellAboutW

oleaut32

LoadTypeLib SysFreeString SysStringLen VariantChangeType VariantInit

ole32

CLSIDFromString CoCreateInstance CoCreateInstanceEx OleInitialize OleUninitialize StringFromGUID2

user32

CheckDlgButton CheckMenuItem CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW EmptyClipboard EnableMenuItem EndDialog GetCapture GetClientRect GetCursorPos GetDC GetDlgItem GetMenu GetMessageW GetWindowTextLengthW GetWindowTextW InvertRect IsDlgButtonChecked IsWindowVisible LoadAcceleratorsW LoadCursorW LoadStringW MessageBoxW MoveWindow OpenClipboard PostQuitMessage RegisterClassW ReleaseCapture ReleaseDC ScreenToClient SendMessageW SetCapture SetClipboardData SetCursor SetFocus SetWindowTextW ShowWindow TranslateAcceleratorW TranslateMessage UpdateWindow wsprintfW

advapi32

RegCloseKey RegCreateKeyW RegEnumKeyW RegEnumValueW RegGetValueW RegOpenKeyW RegQueryValueW RegSetValueExW

ucrtbase

__acrt_iob_func __p___argc __p___argv __stdio_common_vsprintf _configure_narrow_argv _crt_atexit _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type _strdup calloc exit free fwrite getenv malloc memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen wcscmp wcslen wcsncmp

kernel32

CloseHandle CreateFileW CreateProcessW FormatMessageW GetCommandLineA GetCurrentDirectoryW GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoA GetTickCount GetWindowsDirectoryW GlobalAlloc GlobalLock GlobalUnlock HeapAlloc HeapReAlloc LocalFree MultiByteToWideChar WideCharToMultiByte WriteFile lstrcmpW

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898

comdlg32

comctl32

shell32

oleaut32

ole32

user32

advapi32

ucrtbase

kernel32

ntdll

generic