3f4dbb1eb36e832a5d29fa2b50b32f9229bf2b8d20ed752ef8f331c55e62b0b9

Sharing

Copy URL Twitter E-mail

General

Target
3f4dbb1eb36e832a5d29fa2b50b32f9229bf2b8d20ed752ef8f331c55e62b0b9
Size 1.2MB
Sample261001-ml4pgswhkh
SHA256 3f4dbb1eb36e832a5d29fa2b50b32f9229bf2b8d20ed752ef8f331c55e62b0b9
MD5 ce8b4af300d7053e64094f691d8d66ed
SHA1 a954ffb3c1e3a8bd87cfaf85fd4e331dce30a597
SHA512 68c7885fcfecb2551a611c561b90fa9d7537517541fc6eeb3fd1118be7fbc3ad285bb97904c7425679f3d865c204ab6579d63d4707902c510a011c14e59b17f4
SSDEEP 24576:Thf+ihRrHlkDo6miXmXSHp2s8WNCg+7ueqYRsEah8XC0:Thf+aR7l2o6miX+WgqYtw8
TLSH
T1F2454A00E6518039F9F705F699FF11ACA92CBDE00B2590D7A3C46DEE9A25EE0BC31617
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f4dbb1eb36e832a5d29fa2b50b32f9229bf2b8d20ed752ef8f331c55e62b0b9

File Explorer

3f4dbb1eb36e832a5d29fa2b50b32f9229bf2b8d20ed752ef8f331c55e62b0b9

.exe 1.2MB

3f4dbb1eb36e832a5d29fa2b50b32f9229bf2b8d20ed752ef8f331c55e62b0b9

IMPHASH a3106679cc28337fc7ebb57df9085fb1
SHA256 3f4dbb1eb36e832a5d29fa2b50b32f9229bf2b8d20ed752ef8f331c55e62b0b9
MD5 ce8b4af300d7053e64094f691d8d66ed
SHA1 a954ffb3c1e3a8bd87cfaf85fd4e331dce30a597
SHA512 68c7885fcfecb2551a611c561b90fa9d7537517541fc6eeb3fd1118be7fbc3ad285bb97904c7425679f3d865c204ab6579d63d4707902c510a011c14e59b17f4
SSDEEP 24576:Thf+ihRrHlkDo6miXmXSHp2s8WNCg+7ueqYRsEah8XC0:Thf+aR7l2o6miX+WgqYtw8
TLSH
T1F2454A00E6518039F9F705F699FF11ACA92CBDE00B2590D7A3C46DEE9A25EE0BC31617
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

267760

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\csgo_pc2012_win32\BO2012Launcher\build\BO2012Launcher.pdb

shell32

ShellAboutW SHGetFolderPathW SHFileOperationW ShellExecuteExW Shell_NotifyIconW DragQueryFileW

comctl32

InitCommonControlsEx ImageList_Create ImageList_Destroy

uxtheme

IsThemeActive GetThemeSysColor

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

shlwapi

PathMatchSpecW PathRemoveBlanksW PathFileExistsW StrFormatByteSizeW PathQuoteSpacesW

kernel32

GetModuleFileNameW GetStartupInfoW OutputDebugStringW GetTempPathW GetCurrentDirectoryW GetDiskFreeSpaceExW AreFileApisANSI GetVolumeInformationW GetComputerNameW FindClose CreateDirectoryW FindFirstFileW FindNextFileW CopyFileW MultiByteToWideChar WideCharToMultiByte GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW GetFileAttributesW GetFileSizeEx WriteFile ReadFile CloseHandle CreateFileW GetLocalTime FindFirstFileExW FindFirstFileExA SetConsoleCtrlHandler CreateThread WriteConsoleW OutputDebugStringA HeapQueryInformation HeapSize HeapReAlloc GetFileType GetCurrentThread GetACP ExitProcess GetStdHandle GetModuleHandleExW GetLogicalDriveStringsW GetSystemInfo HeapValidate InterlockedFlushSList InterlockedPushEntrySList LoadLibraryExW RtlUnwind GetCPInfo GetLocaleInfoW LCMapStringW CompareStringW GetTickCount TlsFree TlsSetValue TlsGetValue TlsAlloc Sleep InitializeCriticalSectionAndSpinCount SetLastError DecodePointer EncodePointer FormatMessageW GetStringTypeW TerminateProcess GetCurrentProcess FreeLibrary VirtualQuery GetProcessHeap HeapFree HeapAlloc GetLastError RaiseException IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetProcAddress GetSystemTime GetFileSize FindNextFileA IsValidCodePage FlushFileBuffers GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW GetDateFormatW GetModuleHandleW CreateEventW WaitForSingleObjectEx ResetEvent GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetStdHandle GetTimeZoneInformation GetConsoleCP GetConsoleMode SetFilePointerEx GetModuleFileNameA SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection

user32

SetWindowLongW GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC SetForegroundWindow UpdateWindow DrawTextW TrackPopupMenu AppendMenuW DestroyMenu GetClassNameW EnableWindow SetMenuItemInfoW ShowWindow DestroyWindow CreateWindowExW RegisterClassExW CallWindowProcW GetDlgCtrlID DefWindowProcW PostMessageW SendMessageW TrackMouseEvent wsprintfW MessageBoxW DispatchMessageW TranslateMessage GetMessageW MonitorFromWindow SystemParametersInfoW LoadCursorW GetSysColor MessageBeep GetSystemMetrics GetKeyState GetDoubleClickTime GetKeyboardLayout LoadIconW DestroyIcon CreatePopupMenu PostQuitMessage

gdi32

SetTextColor SetBkMode SetBkColor SelectObject EnumFontFamiliesExW DeleteObject CreateSolidBrush GetTextMetricsW GetSystemPaletteEntries GetStockObject GetDeviceCaps CreateFontW

winspool.drv

ClosePrinter ord203 OpenPrinterW

comdlg32

GetFileTitleW GetSaveFileNameW GetOpenFileNameW ChooseColorW

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey GetUserNameW

ole32

PropVariantClear CoCreateGuid StringFromGUID2

oleaut32

SysFreeString VariantInit SysAllocStringLen

Sharing

General

Malware Config

Signatures

File Explorer

3f4dbb1eb36e832a5d29fa2b50b32f9229bf2b8d20ed752ef8f331c55e62b0b9

shell32

comctl32

uxtheme

version

shlwapi

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

ole32

oleaut32

generic