b7c9c14c904d4e6f687c3195ef190f60bf88b1bf2e4b1b9939a2da7755563f99

Sharing

Copy URL Twitter E-mail

General

Target
b7c9c14c904d4e6f687c3195ef190f60bf88b1bf2e4b1b9939a2da7755563f99
Size 252KB
Sample261003-ry3eea1anc
SHA256 b7c9c14c904d4e6f687c3195ef190f60bf88b1bf2e4b1b9939a2da7755563f99
MD5 9bf4867dd506aff4ea735a3c8847003a
SHA1 171fc49035cca568d69e2562f2618330d4b56cc2
SHA512 2ca5d420bea7bdd4b4c3e02309333200f71ed0cd6ad0c1539b2dca4d2e5149f7826ab04611d33394138861019606858e7ddf1ec0457148e405e4a54e6ef7e5f0
SSDEEP 3072:8NEZpxx4NT1nb3fQ/ezdQfIKOXf1BwMrk32qyiMTZCQMvZxnqmJUL3OFL0wLwo0z:FKNx37nV0My5fMdlEHqmJyO0NKavUyL
TLSH
T15C449E8CDADE5CA2E2B72F3458F612290E36FC21D976DE0F571430294672761F4B1B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7c9c14c904d4e6f687c3195ef190f60bf88b1bf2e4b1b9939a2da7755563f99

File Explorer

b7c9c14c904d4e6f687c3195ef190f60bf88b1bf2e4b1b9939a2da7755563f99

.exe 252KB

b7c9c14c904d4e6f687c3195ef190f60bf88b1bf2e4b1b9939a2da7755563f99

IMPHASH e86960ab1defe7f29663e2d70be3db32
SHA256 b7c9c14c904d4e6f687c3195ef190f60bf88b1bf2e4b1b9939a2da7755563f99
MD5 9bf4867dd506aff4ea735a3c8847003a
SHA1 171fc49035cca568d69e2562f2618330d4b56cc2
SHA512 2ca5d420bea7bdd4b4c3e02309333200f71ed0cd6ad0c1539b2dca4d2e5149f7826ab04611d33394138861019606858e7ddf1ec0457148e405e4a54e6ef7e5f0
SSDEEP 3072:8NEZpxx4NT1nb3fQ/ezdQfIKOXf1BwMrk32qyiMTZCQMvZxnqmJUL3OFL0wLwo0z:FKNx37nV0My5fMdlEHqmJyO0NKavUyL
TLSH
T15C449E8CDADE5CA2E2B72F3458F612290E36FC21D976DE0F571430294672761F4B1B2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18089

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle CreateMutexW DeleteCriticalSection EnterCriticalSection ExpandEnvironmentStringsW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetFileAttributesW GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleA GetPrivateProfileIntW GetPrivateProfileSectionNamesW GetPrivateProfileStringW GetProcAddress GetProcessHeap GetStartupInfoW GetSystemInfo GetSystemTimeAsFileTime GetTickCount GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection LeaveCriticalSection LoadLibraryW QueryPerformanceCounter SetCurrentDirectoryW SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcrt

__dllonexit __lconv_init __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _fpreset _initterm _iob _lock _onexit _unlock _vsnwprintf _wcmdln _wcsicmp _wcsnicmp abort calloc exit free fwrite malloc memmove signal strncmp vfprintf wcschr wcslen wcsrchr wcstoul

shell32

ShellExecuteW

gdi32

BitBlt CreateCompatibleDC CreateFontIndirectW CreatePen CreateSolidBrush DeleteDC DeleteObject GetObjectW GetStockObject LineTo MoveToEx PatBlt SelectObject SetBkMode SetTextColor

user32

AdjustWindowRect BeginPaint CallWindowProcW CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW DrawTextW EndPaint FindWindowW GetDlgCtrlID GetFocus GetForegroundWindow GetMessageW GetParent GetSysColor GetSystemMenu GetSystemMetrics GetWindowDC GetWindowLongW GetWindowTextW InflateRect InvalidateRect IsDialogMessageW IsWindowEnabled LoadBitmapW LoadCursorW LoadIconW LoadStringW MessageBoxW OffsetRect PostQuitMessage RegisterClassExW ReleaseDC RemoveMenu SendMessageW SetFocus SetForegroundWindow SetWindowLongW ShowWindow TranslateMessage UpdateWindow

Name

.text

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

186KB

Virtual Size

185KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b7c9c14c904d4e6f687c3195ef190f60bf88b1bf2e4b1b9939a2da7755563f99

kernel32

msvcrt

shell32

gdi32

user32

generic