8d148217c4ffd0fc154734c6c2d01313799942a822b61e21e6f8c69ba4b0c9e4

Sharing

Copy URL Twitter E-mail

General

Target
8d148217c4ffd0fc154734c6c2d01313799942a822b61e21e6f8c69ba4b0c9e4
Size 74KB
Sample261003-sc615s1dkd
SHA256 8d148217c4ffd0fc154734c6c2d01313799942a822b61e21e6f8c69ba4b0c9e4
MD5 e0ed0c127c3bfcb8a150161b1575dc29
SHA1 bfccb214c6e66f2a93cbc7bf9a0fd52255fb1418
SHA512 e47689aeb88c575ea85a2104d1333286e4344f2c39c691658f2b282e0a67c680d05f3a8caa6b9cebc1c4e7d0c60992b4f59d89f5712cc636f023e493472f199a
SSDEEP 1536:eivIFLSTYSdQQQQQQQ3vUfCKaZo5+p0BEv76Th17Qc0ZD3i:eivIFGUSdQQQQQQQ/USZoA3vvXZ
TLSH
T143734B05EDC7EC2FED51A67965F7C6A84A35ED008E20C717F288620DCAE6610CFD5B4A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d148217c4ffd0fc154734c6c2d01313799942a822b61e21e6f8c69ba4b0c9e4

File Explorer

8d148217c4ffd0fc154734c6c2d01313799942a822b61e21e6f8c69ba4b0c9e4

.exe 74KB

8d148217c4ffd0fc154734c6c2d01313799942a822b61e21e6f8c69ba4b0c9e4

IMPHASH a3d00928500543f664587d7a334e142f
SHA256 8d148217c4ffd0fc154734c6c2d01313799942a822b61e21e6f8c69ba4b0c9e4
MD5 e0ed0c127c3bfcb8a150161b1575dc29
SHA1 bfccb214c6e66f2a93cbc7bf9a0fd52255fb1418
SHA512 e47689aeb88c575ea85a2104d1333286e4344f2c39c691658f2b282e0a67c680d05f3a8caa6b9cebc1c4e7d0c60992b4f59d89f5712cc636f023e493472f199a
SSDEEP 1536:eivIFLSTYSdQQQQQQQ3vUfCKaZo5+p0BEv76Th17Qc0ZD3i:eivIFGUSdQQQQQQQ/USZoA3vvXZ
TLSH
T143734B05EDC7EC2FED51A67965F7C6A84A35ED008E20C717F288620DCAE6610CFD5B4A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9957

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

glu32

gluPerspective

opengl32

glCallLists glClear glClearColor glClearDepth glColor3f glDeleteLists glDepthFunc glEnable glGenLists glLoadIdentity glMatrixMode glRotatef glShadeModel glTranslatef glViewport wglCreateContext wglDeleteContext wglMakeCurrent wglUseFontOutlinesW

advapi32

RegCloseKey RegCreateKeyExW RegQueryValueExW RegSetValueExW

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetStartupInfoW GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryW QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcrt

__dllonexit __lconv_init __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _fpreset _initterm _iob _lock _onexit _unlock _wcmdln abort calloc cos exit free fwrite malloc memmove signal sin strncmp vfprintf wcslen

gdi32

ChoosePixelFormat CreateFontW GetStockObject SelectObject SetPixelFormat SwapBuffers

user32

ChangeDisplaySettingsW CreateWindowExW DefWindowProcW DialogBoxParamW DispatchMessageW EndDialog GetClientRect GetCursorPos GetDC GetDlgItemTextW GetForegroundWindow GetMessageW GetSystemMetrics InvalidateRect IsWindow KillTimer LoadIconW MessageBoxW PostMessageW PostQuitMessage RegisterClassW ReleaseDC SendDlgItemMessageW SetCursor SetDlgItemTextW SetTimer ShowWindow TranslateMessage ValidateRect

Name

.text

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8d148217c4ffd0fc154734c6c2d01313799942a822b61e21e6f8c69ba4b0c9e4

glu32

opengl32

advapi32

kernel32

msvcrt

gdi32

user32

generic