clipnote studio[1[.]1[.]2][.]exe

Sharing

Copy URL Twitter E-mail

General

Target
clipnote studio[1.1.2].exe
Size 2.6MB
Sample261011-xprjfafc72
SHA256 e74f6cac17139e108abd1dc862e4922a19449260f80f6f3a32783fbfd3a4635f
MD5 15cd92e7078d8582b3f0c4bf43ed0cd1
SHA1 aca107ca787ece413bb7a36071a29263cb5ea386
SHA512 b621a1d07e91cab3d8e522533dc2531f88ae99ba029f2ae195d0960570d9379f62080c9832d39817e945762d8dfc539a222dac0419f3635831924aa4cccfd62f
SSDEEP 49152:uHPrAF3NaBh2Ny7SnTXrxGwQD7MObVDTqgB+lwz/QdrL25afCI3YS6dx0hor6:uvO38BhwXNnco6VZ7zIZL25ab6dTr
TLSH
T1CCC523A26CFC452EF93436B72CAA43C70A21FEC24DF55259A37074C76ABB5905930F62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
clipnote studio[1.1.2].exe

File Explorer

clipnote studio[1.1.2].exe

.exe 2.6MB

clipnote studio[1.1.2].exe

IMPHASH 3e5b9923ab1e9eb27fe6580af9265696
SHA256 e74f6cac17139e108abd1dc862e4922a19449260f80f6f3a32783fbfd3a4635f
MD5 15cd92e7078d8582b3f0c4bf43ed0cd1
SHA1 aca107ca787ece413bb7a36071a29263cb5ea386
SHA512 b621a1d07e91cab3d8e522533dc2531f88ae99ba029f2ae195d0960570d9379f62080c9832d39817e945762d8dfc539a222dac0419f3635831924aa4cccfd62f
SSDEEP 49152:uHPrAF3NaBh2Ny7SnTXrxGwQD7MObVDTqgB+lwz/QdrL25afCI3YS6dx0hor6:uvO38BhwXNnco6VZ7zIZL25ab6dTr
TLSH
T1CCC523A26CFC452EF93436B72CAA43C70A21FEC24DF55259A37074C76ABB5905930F62
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wextract.pdb

advapi32

GetTokenInformation RegDeleteValueA RegOpenKeyExA RegQueryInfoKeyA FreeSid OpenProcessToken RegSetValueExA RegCreateKeyExA LookupPrivilegeValueA AllocateAndInitializeSid RegQueryValueExA EqualSid RegCloseKey AdjustTokenPrivileges

kernel32

_lopen _llseek CompareStringA GetLastError GetFileAttributesA GetSystemDirectoryA LoadLibraryA DeleteFileA GlobalAlloc GlobalFree CloseHandle WritePrivateProfileStringA IsDBCSLeadByte GetWindowsDirectoryA SetFileAttributesA GetProcAddress GlobalLock LocalFree RemoveDirectoryA FreeLibrary _lclose CreateDirectoryA GetPrivateProfileIntA GetPrivateProfileStringA GlobalUnlock ReadFile SizeofResource WriteFile GetDriveTypeA lstrcmpA SetFileTime SetFilePointer FindResourceA CreateMutexA GetVolumeInformationA WaitForSingleObject FindClose FreeResource GetVersion SetCurrentDirectoryA GetTempPathA LocalFileTimeToFileTime CreateFileA SetEvent TerminateThread GetVersionExA LockResource GetSystemInfo CreateThread ResetEvent LoadResource ExitProcess GetModuleHandleW CreateProcessA FormatMessageA GetTempFileNameA DosDateTimeToFileTime CreateEventA GetExitCodeProcess GetModuleFileNameA LocalAlloc MulDiv GetDiskFreeSpaceA EnumResourceLanguagesA GetTickCount GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetStartupInfoW Sleep ExpandEnvironmentStringsA FindNextFileA GetCurrentProcess GetCurrentDirectoryA FindFirstFileA GetShortPathNameA LoadLibraryExA

gdi32

GetDeviceCaps

user32

SetWindowLongA GetDlgItemTextA DialogBoxIndirectParamA ShowWindow MsgWaitForMultipleObjects SetWindowPos GetDC GetWindowRect DispatchMessageA GetDesktopWindow CharUpperA SetDlgItemTextA ExitWindowsEx MessageBeep EndDialog CharPrevA LoadStringA CharNextA EnableWindow ReleaseDC SetForegroundWindow PeekMessageA GetDlgItem SendMessageA SendDlgItemMessageA MessageBoxA SetWindowTextA GetWindowLongA GetSystemMetrics CallWindowProcA

msvcrt

_controlfp _acmdln _initterm ?terminate@@YAXXZ _except_handler4_common __setusermatherr _ismbblead __p__fmode _cexit _exit exit __set_app_type __getmainargs _amsg_exit __p__commode _XcptFilter memcpy_s _vsnprintf memcpy memset

comctl32

ord17

cabinet

ord21 ord23 ord22 ord20

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA