SisterLocation - Copy[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SisterLocation - Copy.exe
Size 906.5MB
Sample261014-2j4n2atthy
SHA256 c60e1c7994316426d824b82004aa5c76e3aab06d4e78e0c9391628e0d52b2c73
MD5 cc2b5b61426c2593ce050edd44249211
SHA1 4a8ce3c74cef76fd67b3e5ca80eb5bd1b36576cc
SHA512 21ad96969b1e2fd6c09714bbd21389d392fc74b2b49f9c8dd5b166300c98845b2e021bb57cb06a7fe9a2ea0c02091245e9f7c5bbe1fcffe6fb4e61e9167c73e1
SSDEEP 25165824:Q7zWfLoEi71Cimdgsp/r+t/XSAMphd3ieHA9+:6zgLop7cimdgsdr+tQphZAg
TLSH
T1F1A9338CE5E7DC42DDAB5032C3AA7E30B7AE0467432244DA1235B5842D9A5FD0F76A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SisterLocation - Copy.exe

File Explorer

SisterLocation - Copy.exe

.exe 906.5MB

SisterLocation - Copy.exe

IMPHASH e933eb80698516b8bbfa04a4e8f906f5
SHA256 c60e1c7994316426d824b82004aa5c76e3aab06d4e78e0c9391628e0d52b2c73
MD5 cc2b5b61426c2593ce050edd44249211
SHA1 4a8ce3c74cef76fd67b3e5ca80eb5bd1b36576cc
SHA512 21ad96969b1e2fd6c09714bbd21389d392fc74b2b49f9c8dd5b166300c98845b2e021bb57cb06a7fe9a2ea0c02091245e9f7c5bbe1fcffe6fb4e61e9167c73e1
SSDEEP 25165824:Q7zWfLoEi71Cimdgsp/r+t/XSAMphd3ieHA9+:6zgLop7cimdgsdr+tQphZAg
TLSH
T1F1A9338CE5E7DC42DDAB5032C3AA7E30B7AE0467432244DA1235B5842D9A5FD0F76A4F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

463014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

winmm

timeBeginPeriod joyGetDevCapsW joyGetPosEx timeGetTime timeEndPeriod

kernel32

GetVersion GetTempFileNameW GlobalAddAtomW GlobalDeleteAtom GetModuleHandleW lstrlenW GetLocaleInfoA LockResource VirtualProtect VirtualQuery SetLastError LoadResource SizeofResource FindResourceA FindResourceW IsBadReadPtr IsBadWritePtr LoadLibraryExW GetConsoleMode GetConsoleCP FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameA GetFileType GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GlobalFree GetStringTypeW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection GetOEMCP IsValidCodePage GetCPInfo GetProcessHeap GetStdHandle GetModuleHandleExW ExitProcess RtlUnwind GetCommandLineA HeapSize HeapCompact SetEnvironmentVariableW HeapReAlloc DeleteFileW IsProcessorFeaturePresent IsDebuggerPresent GetACP InterlockedDecrement InterlockedIncrement DecodePointer EncodePointer HeapFree HeapAlloc LoadLibraryExA InterlockedExchange RaiseException FileTimeToSystemTime FileTimeToLocalFileTime GetSystemTime GetTempPathW FindClose FindNextFileW FindFirstFileW GetCurrentDirectoryW SetErrorMode WideCharToMultiByte GlobalUnlock GlobalLock GlobalAlloc GetExitCodeProcess GetCommandLineW Sleep SetCurrentDirectoryW CreateDirectoryW CloseHandle SetFilePointer WriteFile GetLastError ReadFile CreateFileW GetCurrentThreadId RemoveDirectoryW GetVersionExW GetModuleFileNameW GetLocaleInfoW MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryW OutputDebugStringW SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers LCMapStringW

user32

IsIconic GetUpdateRect FillRect GetMenuItemID GetMenuStringW ModifyMenuW GetTabbedTextExtentW SystemParametersInfoW DrawEdge DrawTextW PostQuitMessage IntersectRect SetRect DrawFocusRect InvertRect CreateDialogParamA CreateDialogParamW CreateDialogIndirectParamA CreateDialogIndirectParamW DialogBoxParamA DialogBoxIndirectParamA DialogBoxIndirectParamW LoadMenuA LoadMenuW LoadStringA SetLastErrorEx PtInRect GetDlgItem MapVirtualKeyW GetInputState GetDlgItemTextW SendDlgItemMessageW DefMDIChildProcW DrawMenuBar DestroyMenu GetMenuItemCount SetWindowPlacement GetWindowPlacement GetFocus CallWindowProcW RemovePropW SetPropW GetPropW UnionRect DestroyWindow SetScrollPos SetScrollRange CreateWindowExW GetParent EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetFocus GetSysColor GetDesktopWindow RedrawWindow UpdateWindow SetWindowLongW MessageBoxW LoadStringW DialogBoxParamW RegisterClassW RegisterClassExW LoadImageW LoadIconW GetWindow SetDlgItemTextW BeginPaint EndPaint EndDialog GetClassNameW GetTopWindow GetMonitorInfoW MonitorFromWindow GetSystemMetrics OemToCharA GetAsyncKeyState GetActiveWindow ShowCursor SetCapture ReleaseCapture GetKeyState GetWindowRect MapWindowPoints SetWindowPos IsZoomed GetWindowLongW AdjustWindowRectEx SendMessageW LockWindowUpdate IsWindowVisible GetClientRect SetWindowTextW IsDialogMessageW SetTimer GetClipboardData CloseClipboard SetClipboardData EmptyClipboard OpenClipboard IsClipboardFormatAvailable wsprintfW ShowWindow PostMessageW CheckMenuItem EnableMenuItem GetMenu InvalidateRect SetCursorPos ClientToScreen ScreenToClient GetCursorPos GetKeyboardState CopyRect UnhookWindowsHookEx KillTimer SetWindowsHookExW CallNextHookEx DestroyIcon GetKeyboardLayout GetSubMenu DeleteMenu GetMenuState ReleaseDC CreateIconIndirect GetDC MsgWaitForMultipleObjects DispatchMessageW TranslateMessage TranslateMDISysAccel GetMessageW PeekMessageW LoadMenuIndirectW

gdi32

CreatePalette GetDeviceCaps SelectPalette RealizePalette GetObjectW CreateFontIndirectW CreatePen Rectangle SelectObject MoveToEx LineTo CreateSolidBrush GetStockObject SetTextColor SetBkMode DeleteObject GetClipRgn ExcludeClipRect SelectClipRgn GetTextExtentPointW TextOutW SetTextAlign SetROP2 GetNearestPaletteIndex SetPolyFillMode DPtoLP SetBkColor Polygon CreateHatchBrush GetCharWidthW LPtoDP GetTextMetricsW SetDIBits CreateCompatibleBitmap CreateRectRgn CreateBitmap

comdlg32

GetOpenFileNameW GetSaveFileNameW

shell32

DragAcceptFiles DragQueryFileW ShellExecuteExW