a0b9d42725dc870281467c3ec95cb632083147f3c8f046d2240cebd0aaea2b7e

Sharing

Copy URL Twitter E-mail

General

Target
a0b9d42725dc870281467c3ec95cb632083147f3c8f046d2240cebd0aaea2b7e
Size 208KB
Sample261017-mqfs8aed74
SHA256 a0b9d42725dc870281467c3ec95cb632083147f3c8f046d2240cebd0aaea2b7e
MD5 04117bca2cc23c6f6493813bd84939ac
SHA1 58e40c93452015725e1a9d020b895bcac7228cb3
SHA512 1245b64ee3a050a0c01e9ba6c72d7ac7b20bf4d315a70b74bdd217f6724c4899a9ae93f1a074b672f69a29ef6d7566c627261a203344e9df4ae7b63bc12e6d32
SSDEEP 1536:ZFIrXcwlHTkC//jzlxGljgUO8StR6u5Wujir5p16Vt9Xm4FP+aRCKR4r4irFKjl:QJlHgZ++u5Zir5p1qRHFbQr9r72U
TLSH
T13E244B60B5C2A72BDE6F43B1B4EBB7257279B4306B734AC352051C7A4DE63E15038B62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0b9d42725dc870281467c3ec95cb632083147f3c8f046d2240cebd0aaea2b7e

File Explorer

a0b9d42725dc870281467c3ec95cb632083147f3c8f046d2240cebd0aaea2b7e

.exe 208KB

a0b9d42725dc870281467c3ec95cb632083147f3c8f046d2240cebd0aaea2b7e

IMPHASH 3d5403b81a82e04d9fb93560e7f76c31
SHA256 a0b9d42725dc870281467c3ec95cb632083147f3c8f046d2240cebd0aaea2b7e
MD5 04117bca2cc23c6f6493813bd84939ac
SHA1 58e40c93452015725e1a9d020b895bcac7228cb3
SHA512 1245b64ee3a050a0c01e9ba6c72d7ac7b20bf4d315a70b74bdd217f6724c4899a9ae93f1a074b672f69a29ef6d7566c627261a203344e9df4ae7b63bc12e6d32
SSDEEP 1536:ZFIrXcwlHTkC//jzlxGljgUO8StR6u5Wujir5p16Vt9Xm4FP+aRCKR4r4irFKjl:QJlHgZ++u5Zir5p1qRHFbQr9r72U
TLSH
T13E244B60B5C2A72BDE6F43B1B4EBB7257279B4306B734AC352051C7A4DE63E15038B62
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

56000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

rpcrt4

UuidCreate

user32

AdjustWindowRect AppendMenuW BeginPaint ChangeDisplaySettingsExW ClientToScreen ClipCursor CopyIcon CreateDesktopW CreateIcon CreatePopupMenu CreateWindowExW DefWindowProcW DestroyIcon DestroyMenu DestroyWindow DispatchMessageW DrawCaptionTempW DrawFrameControl DrawIconEx DrawTextW EndPaint EnumDisplayDevicesW EnumDisplaySettingsExW ExitWindowsEx GetAncestor GetClientRect GetDC GetDesktopWindow GetForegroundWindow GetMenuInfo GetMenuItemCount GetMenuItemInfoW GetMessageW GetProcessWindowStation GetSystemMetrics GetThreadDesktop GetUserObjectInformationW GetWindow GetWindowLongW GetWindowRect GetWindowThreadProcessId InsertMenuItemW IntersectRect InvalidateRect IsIconic IsWindowEnabled IsWindowVisible KillTimer LoadCursorA LoadCursorW LoadIconW LoadStringW MessageBoxW MsgWaitForMultipleObjects PaintDesktop PeekMessageW PostMessageW PostQuitMessage RegisterClassExW RegisterClassW ReleaseDC SendMessageW SendNotifyMessageW SetCursor SetForegroundWindow SetMenuInfo SetMenuItemInfoW SetParent SetShellWindow SetThreadDesktop SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SubtractRect SystemParametersInfoW TrackPopupMenuEx TranslateMessage UnregisterClassW UpdateLayeredWindow UpdateWindow

gdi32

CreateCompatibleDC CreateDIBSection CreateFontIndirectW DeleteDC DeleteObject GetDeviceCaps GetTextExtentPointA GetTextExtentPointW GetTextMetricsW SelectObject SetBkMode SetTextColor

advapi32

RegCloseKey RegCreateKeyExW RegGetValueW RegOpenKeyW RegQueryValueExW RegSetValueExA RegSetValueExW

win32u

NtUserMessageCall

ucrtbase

__acrt_iob_func __p___argc __p___wargv __stdio_common_vsprintf __stdio_common_vswprintf _assert _configure_wide_argv _crt_atexit _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _strdup _wcsicmp _wcsnicmp calloc exit free fwrite getenv iswspace malloc memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen wcschr wcscmp wcscpy wcslen wcstoul

kernel32

CloseHandle CompareStringW CreateEventW CreateFileW CreateMutexW CreateProcessW CreateThread DuplicateHandle EnterCriticalSection ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetFullPathNameW GetModuleHandleW GetOverlappedResult GetProcAddress GetStartupInfoW GetTickCount HeapAlloc HeapReAlloc InitializeCriticalSectionEx IsBadStringPtrA IsBadStringPtrW LeaveCriticalSection LoadLibraryW MapViewOfFile MulDiv MultiByteToWideChar OpenProcess ReadDirectoryChangesW ResolveDelayLoadedAPI SetThreadDescription UnmapViewOfFile WaitForMultipleObjects WaitForSingleObject lstrcmpiW

ntdll

NtSetInformationProcess _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

a0b9d42725dc870281467c3ec95cb632083147f3c8f046d2240cebd0aaea2b7e

rpcrt4

user32

gdi32

advapi32

win32u

ucrtbase

kernel32

ntdll

generic