43804f3681500eaa96b59cd68d40e578ab1d670486b21576d74b36ab0e5eb884

Sharing

Copy URL Twitter E-mail

General

Target
43804f3681500eaa96b59cd68d40e578ab1d670486b21576d74b36ab0e5eb884
Size 93KB
Sample261020-w5cjsagy3j
SHA256 43804f3681500eaa96b59cd68d40e578ab1d670486b21576d74b36ab0e5eb884
MD5 bb57b6a636c1e031beb631720440c309
SHA1 7ebfad1011393f40812ddf13011349772564da24
SHA512 fbea4ea1900be726f4d015a6a3caf12af034956c19a63387e9ed3eafab291d71ffa40191e54e49ae400d957061acb75243f85d73c50a7288ed72d242a0781275
SSDEEP 1536:Lr3V+uPaeWLWQ6rab9gHtrAzIX+NzDhc2JlRH9+mLgYOx9k6Pz5yo:LrFlWLN6OgHtUzIO1vlRdP0QBo
TLSH
T15393084123E820E8E6B7D775C9725516E336B8215B3197DF43208A5A1F33BE1ED3AB42
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43804f3681500eaa96b59cd68d40e578ab1d670486b21576d74b36ab0e5eb884

File Explorer

43804f3681500eaa96b59cd68d40e578ab1d670486b21576d74b36ab0e5eb884

.exe 93KB

43804f3681500eaa96b59cd68d40e578ab1d670486b21576d74b36ab0e5eb884

IMPHASH 306b20d4eaa2f8eda2c1539c3ee2efb6
SHA256 43804f3681500eaa96b59cd68d40e578ab1d670486b21576d74b36ab0e5eb884
MD5 bb57b6a636c1e031beb631720440c309
SHA1 7ebfad1011393f40812ddf13011349772564da24
SHA512 fbea4ea1900be726f4d015a6a3caf12af034956c19a63387e9ed3eafab291d71ffa40191e54e49ae400d957061acb75243f85d73c50a7288ed72d242a0781275
SSDEEP 1536:Lr3V+uPaeWLWQ6rab9gHtrAzIX+NzDhc2JlRH9+mLgYOx9k6Pz5yo:LrFlWLN6OgHtUzIO1vlRdP0QBo
TLSH
T15393084123E820E8E6B7D775C9725516E336B8215B3197DF43208A5A1F33BE1ED3AB42
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54968

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

lstrcpyW lstrcatW GetCurrentProcess CopyFileW GetFileSize ReadFile HeapAlloc HeapFree GetProcessHeap GetModuleHandleW lstrcmpW MultiByteToWideChar GetACP ExpandEnvironmentStringsW SetLastError WaitForSingleObject Sleep GetExitCodeProcess CreateProcessW GetProcessId GetTickCount GetModuleHandleA LoadLibraryA DuplicateHandle CreateEventW lstrcmpiA LoadLibraryW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetLastError RtlUnwindEx GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetProcAddress FreeLibrary CreateThread CloseHandle WriteFile SetFileAttributesW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CreateFileW CreateDirectoryW SetEnvironmentVariableW GetCommandLineW lstrlenW lstrcpynW lstrcmpiW LocalFree ProcessIdToSessionId GetCurrentProcessId

user32

wsprintfW SetTimer GetMessageW PostQuitMessage PostMessageW FindWindowW SystemParametersInfoW TranslateMessage DispatchMessageW PeekMessageW DefWindowProcW RegisterClassW CreateWindowExW DestroyWindow ShowWindow SetWindowPos GetSystemMetrics DrawTextW UpdateWindow GetDC ReleaseDC BeginPaint EndPaint InvalidateRect FillRect GetClassNameW RegisterHotKey

gdi32

SelectObject DeleteObject DeleteDC CreateSolidBrush CreateFontW CreateCompatibleDC CreateCompatibleBitmap BitBlt SetBkMode SetTextColor

advapi32

RegQueryValueExW RegFlushKey RegEnumValueW RegEnumKeyExW GetUserNameW RegOpenKeyExW RegCloseKey RegSetValueExW RegCreateKeyExW

shell32

SHFileOperationW CommandLineToArgvW

shlwapi

StrStrIW

api-ms-win-crt-runtime-l1-1-0

abort _register_thread_local_exe_atexit_callback _c_exit _cexit terminate _exit exit _initialize_onexit_table _initterm _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _register_onexit_function _set_app_type _seh_filter_exe _crt_atexit _initterm_e

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

calloc free _set_new_mode

api-ms-win-crt-string-l1-1-0

wcsncmp

Sharing

General

Malware Config

Signatures

File Explorer

43804f3681500eaa96b59cd68d40e578ab1d670486b21576d74b36ab0e5eb884

kernel32

user32

gdi32

advapi32

shell32

shlwapi

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

generic