439759398992c6ca7d14437fb56faadc5e19ec119457c73cdbc529b4c65e4353

Sharing

Copy URL Twitter E-mail

General

Target
439759398992c6ca7d14437fb56faadc5e19ec119457c73cdbc529b4c65e4353
Size 348KB
Sample261022-x8lsasxt2n
SHA256 439759398992c6ca7d14437fb56faadc5e19ec119457c73cdbc529b4c65e4353
MD5 732acf89db89002a54b229cbd7bd7371
SHA1 092bb2aa3c093ddf490b0fc78beb701ff7e601cf
SHA512 db750ab60142dc51cca4b3b3cdc38bb057dab62efbf2281cd060ecd603d596ce886c5dd7eee78f49b570e984472887da2df14dfef8e24cb7bc5a55af0bcec8a4
SSDEEP 6144:TqqTstuTloonJo1AXv1Idz8NnEAT7mZR/gykj1qZwGGHsGAz5:TqqTstBonEAXv1IdzIT7G6wZl
TLSH
T13874AD21BBC6E076C14302768F83C7B9ABFAB4615F350693BBD41B4D5E385C29A36B05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
439759398992c6ca7d14437fb56faadc5e19ec119457c73cdbc529b4c65e4353

File Explorer

439759398992c6ca7d14437fb56faadc5e19ec119457c73cdbc529b4c65e4353

.exe 348KB

439759398992c6ca7d14437fb56faadc5e19ec119457c73cdbc529b4c65e4353

IMPHASH f2bed52ebb5d3088889c7f62586a2493
SHA256 439759398992c6ca7d14437fb56faadc5e19ec119457c73cdbc529b4c65e4353
MD5 732acf89db89002a54b229cbd7bd7371
SHA1 092bb2aa3c093ddf490b0fc78beb701ff7e601cf
SHA512 db750ab60142dc51cca4b3b3cdc38bb057dab62efbf2281cd060ecd603d596ce886c5dd7eee78f49b570e984472887da2df14dfef8e24cb7bc5a55af0bcec8a4
SSDEEP 6144:TqqTstuTloonJo1AXv1Idz8NnEAT7mZR/gykj1qZwGGHsGAz5:TqqTstBonEAXv1IdzIT7G6wZl
TLSH
T13874AD21BBC6E076C14302768F83C7B9ABFAB4615F350693BBD41B4D5E385C29A36B05
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

170301

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\jk_9\workspace\Module_NPAPI_W_WebPages_package\code_path\Main\Bin\Win32\Win_x86_32\pdb\WebActiveX.pdb

winmm

PlaySoundW

kernel32

lstrcmpiW SizeofResource LoadResource FindResourceA GetModuleHandleA EnterCriticalSection LeaveCriticalSection FlushInstructionCache GetCurrentProcess MulDiv GlobalUnlock GlobalLock GlobalAlloc SetLastError SetEvent CloseHandle WaitForSingleObject CreateThread CreateEventA Sleep GetCommandLineA HeapFree GetProcessHeap InterlockedExchange CreateMutexA ReleaseMutex CreateFileW GlobalFree CreateFileA GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA IsValidCodePage GetOEMCP GetACP SetFilePointer ReadFile FlushFileBuffers GetConsoleMode GetConsoleCP GetFileType SetHandleCount HeapSize GetStdHandle WriteFile HeapCreate HeapDestroy VirtualFree TlsFree TlsSetValue TlsAlloc TlsGetValue ExitProcess GetCPInfo LCMapStringW LCMapStringA DeleteFileW IsDBCSLeadByte OutputDebugStringA InterlockedDecrement InterlockedIncrement GetCurrentThreadId GetCurrentProcessId CreateToolhelp32Snapshot Thread32First Thread32Next lstrcmpiA lstrlenA GetLastError DeleteCriticalSection InitializeCriticalSection RaiseException lstrlenW WideCharToMultiByte MultiByteToWideChar InterlockedCompareExchange GetThreadLocale FindFirstFileA LoadLibraryExA FindNextFileA FreeLibrary GetProcAddress GetModuleFileNameA VirtualQuery IsProcessorFeaturePresent CreateDirectoryW GetFileAttributesW GetLocaleInfoA SetFileAttributesW SetEndOfFile SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA GetLocaleInfoW LoadLibraryA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA GetStartupInfoA GetVersionExA GetFileAttributesA HeapReAlloc GetSystemInfo VirtualAlloc VirtualProtect HeapAlloc RtlUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess

user32

UnregisterClassA DispatchMessageA PostThreadMessageA CreateWindowExA GetMessageA GetKeyState InvalidateRect IsWindow GetParent GetFocus IsChild SetFocus UnionRect PtInRect CallWindowProcA BeginPaint EndPaint IntersectRect EqualRect OffsetRect SetWindowRgn SetWindowPos GetDC ReleaseDC LoadCursorA GetClassInfoExA ShowWindow GetClientRect DefWindowProcA DestroyWindow PostMessageA GetWindowLongA SetWindowLongA CharNextA RegisterClassExA

gdi32

LPtoDP SetMapMode SetViewportOrgEx DeleteDC CreateDCA Rectangle SetTextAlign TextOutA CreateMetaFileA SaveDC SetWindowOrgEx SetWindowExtEx RestoreDC CloseMetaFile DeleteMetaFile CreateRectRgnIndirect GetDeviceCaps

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegCloseKey RegDeleteValueA RegDeleteKeyA

shell32

SHGetPathFromIDListW SHBrowseForFolderW

ole32

CoRegisterClassObject CoRevokeClassObject OleSaveToStream WriteClassStm CreateDataAdviseHolder OleRegGetMiscStatus CoCreateInstance OleRegEnumVerbs CreateOleAdviseHolder OleLoadFromStream CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc StringFromGUID2 CoInitialize CoUninitialize OleRegGetUserType

oleaut32

UnRegisterTypeLi RegisterTypeLi SysAllocStringLen VarUI4FromStr SysAllocStringByteLen SysFreeString OleCreatePropertyFrame LoadTypeLi LoadRegTypeLi SysStringLen VariantChangeType VariantClear VariantInit SysStringByteLen SysAllocString

shlwapi

PathAddBackslashA PathAppendA PathRemoveFileSpecA

Sharing

General

Malware Config

Signatures

File Explorer

439759398992c6ca7d14437fb56faadc5e19ec119457c73cdbc529b4c65e4353

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

generic