a3008e0f94af02690ab000acc09a1152f848723ca389c0bf94573c5846e563d2

Sharing

Copy URL Twitter E-mail

General

Target
a3008e0f94af02690ab000acc09a1152f848723ca389c0bf94573c5846e563d2
Size 1012KB
Sample261027-c11ahaxy2n
SHA256 a3008e0f94af02690ab000acc09a1152f848723ca389c0bf94573c5846e563d2
MD5 33dae3803bd1bff11b7410768b7ce14d
SHA1 7bbad0255c6dc547338ecd65f7977fc52e2fc71e
SHA512 79947fa1724b0daa4f049bd724f12174f410274a43e85cdc5fc7038919b63ba721990c423d4a79e84df1508876ccc2c49d2b83a9b3a8f69848656800a05922fd
SSDEEP 6144:F1TuczUumb27gsPqTYQC/8tUDdwxvFzStPncBRbBY/Rwk9bGPFbrNx/F7k:ykTSTYQPtU+xvF+tQO/cFbrNx/B
TLSH
T11E25702123E98206F1F39B3528F552517D327C126B36C6FF624056ED0BB3BD59AB4B22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3008e0f94af02690ab000acc09a1152f848723ca389c0bf94573c5846e563d2

File Explorer

a3008e0f94af02690ab000acc09a1152f848723ca389c0bf94573c5846e563d2

.exe 1012KB

a3008e0f94af02690ab000acc09a1152f848723ca389c0bf94573c5846e563d2

IMPHASH 5af714ba0938638631e87227c44706f8
SHA256 a3008e0f94af02690ab000acc09a1152f848723ca389c0bf94573c5846e563d2
MD5 33dae3803bd1bff11b7410768b7ce14d
SHA1 7bbad0255c6dc547338ecd65f7977fc52e2fc71e
SHA512 79947fa1724b0daa4f049bd724f12174f410274a43e85cdc5fc7038919b63ba721990c423d4a79e84df1508876ccc2c49d2b83a9b3a8f69848656800a05922fd
SSDEEP 6144:F1TuczUumb27gsPqTYQC/8tUDdwxvFzStPncBRbBY/Rwk9bGPFbrNx/F7k:ykTSTYQPtU+xvF+tQO/cFbrNx/B
TLSH
T11E25702123E98206F1F39B3528F552517D327C126B36C6FF624056ED0BB3BD59AB4B22
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

59168

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comdlg32

ChooseColorW ChooseFontW GetOpenFileNameW

comctl32

ord320 ord388 ord323 ord324 InitCommonControls PropertySheetW

shell32

ord155 SHBindToParent SHBrowseForFolderW SHCreateDirectoryExW SHFileOperationW ord195 SHGetDesktopFolder SHGetFolderLocation SHGetFolderPathW ShellExecuteW

ole32

CoCreateInstance CoInitializeEx CoTaskMemFree CoUninitialize PropVariantClear

winmm

PlaySoundW midiOutGetDevCapsW midiOutGetNumDevs

shlwapi

PathFindExtensionW PathFindFileNameW PathRemoveExtensionW StrDupW StrRetToBufW StrRetToStrW

uxtheme

ord4 CloseThemeData ord3 DrawThemeBackground DrawThemeParentBackground ord9 ord10 ord8 GetCurrentThemeName GetThemeMargins IsThemeActive IsThemeBackgroundPartiallyTransparent OpenThemeDataForDpi ord2

user32

AdjustWindowRectEx CheckDlgButton CheckRadioButton DestroyIcon DialogBoxParamW DrawEdge DrawFocusRect DrawFrameControl DrawIconEx EnableWindow EndDialog EnumWindows FillRect FrameRect GetClientRect GetDC GetDesktopWindow GetDlgCtrlID GetDlgItem GetDlgItemInt GetDpiForWindow GetMenu GetParent GetPropW GetSysColor GetSysColorBrush GetSystemMetrics GetWindowLongW GetWindowTextLengthW GetWindowTextW InvalidateRect IsDlgButtonChecked KillTimer LoadCursorW LoadIconW LoadImageW LoadStringW MessageBoxIndirectW MessageBoxW MoveWindow ReleaseDC SendDlgItemMessageW SendMessageW SetCursor SetDlgItemInt SetDlgItemTextA SetDlgItemTextW SetFocus SetSysColors SetTimer SetWindowLongW SetWindowPos SetWindowTextA SetWindowTextW ShowWindow SystemParametersInfoW

gdi32

CreateFontIndirectW CreateFontW CreateSolidBrush DeleteObject GetDeviceCaps GetObjectW SetBkColor SetTextColor

advapi32

RegCloseKey RegCreateKeyExW RegCreateKeyW RegDeleteKeyW RegDeleteTreeW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegOpenKeyW RegQueryValueExW RegSetValueExW

ucrtbase

__acrt_iob_func __p___argc __p___wargv __stdio_common_vsprintf __stdio_common_vswprintf __stdio_common_vswscanf _assert _configure_wide_argv _crt_atexit _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _strdup _wcsdup _wcsicmp bsearch exit free fwrite getenv malloc memcpy memmove realloc setlocale strchr strcmp strcpy strcspn strlen strrchr toupper wcscat wcschr wcscmp wcscpy wcslen wcsncmp wcsrchr wcstol wcstoul

kernel32

CloseHandle CreateFileW CreateProcessW DeviceIoControl ExitProcess FindClose FindFirstFileW FindNextFileW FormatMessageA GetCommandLineW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetStartupInfoW GetTickCount GetVolumeInformationW GlobalGetAtomNameW HeapAlloc HeapReAlloc IsBadStringPtrA IsBadStringPtrW IsWow64Process MulDiv MultiByteToWideChar SetVolumeLabelW WaitForSingleObject WideCharToMultiByte Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection WriteFile lstrcmpiW

ntdll

RtlDosPathNameToNtPathName_U RtlFreeUnicodeString _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

a3008e0f94af02690ab000acc09a1152f848723ca389c0bf94573c5846e563d2

comdlg32

comctl32

shell32

ole32

winmm

shlwapi

uxtheme

user32

gdi32

advapi32

ucrtbase

kernel32

ntdll

generic