9ae4282615fca05f5e6573d7fde18531d9efaf4994ab7f8eaa78b58fea10913a

Sharing

Copy URL Twitter E-mail

General

Target
9ae4282615fca05f5e6573d7fde18531d9efaf4994ab7f8eaa78b58fea10913a
Size 302KB
Sample261027-w79bjaf13p
SHA256 9ae4282615fca05f5e6573d7fde18531d9efaf4994ab7f8eaa78b58fea10913a
MD5 ca8611badced9636e86cc9339deb7284
SHA1 8ad26d93686da473dd9cc6908e3b479914df33fd
SHA512 2d003ddbf1016530525fa703024d9ac5a96d9c56ddfae5909be60f071ae475383d5f960f6e5c307ee05220e0828f5417caac5bddc5ef7887ec71477ab32d2bd8
SSDEEP 6144:UeMSGKfOUFCo1Dyoop1JwtVBVEB/bMqvNal1kJ2Vm5eAOrZiFp:NtGKfFtop1J//PVaDkJ2kYeF
TLSH
T110648D01F79AC136D96B2A711D72932E863DB9109B3887D7DBD11E2DDE206D1C8BA30D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ae4282615fca05f5e6573d7fde18531d9efaf4994ab7f8eaa78b58fea10913a

File Explorer

9ae4282615fca05f5e6573d7fde18531d9efaf4994ab7f8eaa78b58fea10913a

.exe 302KB

9ae4282615fca05f5e6573d7fde18531d9efaf4994ab7f8eaa78b58fea10913a

IMPHASH 339235c1bd92a1c108cf65af9358aa86
SHA256 9ae4282615fca05f5e6573d7fde18531d9efaf4994ab7f8eaa78b58fea10913a
MD5 ca8611badced9636e86cc9339deb7284
SHA1 8ad26d93686da473dd9cc6908e3b479914df33fd
SHA512 2d003ddbf1016530525fa703024d9ac5a96d9c56ddfae5909be60f071ae475383d5f960f6e5c307ee05220e0828f5417caac5bddc5ef7887ec71477ab32d2bd8
SSDEEP 6144:UeMSGKfOUFCo1Dyoop1JwtVBVEB/bMqvNal1kJ2Vm5eAOrZiFp:NtGKfFtop1J//PVaDkJ2kYeF
TLSH
T110648D01F79AC136D96B2A711D72932E863DB9109B3887D7DBD11E2DDE206D1C8BA30D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

152846

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

RO2012Launcher.pdb

shell32

Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

uxtheme

SetWindowTheme

kernel32

ExpandEnvironmentStringsW ReadFile CreateFileW MultiByteToWideChar GetFileSizeEx CloseHandle GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW GetLocalTime FindFirstFileW OutputDebugStringW FindClose FindNextFileW WaitForSingleObject GetLastError RemoveDirectoryW DeleteFileW SetFileAttributesW WriteFile WideCharToMultiByte LoadLibraryW GetConsoleMode GetConsoleCP SetFilePointer HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID LocalFree GetCurrentProcessId GetTickCount QueryPerformanceCounter GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetLocaleInfoW GetStdHandle ExitProcess HeapSize HeapCreate IsProcessorFeaturePresent GetProcAddress GetCurrentThreadId SetLastError GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetOEMCP GetACP IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess LCMapStringW HeapAlloc HeapSetInformation RtlUnwind GetCurrentDirectoryW GetModuleFileNameW GetFileAttributesW FormatMessageW SetStdHandle WriteConsoleW GetStartupInfoW GetCPInfo GetSystemTimeAsFileTime FlushFileBuffers InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW RaiseException

user32

DestroyIcon EndPaint ClientToScreen DestroyWindow SetCursor GetWindowTextLengthW GetWindowRect PostQuitMessage TrackPopupMenu FillRect PostMessageW DrawTextW SetForegroundWindow TrackMouseEvent LoadCursorW GetClientRect BeginPaint PtInRect wsprintfW GetDC RegisterClassExW InvalidateRect GetWindowLongW AppendMenuW GetWindowTextW GetClassNameW ReleaseDC SetWindowLongW GetCursorPos ShowWindow CreatePopupMenu CreateWindowExW GetSystemMetrics SendMessageW MapWindowPoints UpdateWindow EnableWindow AdjustWindowRect DestroyMenu GetDlgCtrlID SetWindowTextW CallWindowProcW DefWindowProcW GetMessageW TranslateMessage MessageBoxW DispatchMessageW LoadIconW

gdi32

SetBkMode SetBkColor DeleteObject SelectObject CreateFontW EnumFontFamiliesExW GetStockObject CreateSolidBrush SetTextColor

Sharing

General

Malware Config

Signatures

File Explorer

9ae4282615fca05f5e6573d7fde18531d9efaf4994ab7f8eaa78b58fea10913a

shell32

comctl32

uxtheme

kernel32

user32

gdi32

generic