916c5ebfa80f6f02f26d8fc9e4e1050d11f8b3c7b1f25244ab61760f809d3c39

Sharing

Copy URL Twitter E-mail

General

Target
916c5ebfa80f6f02f26d8fc9e4e1050d11f8b3c7b1f25244ab61760f809d3c39
Size 764KB
Sample261030-at174sf14x
SHA256 916c5ebfa80f6f02f26d8fc9e4e1050d11f8b3c7b1f25244ab61760f809d3c39
MD5 020cf084f0e73ef9070bb6b79699a293
SHA1 76d88a327b2e6c95892adc335403584ebdc87d8d
SHA512 1448751dc3731e7370e7fe71a4f5c01b76da5e601ab7e2b61d6d1046c0f11bfc94f31273d07c8a3b4ce02e1a4338d1328a37af0ed898f1e15d8a473eb2b823a8
SSDEEP 12288:Fgqd5KTo6XA6ozbbaW/Kb3egndev0U8VT:6ns6rnde8U8VT
TLSH
T1F6F42E1467EA8905F5F7AF38A8B913952E7ABD626F34C28F4A00610D18B5ED0DD71B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
916c5ebfa80f6f02f26d8fc9e4e1050d11f8b3c7b1f25244ab61760f809d3c39

File Explorer

916c5ebfa80f6f02f26d8fc9e4e1050d11f8b3c7b1f25244ab61760f809d3c39

.exe 764KB

916c5ebfa80f6f02f26d8fc9e4e1050d11f8b3c7b1f25244ab61760f809d3c39

IMPHASH cab80a0c7c09e70388bf536a42466c51
SHA256 916c5ebfa80f6f02f26d8fc9e4e1050d11f8b3c7b1f25244ab61760f809d3c39
MD5 020cf084f0e73ef9070bb6b79699a293
SHA1 76d88a327b2e6c95892adc335403584ebdc87d8d
SHA512 1448751dc3731e7370e7fe71a4f5c01b76da5e601ab7e2b61d6d1046c0f11bfc94f31273d07c8a3b4ce02e1a4338d1328a37af0ed898f1e15d8a473eb2b823a8
SSDEEP 12288:Fgqd5KTo6XA6ozbbaW/Kb3egndev0U8VT:6ns6rnde8U8VT
TLSH
T1F6F42E1467EA8905F5F7AF38A8B913952E7ABD626F34C28F4A00610D18B5ED0DD71B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

52080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ShellAboutW Shell_NotifyIconW

shlwapi

StrFormatByteSizeW StrFormatKBSizeW

comctl32

CreateStatusWindowW ImageList_Create ImageList_Remove ImageList_ReplaceIcon InitCommonControls

user32

AppendMenuW BeginPaint BringWindowToTop CallWindowProcW CascadeWindows CheckMenuItem CheckMenuRadioItem CopyRect CreateDialogParamW CreateIconIndirect CreatePopupMenu DefWindowProcW DeleteMenu DestroyIcon DestroyMenu DialogBoxParamW DrawMenuBar DrawTextW EnableMenuItem EnableWindow EndDialog EndPaint EnumWindows FillRect GetClassLongW GetClientRect GetCursorPos GetDC GetDlgItem GetGuiResources GetMenu GetMenuItemCount GetMenuState GetParent GetSubMenu GetSysColor GetSystemMetrics GetWindow GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextW GetWindowThreadProcessId InsertMenuW InvalidateRect IsHungAppWindow IsIconic IsWindow IsWindowVisible IsZoomed KillTimer LoadBitmapW LoadIconW LoadImageA LoadImageW LoadMenuW LoadStringA LoadStringW MapWindowPoints MessageBoxA MessageBoxW MoveWindow OpenIcon PostMessageW ReleaseDC RemoveMenu SendMessageA SendMessageTimeoutW SendMessageW SetFocus SetForegroundWindow SetMenuDefaultItem SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SwitchToThisWindow TileWindows TrackPopupMenu TrackPopupMenuEx WinHelpW wsprintfW

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreatePen CreateSolidBrush DeleteDC DeleteObject ExcludeClipRect ExtTextOutW LineTo MoveToEx RestoreDC SaveDC SelectObject SetBkColor SetPixel SetTextColor

advapi32

AdjustTokenPrivileges GetUserNameW ImpersonateLoggedOnUser LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW RevertToSelf

ucrtbase

__p___argc __p___argv __stdio_common_vswprintf _configure_narrow_argv _crt_atexit _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type _ui64tow _wcsupr exit log10 memcpy memset strcmp wcscat wcslen wcsstr

kernel32

CloseHandle CreateEventW CreateProcessW CreateThread EnterCriticalSection FormatMessageW GetCommandLineA GetModuleHandleA GetModuleHandleW GetPriorityClass GetProcAddress GetProcessAffinityMask GetProcessIoCounters GetStartupInfoA GetSystemInfo GetVersionExW HeapAlloc HeapFree InitializeCriticalSection IsWow64Process LeaveCriticalSection LocalFree MultiByteToWideChar OpenProcess ReadProcessMemory ResetEvent SetEvent SetPriorityClass SetProcessAffinityMask TerminateProcess WaitForSingleObject WriteProcessMemory lstrcmpW

ntdll

NtQueryInformationProcess NtQuerySystemInformation _aulldiv _aullrem _chkstk

Sharing

General

Malware Config

Signatures

File Explorer

916c5ebfa80f6f02f26d8fc9e4e1050d11f8b3c7b1f25244ab61760f809d3c39

shell32

shlwapi

comctl32

user32

gdi32

advapi32

ucrtbase

kernel32

ntdll

generic