600239dda521d5d02cf4dd863081e3cbab231f069a9665f578e5541e8c3d06ba

Sharing

Copy URL Twitter E-mail

General

Target
600239dda521d5d02cf4dd863081e3cbab231f069a9665f578e5541e8c3d06ba
Size 3.2MB
Sample261102-mj3dmsvt5r
SHA256 600239dda521d5d02cf4dd863081e3cbab231f069a9665f578e5541e8c3d06ba
MD5 5e3ded2085679ae022a1f0f15307fd17
SHA1 46a69f1efe63a851f0e6edf1634ae8bc2390c974
SHA512 921e01462dd394be547158ccb02a8eb3d71abe6f926677dc4c0c6bf887a1025b47df74d158812f3c160c84ddd9b18822a1e172ab5bd51f603fff159655b0d769
SSDEEP 49152:/WaTb4CDIrp2w3CY2myyZkDWdvJsv6tWKFdu9CMFoPAZO7nnWCLZgZ3YPmWjZ5RF:/Nc2w3H2myyZt1Jsv6tWKFdu9CpDg
TLSH
T1DCF59E85F3938172FBE3813E05A7E62B46357C558B125ADB639C3F0A69712F2393B106
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
600239dda521d5d02cf4dd863081e3cbab231f069a9665f578e5541e8c3d06ba

File Explorer

600239dda521d5d02cf4dd863081e3cbab231f069a9665f578e5541e8c3d06ba

.exe 3.2MB

600239dda521d5d02cf4dd863081e3cbab231f069a9665f578e5541e8c3d06ba

IMPHASH 00923ac2fa26b26f9a263962685e3eb2
SHA256 600239dda521d5d02cf4dd863081e3cbab231f069a9665f578e5541e8c3d06ba
MD5 5e3ded2085679ae022a1f0f15307fd17
SHA1 46a69f1efe63a851f0e6edf1634ae8bc2390c974
SHA512 921e01462dd394be547158ccb02a8eb3d71abe6f926677dc4c0c6bf887a1025b47df74d158812f3c160c84ddd9b18822a1e172ab5bd51f603fff159655b0d769
SSDEEP 49152:/WaTb4CDIrp2w3CY2myyZkDWdvJsv6tWKFdu9CMFoPAZO7nnWCLZgZ3YPmWjZ5RF:/Nc2w3H2myyZt1Jsv6tWKFdu9CpDg
TLSH
T1DCF59E85F3938172FBE3813E05A7E62B46357C558B125ADB639C3F0A69712F2393B106
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1218778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

DefWindowProcW SetWindowLongW GetWindowLongW TranslateMessage DispatchMessageW PeekMessageW PostMessageW GetQueueStatus MsgWaitForMultipleObjectsEx SetTimer KillTimer SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx PostThreadMessageW EnumWindows GetWindowThreadProcessId CharNextExA DestroyWindow CreateWindowExW UnregisterClassW RegisterClassW

setupapi

SetupDiGetDeviceRegistryPropertyA SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA SetupDiGetClassDevsA SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

kernel32

GetCPInfo GetConsoleCP SetUnhandledExceptionFilter CloseHandle WaitForSingleObject TerminateProcess OpenProcess GetTickCount CreateToolhelp32Snapshot Process32FirstW Process32NextW GetLastError CreateFileA ReadFile WriteFile GetOverlappedResult DeviceIoControl CancelIo ResetEvent CreateEventW FreeLibrary GetProcAddress LocalFree FormatMessageW LoadLibraryA OutputDebugStringW WaitForMultipleObjects SetHandleInformation LoadLibraryW CompareStringW GetUserDefaultLCID GetCommandLineW GetCurrentProcessId DuplicateHandle SetEvent Sleep GetCurrentProcess SwitchToThread CreateThread GetCurrentThread GetCurrentThreadId SetThreadPriority GetThreadPriority TerminateThread ResumeThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemInfo GetSystemTime GetLocalTime GetConsoleWindow GetStartupInfoW GetModuleFileNameW GetModuleHandleW VerSetConditionMask GetVersionExW VerifyVersionInfoW QueryPerformanceCounter QueryPerformanceFrequency GetSystemDirectoryW CreateFileW UnhandledExceptionFilter VirtualQuery CreateFileMappingW OpenFileMappingW MapViewOfFile UnmapViewOfFile FlushFileBuffers GetFileType GetLogicalDrives SetEndOfFile SetFilePointerEx MoveFileExW GetCurrentDirectoryW CreateDirectoryW DeleteFileW FindClose FindFirstFileW GetFileAttributesW GetFileInformationByHandle GetFullPathNameW GetLongPathNameW RemoveDirectoryW GetTempPathW SetErrorMode CopyFileW MoveFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle GetExitCodeProcess CreateProcessW MultiByteToWideChar WideCharToMultiByte GetDateFormatW GetTimeFormatW GetLocaleInfoW GetCurrencyFormatW GetUserDefaultUILanguage ReleaseSemaphore CreateSemaphoreW FindFirstFileExW FindNextFileW WriteConsoleW GetModuleHandleA GetTimeZoneInformation GetGeoInfoW GetUserGeoID CreateIoCompletionPort PostQueuedCompletionStatus ReleaseMutex CreateMutexW ReadConsoleW GetConsoleMode SetFileAttributesW SetStdHandle LoadLibraryExW ExitThread IsProcessorFeaturePresent IsDebuggerPresent HeapReAlloc GetCommandLineA SetLastError InitializeCriticalSectionAndSpinCount LCMapStringW IsValidLocale EnumSystemLocalesW HeapSize IsValidCodePage GetACP GetOEMCP GetProcessHeap GetModuleFileNameA SetEnvironmentVariableA GetFileAttributesExW PeekNamedPipe HeapFree HeapAlloc RtlUnwind RaiseException GetModuleHandleExW ExitProcess GetStringTypeW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection DecodePointer EncodePointer GetSystemTimeAsFileTime VirtualFree

shell32

ShellExecuteW CommandLineToArgvW SHGetSpecialFolderPathW

ole32

CoUninitialize CoCreateInstance CoInitialize CoTaskMemFree

advapi32

GetLengthSid FreeSid CopySid OpenProcessToken RegSetValueExW RegQueryValueExW RegQueryInfoKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegOpenKeyExW RegCloseKey GetTokenInformation

ws2_32

gethostbyname gethostbyaddr ntohl inet_addr getsockopt htonl select getpeername listen setsockopt WSAAsyncSelect WSASocketW WSASendTo WSASend WSARecvFrom WSAGetLastError __WSAFDIsSet getsockname bind WSARecv WSANtohs WSANtohl WSAIoctl WSAHtons WSAHtonl WSAConnect WSAAccept WSACleanup closesocket WSAStartup

Sharing

General

Malware Config

Signatures

File Explorer

600239dda521d5d02cf4dd863081e3cbab231f069a9665f578e5541e8c3d06ba

user32

setupapi

version

kernel32

shell32

ole32

advapi32

ws2_32

generic