7107c09c1676d2011c7898ccf64c0bf8e7bf79ccbfcdc313235a6af03005c68f

Sharing

Copy URL Twitter E-mail

General

Target
7107c09c1676d2011c7898ccf64c0bf8e7bf79ccbfcdc313235a6af03005c68f
Size 409KB
Sample261102-s2kt7sfe55
SHA256 7107c09c1676d2011c7898ccf64c0bf8e7bf79ccbfcdc313235a6af03005c68f
MD5 8387f8ee438affdff330eb6d0890a28c
SHA1 655a1fe24488acd5ef53fb261f50a7f3531f47da
SHA512 c72212e6c4509b7c4d8a5827ec715d589d142cf56674e8b7772743656c58c9309c4c24aaa7d3ea9c030a0a5aa3bbb520356a149e083755dee890b450f91309d0
SSDEEP 12288:WjJlzY9krKA+OeO+OeNhBBhhBBV0r0Tv43k:WjJlzqAL+v4U
TLSH
T108944A61F617E135DC8D04F42E3C7A8F2059E9E82BF44AF3FBDD596E98611C20634A86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7107c09c1676d2011c7898ccf64c0bf8e7bf79ccbfcdc313235a6af03005c68f

File Explorer

7107c09c1676d2011c7898ccf64c0bf8e7bf79ccbfcdc313235a6af03005c68f

.dll 409KB

7107c09c1676d2011c7898ccf64c0bf8e7bf79ccbfcdc313235a6af03005c68f

IMPHASH 76db54dbb6fa854be29fdf63912d47ee
SHA256 7107c09c1676d2011c7898ccf64c0bf8e7bf79ccbfcdc313235a6af03005c68f
MD5 8387f8ee438affdff330eb6d0890a28c
SHA1 655a1fe24488acd5ef53fb261f50a7f3531f47da
SHA512 c72212e6c4509b7c4d8a5827ec715d589d142cf56674e8b7772743656c58c9309c4c24aaa7d3ea9c030a0a5aa3bbb520356a149e083755dee890b450f91309d0
SSDEEP 12288:WjJlzY9krKA+OeO+OeNhBBhhBBV0r0Tv43k:WjJlzqAL+v4U
TLSH
T108944A61F617E135DC8D04F42E3C7A8F2059E9E82BF44AF3FBDD596E98611C20634A86
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

263163

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle RemoveDirectoryW RaiseException GetLastError InitializeCriticalSectionEx DeleteCriticalSection LoadResource LockResource SizeofResource FindResourceW FindResourceExW HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap DeleteFileW SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW GetProcAddress InitializeSListHead IsDebuggerPresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime FindClose GetModuleFileNameW FindFirstFileW FindNextFileW UnhandledExceptionFilter CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle GetModuleHandleA GetProcAddress CloseHandle

advapi32

CryptReleaseContext RegQueryValueExW RegCloseKey CryptGenRandom RegSetValueExW RegCreateKeyExW CryptAcquireContextA RegOpenKeyExW RegCloseKey

comdlg32

GetOpenFileNameW GetSaveFileNameW GetOpenFileNameW

gdi32

GetObjectW CreateFontIndirectW GetStockObject GetObjectW

kernelbase

WideCharToMultiByte QueryPerformanceCounter OutputDebugStringW

msimg32

GradientFill GradientFill

msvcp140

?set_new_handler@std@@YAP6AXXZP6AXXZ@Z ?uncaught_exception@std@@YA_NXZ ?_Xlength_error@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z

shlwapi

PathRemoveFileSpecW PathRemoveFileSpecW

user32

GetWindowRect GetParent GetClientRect MoveWindow GetParent

vcruntime140

wcsstr __CxxFrameHandler3 __std_terminate __std_exception_copy __std_exception_destroy __std_type_info_compare __std_type_info_name _purecall __std_type_info_destroy_list _except_handler4_common memset _CxxThrowException memmove memcpy wcsstr

ucrtbase

_aligned_malloc _aligned_free malloc free _callnewh _libm_sse2_pow_precise _libm_sse2_sqrt_precise _except1 _libm_sse2_log_precise _mbsinc _mbsupr_s _mbscmp _invalid_parameter_noinfo _errno _invalid_parameter_noinfo_noreturn _initterm_e _initterm terminate _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _cexit __stdio_common_vswprintf_s strnlen wcscpy_s tolower toupper isalpha strncmp _wcslwr_s iswdigit wcscat_s _time64 __stdio_common_vswprintf_s strnlen free _mbsinc _time64 _except1

Sharing

General

Malware Config

Signatures

File Explorer

7107c09c1676d2011c7898ccf64c0bf8e7bf79ccbfcdc313235a6af03005c68f

kernel32

advapi32

comdlg32

gdi32

kernelbase

msimg32

msvcp140

shlwapi

user32

vcruntime140

ucrtbase

generic