354c667ca543fb3c2315680894bf298818b677ccdf2e2a17163d7e084fd3e496

Sharing

Copy URL Twitter E-mail

General

Target
354c667ca543fb3c2315680894bf298818b677ccdf2e2a17163d7e084fd3e496
Size 6.8MB
Sample261107-nn7dtscx2l
SHA256 354c667ca543fb3c2315680894bf298818b677ccdf2e2a17163d7e084fd3e496
MD5 2221a5f9a4e3c43b780e9c69b4feb344
SHA1 8d81a45d32509f43e4d8cd1acaad7e38603b9557
SHA512 b043edbeea270457e558ed83a9bc9094377377b63f6d27f84290fb67a99aeba299c7bc2f52764d77f5eab7542178afc23d0422e08c83a2c9fd4d9618c5309031
SSDEEP 196608:0ynK2EMOLMduhIKYpF+eVirw0ZMoln2CKESdukCnk+rkbLDzSU2OTwl11YSwJs3j:0ynK2EMOLMduhIKYpF+eVirw0ZMoln2s
TLSH
T1B376D093B3A420F4D1ABD13DC55A9213F5B038945B719BCB16904E262F63BE6AF3D720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
354c667ca543fb3c2315680894bf298818b677ccdf2e2a17163d7e084fd3e496

File Explorer

354c667ca543fb3c2315680894bf298818b677ccdf2e2a17163d7e084fd3e496

.exe 6.8MB

354c667ca543fb3c2315680894bf298818b677ccdf2e2a17163d7e084fd3e496

IMPHASH b92ada96af34cee22066c5afa48da1cb
SHA256 354c667ca543fb3c2315680894bf298818b677ccdf2e2a17163d7e084fd3e496
MD5 2221a5f9a4e3c43b780e9c69b4feb344
SHA1 8d81a45d32509f43e4d8cd1acaad7e38603b9557
SHA512 b043edbeea270457e558ed83a9bc9094377377b63f6d27f84290fb67a99aeba299c7bc2f52764d77f5eab7542178afc23d0422e08c83a2c9fd4d9618c5309031
SSDEEP 196608:0ynK2EMOLMduhIKYpF+eVirw0ZMoln2CKESdukCnk+rkbLDzSU2OTwl11YSwJs3j:0ynK2EMOLMduhIKYpF+eVirw0ZMoln2s
TLSH
T1B376D093B3A420F4D1ABD13DC55A9213F5B038945B719BCB16904E262F63BE6AF3D720
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

444288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

lstrlenW WideCharToMultiByte SetEnvironmentVariableW FreeLibrary GetModuleFileNameW lstrcatW LoadLibraryW GetTickCount GetProcessHeap HeapReAlloc HeapAlloc SetLastError HeapFree GetUserDefaultUILanguage FindResourceExA SetEvent GetCurrentProcessId CloseHandle WaitForSingleObject CompareStringA GetLastError GetEnvironmentVariableA CompareStringW FormatMessageA lstrcpyW FindFirstFileW FindClose GetSystemTimeAsFileTime WriteFile SetFileTime CreateFileA ReadFile IsBadReadPtr CreateEventA GetModuleFileNameA SetFilePointer GetCurrentProcess GetWindowsDirectoryA GetVolumeInformationA GetFileAttributesExA GetFullPathNameA FindFirstFileExA FindNextFileA IsWow64Process FlushInstructionCache WriteConsoleW GetConsoleOutputCP lstrcmpiW FlushFileBuffers SetStdHandle GetLocaleInfoW GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID QueryPerformanceCounter GetCommandLineW GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetConsoleMode GetConsoleCP GetStartupInfoA GetFileType SetHandleCount IsValidCodePage GetOEMCP GetTimeZoneInformation RtlVirtualUnwind HeapCreate HeapSetInformation GetStdHandle FlsAlloc TlsSetValue GetCurrentThreadId FlsFree TlsFree FlsSetValue FlsGetValue GetCPInfo LCMapStringW LCMapStringA RtlUnwindEx RtlLookupFunctionEntry RtlPcToFileHeader GetStartupInfoW RtlCaptureContext IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess CreateThread ResumeThread ExitThread GetSystemInfo VirtualAlloc GetThreadLocale GetLocaleInfoA GetACP HeapSize HeapDestroy GetVersionExA RaiseException SetEnvironmentVariableA IsBadWritePtr VirtualProtect VirtualQuery lstrcmpiA lstrcpyA ExitProcess lstrcmpA LoadLibraryA GetProcAddress DeleteCriticalSection InitializeCriticalSection MultiByteToWideChar Sleep WaitForMultipleObjects lstrlenA GetModuleHandleA LeaveCriticalSection EnterCriticalSection GlobalFree GlobalUnlock GlobalLock GlobalAlloc LockResource LoadResource SizeofResource FindResourceA WriteConsoleA

user32

UnregisterClassA DestroyWindow EndDialog LoadStringA FillRect GetClientRect ReleaseDC SetClassLongA PtInRect SetCursor GetWindowRect LoadCursorA GetWindowLongA SetWindowLongA GetSystemMetrics GetCursorPos GetParent MapWindowPoints GetDesktopWindow SendMessageA SetWindowPos ReleaseCapture SetForegroundWindow PostMessageA BeginPaint GetMessageA TranslateMessage DrawIcon MessageBoxW GetDC DispatchMessageA LoadIconA CreateDialogIndirectParamA SetTimer EndPaint KillTimer CallWindowProcA GetWindowTextA SetCapture DrawEdge InvalidateRect GetClassNameA GetWindowLongPtrA PostQuitMessage TrackMouseEvent SetActiveWindow IsDialogMessageA OffsetRect LoadImageA SetWindowLongPtrA EnableWindow ScreenToClient GetActiveWindow GetWindowTextLengthA UpdateWindow SetWindowTextA AdjustWindowRectEx CreateWindowExA RegisterClassExA DefWindowProcA ShowWindow TranslateAcceleratorA SetFocus DrawFocusRect DrawTextA MessageBoxA wsprintfA

gdi32

CreateSolidBrush CreateCompatibleDC LineTo DeleteDC MoveToEx CreatePen CreateCompatibleBitmap BitBlt SelectObject GetDIBColorTable StretchBlt DeleteObject CreateDIBSection TextOutA GetTextExtentPointA SetBkMode SetTextColor CreateFontIndirectA SetDIBColorTable GetObjectA GetStockObject

advapi32

RegCreateKeyExA RegCloseKey RegSetValueExA RegQueryValueExA RegDeleteValueA

shell32

SHGetFolderPathA

ole32

CoSetProxyBlanket CoUninitialize CoInitializeEx CreateStreamOnHGlobal CoCreateInstance

oleaut32

SafeArrayGetUBound GetErrorInfo SafeArrayPutElement SafeArrayDestroy SafeArrayGetElement SafeArrayGetLBound VariantTimeToSystemTime SystemTimeToVariantTime SysFreeString SysStringLen SysAllocString SafeArrayCreateVector SafeArrayAccessData SafeArrayUnaccessData VariantInit VariantClear VariantChangeType SysAllocStringLen

gdiplus

GdiplusShutdown GdipDrawImageI GdipDisposeImage GdipAlloc GdiplusStartup GdipFree GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipDeleteGraphics GdipGetImagePalette GdipGetImageGraphicsContext GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCloneImage GdipCreateBitmapFromStream GdipGetImagePaletteSize

msimg32

AlphaBlend TransparentBlt

iphlpapi

GetAdaptersInfo

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

354c667ca543fb3c2315680894bf298818b677ccdf2e2a17163d7e084fd3e496

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

gdiplus

msimg32

iphlpapi

version

generic