b2a79ac9a4cf5475a9e3d82285c45be48a951fd12c393a482cda9ee68c46af1c

Sharing

Copy URL Twitter E-mail

General

Target
b2a79ac9a4cf5475a9e3d82285c45be48a951fd12c393a482cda9ee68c46af1c
Size 75KB
Sample261107-v7cf5azyb1
SHA256 b2a79ac9a4cf5475a9e3d82285c45be48a951fd12c393a482cda9ee68c46af1c
MD5 c48fbe9467839d884adb5d95a526cdef
SHA1 acda7fb780076a6781b78a79618b446a3cd5e2cd
SHA512 b880754ed8d5a1883c9b29133ed0875411d824988d3b4729f0c10f72ed2cb22a0ce9608e2263702026bb3882ad0c202d76c51f0e2957c71aec25b6e9538a09cf
SSDEEP 1536:yrrAY3++QQQQQQQ3vUfCYhML3+zePfR7gi0VDhx:y73TQQQQQQQ/UnML3+FdV
TLSH
T1AA734B46EEC3ED3FEC20577A5CBB82E9053CFA184921970BF748925E97A4640EEC6345
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2a79ac9a4cf5475a9e3d82285c45be48a951fd12c393a482cda9ee68c46af1c

File Explorer

b2a79ac9a4cf5475a9e3d82285c45be48a951fd12c393a482cda9ee68c46af1c

.exe 75KB

b2a79ac9a4cf5475a9e3d82285c45be48a951fd12c393a482cda9ee68c46af1c

IMPHASH 2668eee9879741d8475643c8279b3090
SHA256 b2a79ac9a4cf5475a9e3d82285c45be48a951fd12c393a482cda9ee68c46af1c
MD5 c48fbe9467839d884adb5d95a526cdef
SHA1 acda7fb780076a6781b78a79618b446a3cd5e2cd
SHA512 b880754ed8d5a1883c9b29133ed0875411d824988d3b4729f0c10f72ed2cb22a0ce9608e2263702026bb3882ad0c202d76c51f0e2957c71aec25b6e9538a09cf
SSDEEP 1536:yrrAY3++QQQQQQQ3vUfCYhML3+zePfR7gi0VDhx:y73TQQQQQQQ/UnML3+FdV
TLSH
T1AA734B46EEC3ED3FEC20577A5CBB82E9053CFA184921970BF748925E97A4640EEC6345
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9765

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

glu32

gluPerspective

opengl32

glCallLists glClear glClearColor glClearDepth glColor3f glDeleteLists glDepthFunc glEnable glGenLists glListBase glLoadIdentity glMatrixMode glPopAttrib glPushAttrib glRotatef glShadeModel glTranslatef glViewport wglCreateContext wglDeleteContext wglMakeCurrent wglUseFontOutlinesW

advapi32

RegCloseKey RegCreateKeyExW RegQueryValueExW RegSetValueExW

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetStartupInfoW GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryW QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcrt

__dllonexit __lconv_init __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _fmode _fpreset _initterm _iob _lock _onexit _unlock _wcmdln abort calloc cos exit fprintf free fwrite malloc memmove signal sin strncmp vfprintf wcslen

gdi32

ChoosePixelFormat CreateFontW GetStockObject SelectObject SetPixelFormat SwapBuffers

user32

ChangeDisplaySettingsW CreateWindowExW DefWindowProcW DialogBoxParamW DispatchMessageW EndDialog GetClientRect GetCursorPos GetDC GetDlgItemTextW GetForegroundWindow GetMessageW GetSystemMetrics IsWindow LoadIconW MessageBoxW PostMessageW PostQuitMessage RegisterClassW ReleaseDC SetCursor SetDlgItemTextW ShowWindow TranslateMessage

Name

.text

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

628B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b2a79ac9a4cf5475a9e3d82285c45be48a951fd12c393a482cda9ee68c46af1c

glu32

opengl32

advapi32

kernel32

msvcrt

gdi32

user32

generic