b3ba5833e45f52f280c5f003cb715e5118acafb2ff6d44f8a179f2c134fa0930

Sharing

Copy URL Twitter E-mail

General

Target
b3ba5833e45f52f280c5f003cb715e5118acafb2ff6d44f8a179f2c134fa0930
Size 3.7MB
Sample230512-vdw9fadh35
SHA256 b3ba5833e45f52f280c5f003cb715e5118acafb2ff6d44f8a179f2c134fa0930
MD5 70bff699281c6683128c56abebe65a65
SHA1 8b6617a5e3b082f55ebdcf57222c48f57ecff016
SHA512 ad85c0f9c5c0b433797dd9f13d12d0594982eaa00f1ba75f26e05c27ad852fe2e254430e65a322dab59573ba523a19ff52c1604f3ca3d5694ce7570924888e7f
SSDEEP 98304:5BRHyVrNEYVOi+qpjASpxIKECsFLOAkGkzdnEVomFHKnPpa:URWY6OxIKECsFLOyomFHKnPp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3ba5833e45f52f280c5f003cb715e5118acafb2ff6d44f8a179f2c134fa0930

File Explorer

b3ba5833e45f52f280c5f003cb715e5118acafb2ff6d44f8a179f2c134fa0930

.exe 3.7MB

b3ba5833e45f52f280c5f003cb715e5118acafb2ff6d44f8a179f2c134fa0930

IMPHASH 642bbcc44ae3166c6f364e25a223501c
SHA256 b3ba5833e45f52f280c5f003cb715e5118acafb2ff6d44f8a179f2c134fa0930
MD5 70bff699281c6683128c56abebe65a65
SHA1 8b6617a5e3b082f55ebdcf57222c48f57ecff016
SHA512 ad85c0f9c5c0b433797dd9f13d12d0594982eaa00f1ba75f26e05c27ad852fe2e254430e65a322dab59573ba523a19ff52c1604f3ca3d5694ce7570924888e7f
SSDEEP 98304:5BRHyVrNEYVOi+qpjASpxIKECsFLOAkGkzdnEVomFHKnPpa:URWY6OxIKECsFLOyomFHKnPp
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1241346

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode FreeEnvironmentStringsW SetFilePointerEx OutputDebugStringW LCMapStringW WriteConsoleW SetEnvironmentVariableA GetEnvironmentStringsW QueryPerformanceCounter GetProcessHeap GetStdHandle GetFileType SetStdHandle GetSystemTimeAsFileTime HeapQueryInformation HeapSize ExitThread CreateThread HeapReAlloc RaiseException LeaveCriticalSection GetModuleHandleExW ExitProcess RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent VirtualAlloc HeapAlloc HeapFree GetCommandLineW FindResourceExW GetWindowsDirectoryW SearchPathW GetProfileIntW Sleep VirtualProtect GetTempPathW GetTempFileNameW GetFileTime GetFileAttributesExW FileTimeToLocalFileTime SetErrorMode lstrcmpiW DuplicateHandle UnlockFile SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FindFirstFileW FindClose GlobalGetAtomNameW VerifyVersionInfoW VerSetConditionMask GetThreadLocale GlobalFlags GetUserDefaultUILanguage TerminateProcess SetUnhandledExceptionFilter VirtualQuery UnhandledExceptionFilter GetSystemDefaultUILanguage GetLocaleInfoW CompareStringW InterlockedIncrement LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection InterlockedDecrement GlobalFindAtomW GetSystemDirectoryW DeleteCriticalSection DecodePointer EncodePointer GlobalAddAtomW ResumeThread SetThreadPriority CopyFileW FormatMessageW MulDiv LocalFree GlobalSize GetCurrentProcessId GlobalUnlock WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW LoadLibraryW LoadLibraryA GetProcAddress GetModuleHandleW GetModuleHandleA GetVersion SetLastError OutputDebugStringA lstrcpyW GlobalFree FreeResource lstrcmpW lstrcmpA GlobalDeleteAtom GlobalLock GlobalAlloc LoadLibraryExW GetModuleFileNameW FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread GetTickCount GetFileSize FileTimeToSystemTime SetFileTime WriteFile CreateDirectoryW GetFileAttributesW LocalFileTimeToFileTime GetCurrentDirectoryW SystemTimeToFileTime SetFilePointer InitializeCriticalSectionAndSpinCount WideCharToMultiByte WaitForSingleObject ReadFile CreateProcessW GetStartupInfoW CreatePipe GetCurrentProcess GetFileSizeEx MapViewOfFile GetSystemInfo CreateFileMappingW CloseHandle UnmapViewOfFile CreateFileW GetLastError MultiByteToWideChar DeleteFileW InterlockedExchange FindResourceW LoadResource LockResource SizeofResource EnterCriticalSection ReadConsoleW

user32

GetKeyboardLayout ToUnicodeEx RegisterClipboardFormatW ReuseDDElParam UnpackDDElParam InsertMenuItemW TranslateAcceleratorW LoadAcceleratorsW UnregisterClassW UpdateLayeredWindow GetUpdateRect SetClassLongW DestroyAcceleratorTable ModifyMenuW IsMenu SetMenuDefaultItem GetMenuDefaultItem CopyIcon GetIconInfo GetDoubleClickTime EnableScrollBar LockWindowUpdate CreatePopupMenu BringWindowToTop UnionRect SetCursorPos NotifyWinEvent GetAsyncKeyState CharUpperW IsZoomed TrackMouseEvent LoadImageW DestroyIcon EmptyClipboard SetClipboardData CloseClipboard OpenClipboard MonitorFromPoint SetParent EnumDisplayMonitors SetRectEmpty SetLayeredWindowAttributes MessageBeep GetNextDlgGroupItem IntersectRect SetRect InvalidateRgn CopyAcceleratorTableW CharNextW KillTimer SetTimer RealChildWindowFromPoint DeleteMenu CopyImage LoadCursorW WindowFromPoint ReleaseCapture SetCapture WaitMessage SystemParametersInfoW GetMenuItemInfoW DestroyMenu SendDlgItemMessageA SetWindowTextW CheckDlgButton SetDlgItemTextW ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo GetClassLongW MapVirtualKeyW EqualRect CopyRect AdjustWindowRectEx GetWindowTextLengthW GetWindowTextW RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow SetForegroundWindow GetForegroundWindow TrackPopupMenu SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement IsChild CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos GetClassNameW InvalidateRect UpdateWindow SetCursor ShowOwnedPopups ValidateRect GetKeyState PeekMessageW DispatchMessageW TranslateMessage GetMessageW LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW PtInRect GetCursorPos ScreenToClient ClientToScreen EndPaint BeginPaint ReleaseDC GetWindowDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW RemoveMenu InsertMenuW GetMenuItemCount GetMenuItemID GetMenuState GetMenuStringW GetLastActivePopup GetWindowThreadProcessId MessageBoxW GetSubMenu LoadMenuW GetWindowLongW GetWindowRgn DestroyCursor CreateMenu InvertRect HideCaret GetComboBoxInfo TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar MapVirtualKeyExW SetActiveWindow IsWindowEnabled IsCharLowerW PostThreadMessageW IsClipboardFormatAvailable FrameRect CharUpperBuffW SubtractRect GetKeyNameTextW GetTopWindow CreateAcceleratorTableW GetActiveWindow GetNextDlgTabItem EndDialog SetWindowLongW GetKeyboardState CreateDialogIndirectParamW DestroyWindow IsWindow DrawIconEx IsRectEmpty OffsetRect InflateRect FillRect DrawFocusRect GetSysColorBrush GetSysColor MapWindowPoints RedrawWindow SetWindowRgn DrawStateW GetFocus IsWindowVisible DrawFrameControl DrawEdge RegisterWindowMessageW MapDialogRect GetWindow GetParent SetWindowContextHelpId SetWindowPos PostQuitMessage PostMessageW GetDesktopWindow wsprintfW GetDC DrawIcon GetClientRect GetSystemMetrics IsIconic MoveWindow GetDlgItem GetWindowRect SendMessageW AppendMenuW GetSystemMenu LoadIconW EnableWindow IsDialogMessageW

gdi32

SetTextAlign MoveToEx TextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateFontIndirectW GetRgnBox GetMapMode SetRectRgn DPtoLP CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo RealizePalette SetPixel CreateRoundRectRgn Rectangle SetTextColor RoundRect CreatePalette GetPaletteEntries GetNearestPaletteIndex GetSystemPaletteEntries EnumFontFamiliesExW ExtFloodFill SetPaletteEntries FillRgn FrameRgn GetBoundsRect PtInRegion GetViewportOrgEx LPtoDP GetWindowOrgEx SetPixelV GetTextFaceW RectVisible PtVisible RestoreDC SetROP2 SetPolyFillMode GetLayout SetLayout SetMapMode SetBkMode SetBkColor SelectPalette ExtSelectClipRgn SelectClipRgn OffsetRgn DeleteObject LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetStockObject GetPixel GetObjectType GetClipBox ExcludeClipRect Escape CreatePatternBrush CreatePen CreateBitmap BitBlt GetDeviceCaps CreateDCW CopyMetaFileW GetTextMetricsW Polyline Polygon CreatePolygonRgn ExtTextOutW PatBlt GetTextExtentPoint32W GetTextColor GetBkColor Ellipse CreateSolidBrush CreateRectRgnIndirect CreateRectRgn CreateHatchBrush CreateEllipticRgn CombineRgn GetDIBColorTable StretchBlt CreateDIBSection GetObjectW CreateCompatibleDC SetDIBColorTable SelectObject DeleteDC SaveDC

msimg32

AlphaBlend TransparentBlt

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegEnumKeyExW RegEnumValueW RegQueryValueW RegEnumKeyW RegCloseKey RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW

shell32

DragFinish SHGetMalloc SHGetPathFromIDListW SHGetSpecialFolderLocation SHBrowseForFolderW SHGetDesktopFolder SHAppBarMessage ShellExecuteW DragQueryFileW SHGetFileInfoW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW PathFileExistsW PathFindFileNameW PathIsUNCW PathStripToRootW PathRemoveFileSpecW StrFormatKBSizeW

uxtheme

GetWindowTheme GetThemeSysColor IsThemeBackgroundPartiallyTransparent OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName DrawThemeParentBackground DrawThemeText IsAppThemed GetThemePartSize

ole32

OleFlushClipboard OleUninitialize OleInitialize CoFreeUnusedLibraries CreateStreamOnHGlobal CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject OleDuplicateData OleIsCurrentClipboard CoTaskMemFree CoTaskMemAlloc CoInitialize CoCreateInstance CLSIDFromProgID CLSIDFromString CoCreateGuid CoUninitialize IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor CoRegisterMessageFilter CoRevokeClassObject CoInitializeEx DoDragDrop OleGetClipboard OleLockRunning RevokeDragDrop RegisterDragDrop ReleaseStgMedium CoLockObjectExternal

oleaut32

SysAllocString VarBstrFromDate VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen OleCreateFontIndirect VariantChangeType VariantClear VariantInit SysAllocStringLen SysFreeString

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipCreateBitmapFromStream GdiplusStartup GdipCreateBitmapFromFile GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImagePaletteSize GdipGetImagePalette GdipBitmapLockBits GdipBitmapUnlockBits GdipCreateBitmapFromScan0 GdipCloneImage GdipAlloc GdipFree GdipDisposeImage GdipGetImageGraphicsContext GdipDeleteGraphics GdipDrawImageI GdiplusShutdown GdipDrawImageRectI

psapi

GetModuleFileNameExW

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

imm32

ImmReleaseContext ImmGetContext ImmGetOpenStatus

winmm

PlaySoundW