a8be152aaa74769e858feb404cf626063923b424070f002736181fe605779b3c

Sharing

Copy URL Twitter E-mail

General

Target
a8be152aaa74769e858feb404cf626063923b424070f002736181fe605779b3c
Size 1.0MB
Sample230712-bc4scace4s
SHA256 a8be152aaa74769e858feb404cf626063923b424070f002736181fe605779b3c
MD5 3f77e44c11a9969bfbcdd0c74fe8741e
SHA1 7da73a68ba2e2381f6a6b10a8dd29b3d3f3ee5d2
SHA512 d14e0d43dfa328a3c1e1e2648e0b87c7790d5b25a010ff39211bd5a7be271a8342a12728cf027207ca8a35e48ed1b2c7965a8a25a7281a2192ec1ecf94103ace
SSDEEP 24576:9LdgorRNAXPWHuMgN7sQeUWMOkyByxCmtYzQ6Y:B72kBg6+v6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8be152aaa74769e858feb404cf626063923b424070f002736181fe605779b3c

File Explorer

a8be152aaa74769e858feb404cf626063923b424070f002736181fe605779b3c

.dll 1.0MB

a8be152aaa74769e858feb404cf626063923b424070f002736181fe605779b3c

IMPHASH 3fe89fa8d80000c8c9aa487e9ab5b867
SHA256 a8be152aaa74769e858feb404cf626063923b424070f002736181fe605779b3c
MD5 3f77e44c11a9969bfbcdd0c74fe8741e
SHA1 7da73a68ba2e2381f6a6b10a8dd29b3d3f3ee5d2
SHA512 d14e0d43dfa328a3c1e1e2648e0b87c7790d5b25a010ff39211bd5a7be271a8342a12728cf027207ca8a35e48ed1b2c7965a8a25a7281a2192ec1ecf94103ace
SSDEEP 24576:9LdgorRNAXPWHuMgN7sQeUWMOkyByxCmtYzQ6Y:B72kBg6+v6
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

789280

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

waveOutPrepareHeader midiStreamClose midiOutReset midiStreamStop midiStreamOut midiOutPrepareHeader midiStreamProperty midiStreamOpen midiOutUnprepareHeader waveOutOpen waveOutGetNumDevs waveOutClose waveOutReset waveOutPause waveOutWrite midiStreamRestart waveOutUnprepareHeader

kernel32

FileTimeToSystemTime FileTimeToLocalFileTime FormatMessageA lstrcmpA GetCurrentThread SetThreadPriority SuspendThread CreateMutexA ReleaseMutex GlobalFlags SetErrorMode GetProcessVersion GetCPInfo GetOEMCP RtlUnwind RaiseException GetTimeZoneInformation GetSystemTime GetLocalTime TerminateProcess HeapSize GetACP LCMapStringA LCMapStringW HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetEnvironmentVariableW SetEnvironmentVariableA SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW UnhandledExceptionFilter IsBadReadPtr IsBadCodePtr CompareStringA CompareStringW SetStdHandle GetFileTime GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer GetCurrentProcess DuplicateHandle TlsGetValue LocalReAlloc TlsSetValue TlsFree GlobalHandle TlsAlloc LocalFree LocalAlloc MultiByteToWideChar WideCharToMultiByte InterlockedDecrement InterlockedIncrement GetVersion GlobalGetAtomNameA lstrcmpiA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcpynA SetLastError CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection SetCommTimeouts SetCommMask GetCommState SetCommState WriteFile ReadFile PurgeComm WaitCommEvent ClearCommError GetLastError WaitForMultipleObjects GetOverlappedResult GetCommModemStatus SetEvent GetProfileStringA GetPrivateProfileSectionNamesA WritePrivateProfileStringA GetPrivateProfileStringA GetComputerNameA EscapeCommFunction CreateEventA ResetEvent OutputDebugStringA ExpandEnvironmentStringsA GlobalAlloc GetTempPathA SetFileAttributesA GetFileAttributesA MoveFileA CopyFileA CreateDirectoryA SetVolumeLabelA GetDiskFreeSpaceA SetLocalTime GetCommandLineA CreateProcessA SetCurrentDirectoryA GetCurrentThreadId GetModuleHandleA GlobalSize GlobalLock GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA WinExec lstrcpyA GetCurrentDirectoryA GetLogicalDriveStringsA GetDriveTypeA GetVolumeInformationA GlobalUnlock GlobalReAlloc HeapFree HeapReAlloc ExitProcess HeapAlloc WaitForSingleObject GetProcessHeap FindResourceA LoadResource LockResource CreateThread DeleteFileA RemoveDirectoryA FindNextFileA GetModuleFileNameA Sleep MulDiv FindFirstFileA FindClose LoadLibraryA GetProcAddress FreeLibrary CreateFileA CloseHandle DeviceIoControl GetVersionExA GetFullPathNameA lstrlenW lstrlenA GetUserDefaultLCID GetTickCount ReadConsoleInputA SetConsoleMode GetConsoleMode ExitThread

user32

UnregisterClassA LoadStringA GetSysColorBrush EndDialog CreateDialogIndirectParamA GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC GetMenuCheckMarkDimensions GetMenuState SetMenuItemBitmaps CheckMenuItem GetNextDlgTabItem MoveWindow SetWindowTextA IsDialogMessageA ScrollWindowEx SendDlgItemMessageA MapWindowPoints AdjustWindowRectEx GetScrollPos RegisterClassA GetMenuItemCount GetMenuItemID GetDlgItem GetWindowTextLengthA GetWindowTextA DestroyWindow CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetLastActivePopup GetForegroundWindow RegisterWindowMessageA GetWindowPlacement ShowWindow IsWindowEnabled TranslateAcceleratorA CopyAcceleratorTableA PostQuitMessage IsZoomed GetSystemMenu DeleteMenu GetClassInfoA DefWindowProcA GetDesktopWindow LoadIconA CreateIconFromResourceEx CreateIconFromResource DrawIconEx GetMessageA SetRectEmpty RegisterClipboardFormatA CreatePopupMenu AppendMenuA ModifyMenuA CreateMenu CreateAcceleratorTableA SetCursor InvertRect ScrollDC TrackPopupMenu SetForegroundWindow ValidateRect LockWindowUpdate MessageBeep EmptyClipboard SetClipboardData OpenClipboard GetClipboardData CloseClipboard WaitForInputIdle SetCursorPos SetMenu PeekMessageA IsIconic SetActiveWindow DestroyMenu SetFocus SetWindowPos GetActiveWindow GetTopWindow GetWindow DestroyAcceleratorTable DestroyCursor SetWindowRgn ScreenToClient ChildWindowFromPointEx WinHelpA KillTimer SetTimer PostMessageA GetScrollRange SetScrollRange SetScrollPos SetParent IsWindowVisible GetWindowLongA SetWindowLongA TranslateMessage DispatchMessageA UpdateWindow GetDC ReleaseDC EnumDisplaySettingsA LoadImageA MessageBoxA LoadBitmapA GetKeyState DestroyIcon IsChild IsRectEmpty GetFocus IntersectRect EqualRect GetMenu GetSubMenu EnableMenuItem AdjustWindowRect LoadCursorA GetCapture ClientToScreen wsprintfA GetDlgCtrlID InvalidateRect GetClassNameA WindowFromPoint CharUpperA ReleaseCapture GetMessagePos PtInRect GetClientRect GetCursorPos SetCapture SystemParametersInfoA EnableWindow SetRect IsWindow RedrawWindow CopyRect FillRect GetSystemMetrics DrawFrameControl DrawEdge InflateRect OffsetRect DrawFocusRect GetWindowRect GetParent SendMessageA GetSysColor IsClipboardFormatAvailable

gdi32

StartDocA CreateRectRgnIndirect ExtCreateRegion SetPixel CreateDIBSection GetDIBits SelectPalette GetSystemPaletteEntries CreateRoundRectRgn CreateEllipticRgn PathToRegion EndPath BeginPath GetClipBox SetTextColor SaveDC RestoreDC SetBkMode SetPolyFillMode SetROP2 SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExcludeClipRect MoveToEx LineTo GetBkColor GetPixel ExtSelectClipRgn GetViewportExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextMetricsA GetROP2 GetStretchBltMode GetPolyFillMode StartPage EndPage CreateDCA DPtoLP CreateBrushIndirect CreateHatchBrush CreatePatternBrush Ellipse RoundRect FillRgn GetCurrentObject CombineRgn CreateRectRgn GetClipRgn CreatePolygonRgn SetPixelV LPtoDP Pie GetViewportOrgEx GetWindowOrgEx PatBlt CreateCompatibleDC BitBlt CreateSolidBrush GetStockObject GetObjectA GetDeviceCaps RealizePalette CreatePen GetTextExtentPoint32A CreateFontIndirectA CreatePalette Chord Arc Polygon EndDoc GetTextColor Rectangle SelectClipRgn CreateDIBitmap CreateCompatibleBitmap CreateBitmap SetBkColor SelectObject SetStretchBltMode StretchBlt DeleteDC DeleteObject GetWindowExtEx GetBkMode

comdlg32

PrintDlgA ChooseFontA GetOpenFileNameA GetSaveFileNameA GetFileTitleA ChooseColorA CommDlgExtendedError

winspool.drv

DeleteFormA DocumentPropertiesA AddFormA SetFormA ClosePrinter GetFormA EnumFormsA OpenPrinterA

advapi32

RegQueryValueA RegOpenKeyExA RegQueryValueExA RegSetValueExA RegCreateKeyA RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegCloseKey

shell32

Shell_NotifyIconA ShellExecuteA

comctl32

ord17 ImageList_Destroy ImageList_LoadImageA

ole32

OleInitialize CLSIDFromProgID CLSIDFromString CreateStreamOnHGlobal OleUninitialize OleRun CoCreateInstance

olepro32

ord252 ord253

oleaut32

SafeArrayPutElement SafeArrayCreate SafeArrayDestroy SafeArrayGetElement SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound VariantCopy UnRegisterTypeLi SysAllocString VariantCopyInd VariantInit VariantChangeType VariantClear GetActiveObject LoadTypeLi LHashValOfNameSys RegisterTypeLi VarDateFromStr

ws2_32

getpeername listen recv connect ioctlsocket recvfrom sendto setsockopt socket htonl bind htons WSAAsyncSelect closesocket send select gethostbyname inet_ntoa inet_addr accept gethostbyaddr gethostname WSACleanup WSAStartup