488cc37920a11c42c5535de635b6bfe121729665e9a5a7a5b9114c33b9493d4a

Sharing

Copy URL Twitter E-mail

General

Target
488cc37920a11c42c5535de635b6bfe121729665e9a5a7a5b9114c33b9493d4a
Size 7.8MB
Sample230813-rtht7sda55
SHA256 488cc37920a11c42c5535de635b6bfe121729665e9a5a7a5b9114c33b9493d4a
MD5 4778cee989a91ab916338d8d49efc4b3
SHA1 73bce3f6ec4edbaf3a863c475d6e08a0239b71e9
SHA512 e385c3d750230e8620c0dd902d9025ed9dc9e8a5cf179c1064e903be2e939725251ba2b79ca72e12dec7a06e7061fee5b2bdba223f6636b915a65f40e91c8c86
SSDEEP 98304:xWsWpctwN8IxRs8gG/UsQEHxFPZwvIZAUerFooZwXjuPhdTMOgSGF0YJ:WNBR7cszHxTZrerFooZeIhd1GF0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
488cc37920a11c42c5535de635b6bfe121729665e9a5a7a5b9114c33b9493d4a

File Explorer

488cc37920a11c42c5535de635b6bfe121729665e9a5a7a5b9114c33b9493d4a

.exe 7.8MB

488cc37920a11c42c5535de635b6bfe121729665e9a5a7a5b9114c33b9493d4a

IMPHASH e9168a55a29f1bf8305103bb0c0bf6f7
SHA256 488cc37920a11c42c5535de635b6bfe121729665e9a5a7a5b9114c33b9493d4a
MD5 4778cee989a91ab916338d8d49efc4b3
SHA1 73bce3f6ec4edbaf3a863c475d6e08a0239b71e9
SHA512 e385c3d750230e8620c0dd902d9025ed9dc9e8a5cf179c1064e903be2e939725251ba2b79ca72e12dec7a06e7061fee5b2bdba223f6636b915a65f40e91c8c86
SSDEEP 98304:xWsWpctwN8IxRs8gG/UsQEHxFPZwvIZAUerFooZwXjuPhdTMOgSGF0YJ:WNBR7cszHxTZrerFooZeIhd1GF0
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

49183

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapAlloc GetTimeZoneInformation GetACP HeapSize HeapReAlloc SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetEnvironmentVariableA GetVersionExA GetCommandLineA HeapCreate VirtualFree VirtualAlloc IsBadWritePtr LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA GetStartupInfoA GetProfileStringA RaiseException TerminateProcess RtlUnwind SystemTimeToFileTime LocalFileTimeToFileTime GetFileSize GetShortPathNameA GetStringTypeExA GetVolumeInformationA FindFirstFileA FindClose DeleteFileA MoveFileA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle GetOEMCP GetCPInfo GetThreadLocale GetCurrentDirectoryA SizeofResource GetProcessVersion TlsGetValue LocalReAlloc TlsSetValue GlobalReAlloc GlobalHandle TlsAlloc LocalAlloc EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection GlobalFlags GetLastError GetDiskFreeSpaceA GetFileTime SetFileTime GetFullPathNameA GetTempFileNameA GetFileAttributesA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalFindAtomA lstrcpyA WritePrivateProfileStringA GetPrivateProfileStringA GetPrivateProfileIntA GlobalAddAtomA CloseHandle GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId GlobalFree LockResource FindResourceA LoadResource FormatMessageA LocalFree lstrcpynA GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedIncrement FileTimeToLocalFileTime FileTimeToSystemTime InterlockedDecrement GlobalLock GlobalUnlock MulDiv GetModuleHandleA SetLastError ExitProcess LoadLibraryA GetProcAddress GetTickCount HeapDestroy Sleep

user32

CopyAcceleratorTableA SetRect GetNextDlgGroupItem MessageBeep CharUpperA RegisterClipboardFormatA PostThreadMessageA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID CreateWindowExA GetClassLongA SetPropA GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow RegisterWindowMessageA OffsetRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect MapDialogRect GetWindow SetWindowContextHelpId SetFocus ShowWindow SetWindowPos MoveWindow SetWindowLongA GetDlgCtrlID GetWindowTextLengthA GetWindowTextA SetWindowTextA IsDialogMessageA SendDlgItemMessageA GetMenuCheckMarkDimensions GetMenuState CharNextA GetSysColorBrush CheckMenuItem EnableMenuItem GetFocus GetMessageA TranslateMessage DispatchMessageA GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA SetCursor ShowOwnedPopups PostMessageA PostQuitMessage GetNextDlgTabItem EndDialog GetActiveWindow SetActiveWindow IsWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem CopyRect InflateRect IntersectRect GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA SendMessageA MessageBoxA LoadBitmapA HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA IsWindowUnicode FillRect wsprintfA UnhookWindowsHookEx GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC ReleaseDC ClientToScreen ScreenToClient SetTimer GetDC DestroyIcon GetMenuStringA DeleteMenu InsertMenuA ModifyMenuA EnableWindow UpdateWindow LoadCursorA LoadStringA PtInRect GetClassNameA BringWindowToTop UnpackDDElParam ReuseDDElParam SetMenu LoadMenuA DestroyMenu GetDesktopWindow ReleaseCapture TranslateAcceleratorA LoadAcceleratorsA SetRectEmpty InvalidateRect LoadIconA MapWindowPoints GetSysColor AdjustWindowRectEx EqualRect DeferWindowPos GetClientRect BeginDeferWindowPos EndDeferWindowPos GetTopWindow IsChild GetCapture SetMenuItemBitmaps GetClassInfoA WinHelpA

gdi32

SetBkMode SetTextColor SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx GetClipBox IntersectClipRect GetStockObject GetDeviceCaps GetViewportExtEx GetWindowExtEx CreateSolidBrush PtVisible RectVisible TextOutA ExtTextOutA Escape PatBlt CreateFontIndirectA GetTextColor GetBkColor LPtoDP RestoreDC SaveDC CreateCompatibleDC SelectObject GetObjectA DPtoLP CreateBitmap CreateCompatibleBitmap GetMapMode SetMapMode BitBlt SetBkColor StretchBlt DeleteObject CreateDIBitmap GetTextExtentPointA DeleteDC

comdlg32

GetSaveFileNameA GetFileTitleA GetOpenFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegSetValueA RegCreateKeyA GetFileSecurityA SetFileSecurityA RegDeleteValueA RegSetValueExA RegQueryValueA RegOpenKeyExA RegCreateKeyExA RegDeleteKeyA RegOpenKeyA RegEnumKeyA RegCloseKey

shell32

ExtractIconA DragQueryFileA DragFinish SHGetFileInfoA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries OleUninitialize CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard OleInitialize

olepro32

ord253

oleaut32

SysFreeString SysAllocStringLen VariantClear VariantTimeToSystemTime VariantCopy VariantChangeType SysAllocString SysAllocStringByteLen SysStringLen

winmm

sndPlaySoundA