64d25623eb7e966c95a73fe2dd3e496f[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
64d25623eb7e966c95a73fe2dd3e496f.exe
Size 636KB
Sample230820-nsa67agg8s
SHA256 537fa7a6cf198f1789c91ed778437bdb6b190330a4b619ab778504e081967b5d
MD5 64d25623eb7e966c95a73fe2dd3e496f
SHA1 5428353560aad285f7ce3f037fcfb077d3455d47
SHA512 747a487d60c9cd7181ca014f9dc9a74591abf49681d5eb65d0e4dc74b3383bf3124a265949dc912f91dd0e9e151a4e210df18eeaf3f97d300390b647f94fcde5
SSDEEP 6144:5Y7ssFDIRbkzJwz9OhcHQU8rATKbGHbI0/tGKP15Vuc7GHbI0/tGKP15Vuc1y6:U9ptcH5049Duca049Duc1y6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64d25623eb7e966c95a73fe2dd3e496f.exe

File Explorer

64d25623eb7e966c95a73fe2dd3e496f.exe

.exe 636KB

64d25623eb7e966c95a73fe2dd3e496f.exe

IMPHASH c4a784232bca53e5d6c372fa53bf8d4c
SHA256 537fa7a6cf198f1789c91ed778437bdb6b190330a4b619ab778504e081967b5d
MD5 64d25623eb7e966c95a73fe2dd3e496f
SHA1 5428353560aad285f7ce3f037fcfb077d3455d47
SHA512 747a487d60c9cd7181ca014f9dc9a74591abf49681d5eb65d0e4dc74b3383bf3124a265949dc912f91dd0e9e151a4e210df18eeaf3f97d300390b647f94fcde5
SSDEEP 6144:5Y7ssFDIRbkzJwz9OhcHQU8rATKbGHbI0/tGKP15Vuc7GHbI0/tGKP15Vuc1y6:U9ptcH5049Duca049Duc1y6
MD5 SHA1 SHA512 SSDEEP

windows x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

103060

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

TraceMessage GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW UnregisterTraceGuids RegCreateKeyExW RegSetValueExW RegCloseKey RegOpenKeyExW RegDeleteKeyExW EventRegister EventWrite EventUnregister RegGetValueW RegQueryValueExW

kernel32

GetCurrentProcessId GlobalDeleteAtom HeapAlloc GetProcessHeap GetSystemDirectoryW GetLocaleInfoW UnhandledExceptionFilter FormatMessageW GlobalAddAtomW GetTickCount64 GetTickCount ReleaseMutex RegisterApplicationRestart SetProcessShutdownParameters CloseHandle GetLastError CreateMutexW Sleep CompareStringW GetModuleHandleW IsProcessInJob GetCurrentProcess GetCurrentThreadId GetStartupInfoW SetUnhandledExceptionFilter QueryPerformanceCounter GetSystemTimeAsFileTime TerminateProcess HeapSetInformation

gdi32

SetStretchBltMode CombineRgn CreateRectRgn LineTo MoveToEx SetBkMode SetTextColor CreateSolidBrush StretchBlt GetStockObject CreateCompatibleBitmap GetObjectW CreateCompatibleDC DeleteDC SelectObject DeleteObject CreateBrushIndirect CreateBitmap

user32

GetAsyncKeyState FindWindowW PostMessageW CallNextHookEx LoadStringW SetForegroundWindow SetWindowsHookExW SystemParametersInfoW UnhookWindowsHookEx ShowSystemCursor GetSystemMetrics GetWindowLongW GetAncestor PtInRect EqualRect GetDesktopWindow GetWindowRect IsRectEmpty OffsetRect MonitorFromPoint GetMonitorInfoW CopyRect RemovePropW CloseDesktop GetUserObjectInformationW GetThreadDesktop SetWindowPlacement SendInput CheckMenuRadioItem InsertMenuItemW GetMessagePos GetKeyState WindowFromPhysicalPoint ShowWindow SetTimer KillTimer ClipCursor DestroyWindow IsWindow GetPhysicalCursorPos CreateWindowExW UnionRect RegisterClassExW UpdateWindow IsIconic MonitorFromRect DefWindowProcW GetGUIThreadInfo SetRect InflateRect IntersectRect GetWindowLongPtrW SetWindowLongPtrW LoadCursorW SetWindowRgn RegisterClassW FillRect CreatePopupMenu GetDoubleClickTime SendMessageTimeoutW RealGetWindowClassW GetClassNameW SetWinEventHook UnhookWinEvent SetDlgItemTextW SetCursor TrackPopupMenu PostQuitMessage ord2001 SetMagnificationDesktopMagnification SetMagnificationDesktopColorEffect SetLayeredWindowAttributes SetPropW GetParent GetDlgCtrlID MapWindowPoints EnableWindow MonitorFromWindow SetFocus CheckDlgButton SendDlgItemMessageW LoadImageW GetSysColor CreateDialogParamW GetDlgItem GetCursorPos GetWindowThreadProcessId UpdateLayeredWindow ReleaseDC GetDC IsWindowEnabled GetForegroundWindow GetCapture DispatchMessageW TranslateMessage IsDialogMessageW GetMessageW RegisterHotKey UnregisterHotKey SetRectEmpty GetWindow SetWindowPos AdjustWindowRectEx IsWindowVisible SendMessageW LoadIconW SetWindowLongW SetPhysicalCursorPos EnumDisplayMonitors InvalidateRect EndDeferWindowPos DeferWindowPos BeginDeferWindowPos AdjustWindowRect GetClientRect EndPaint BeginPaint

msvcrt

memset memcpy ceilf ?terminate@@YAXXZ __set_app_type _fmode _commode __setusermatherr _amsg_exit _initterm _wcmdln exit _cexit _exit _XcptFilter __C_specific_handler __wgetmainargs _vsnwprintf _purecall ??2@YAPEAX_K@Z wcstok ??3@YAXPEAX@Z _wcsicmp ceil

ole32

CoUninitialize CoInitialize CoCreateInstance

oleacc

AccessibleObjectFromEvent AccessibleObjectFromWindow

comctl32

ord17 ord345 InitCommonControlsEx

oleaut32

SysFreeString VariantInit VariantClear

gdiplus

GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStream GdipCloneImage GdipDisposeImage GdipFillPolygonI GdipFillRectangleI GdipDrawPolygonI GdipSetSmoothingMode GdipDeleteGraphics GdipCreateFromHDC GdipDeletePen GdipCreatePen1 GdipCreateSolidFill GdipDeleteBrush GdipAlloc GdipFree GdiplusShutdown GdiplusStartup

shell32

SHAppBarMessage ShellExecuteW

ntdll

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind WinSqmAddToStream WinSqmSetDWORD WinSqmIsOptedIn WinSqmIncrementDWORD

shlwapi

ord628 StrCmpW

dwmapi

DwmSetWindowAttribute DwmIsCompositionEnabled

dui70

InitProcessPriv InitThread UnInitProcessPriv UnInitThread ??0NativeHWNDHost@DirectUI@@QEAA@XZ ??1NativeHWNDHost@DirectUI@@UEAA@XZ ?Initialize@NativeHWNDHost@DirectUI@@QEAAJPEBG0PEAUHWND__@@PEAUHICON__@@HHHHHHPEAUHINSTANCE__@@I@Z ?EndDefer@Element@DirectUI@@QEAAXK@Z ?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z StrToID ?SetContentString@Element@DirectUI@@QEAAJPEBG@Z ?DestroyWindow@NativeHWNDHost@DirectUI@@QEAAXXZ ?WndProc@HWNDElement@DirectUI@@UEAA_JPEAUHWND__@@I_K_J@Z ?CanSetFocus@HWNDElement@DirectUI@@UEAA_NXZ ?OnCompositionChanged@HWNDElement@DirectUI@@UEAAXXZ ?OnWmThemeChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z ?OnGetDlgCode@HWNDElement@DirectUI@@UEAAXPEAUtagMSG@@PEA_J@Z ?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UEAAXPEAUKeyboardEvent@2@@Z ?OnThemeChanged@HWNDElement@DirectUI@@UEAAXPEAUThemeChangedEvent@2@@Z ?GetHWND@HWNDElement@DirectUI@@UEAAPEAUHWND__@@XZ ?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z ?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z ?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z ?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ ?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z ?DefaultAction@Element@DirectUI@@UEAAJXZ ?GetAccessibleImpl@HWNDElement@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z ?GetClassInfoW@HWNDElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ ?GetKeyFocused@Element@DirectUI@@UEAA_NXZ ?RemoveTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z ?ActivateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@K@Z ?UpdateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z ?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z ?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z ?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z ?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z ?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z ?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z ?SetKeyFocus@Element@DirectUI@@UEAAXXZ ?GetClassInfoPtr@CCPushButton@DirectUI@@SAPEAUIClassInfo@2@XZ ?GetKeyFocusedElement@HWNDElement@DirectUI@@SAPEAVElement@2@XZ ?GetLocation@Element@DirectUI@@QEAAPEBUtagPOINT@@PEAPEAVValue@2@@Z ?Click@Button@DirectUI@@SA?AVUID@@XZ ?SetEnabled@Element@DirectUI@@QEAAJ_N@Z ?SetLayoutPos@Element@DirectUI@@QEAAJH@Z ??0HWNDElement@DirectUI@@QEAA@XZ ?OnEvent@HWNDElement@DirectUI@@UEAAXPEAUEvent@2@@Z ?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ ?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z ?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z ?GetExtent@Element@DirectUI@@QEAAPEBUtagSIZE@@PEAPEAVValue@2@@Z ?OnGroupChanged@HWNDElement@DirectUI@@UEAAXH_N@Z ?Add@Element@DirectUI@@QEAAJPEAV12@@Z ?LoadFromResource@DUIFactory@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG1PEAVElement@2@PEAKPEAPEAV42@1@Z ?Destroy@Layout@DirectUI@@QEAAXXZ ?SetLayout@Element@DirectUI@@QEAAJPEAVLayout@2@@Z ?Create@FillLayout@DirectUI@@SAJPEAPEAVLayout@2@@Z ?DoubleBuffered@Element@DirectUI@@QEAAX_N@Z ?Host@NativeHWNDHost@DirectUI@@QEAAXPEAVElement@2@@Z ?SetAccessible@Element@DirectUI@@QEAAJ_N@Z ?SetActive@Element@DirectUI@@QEAAJH@Z ?Release@Value@DirectUI@@QEAAXXZ ?SetVisible@Element@DirectUI@@QEAAJ_N@Z ?Initialize@HWNDElement@DirectUI@@QEAAJPEAUHWND__@@_NIPEAVElement@2@PEAK@Z ?Register@HWNDElement@DirectUI@@SAJXZ ?Destroy@Element@DirectUI@@QEAAJ_N@Z ??1DUIFactory@DirectUI@@QEAA@XZ ??1HWNDElement@DirectUI@@UEAA@XZ ?IsRTLReading@Element@DirectUI@@UEAA_NXZ ?IsContentProtected@Element@DirectUI@@UEAA_NXZ ?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z ?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z ?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z ?OnPropertyChanged@HWNDElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z ?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z ?OnInput@HWNDElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z ?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z ?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z ?OnDestroy@HWNDElement@DirectUI@@UEAAXXZ ?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z ?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z ?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z ?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z ?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z ?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z ?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z

magnification

MagSetWindowTransform MagSetWindowSource MagUninitialize MagInitialize