c8138df0c5685172086a1c218759a1b1885e6145c0e31b77c510e30bc38d2549

Sharing

Copy URL Twitter E-mail

General

Target
c8138df0c5685172086a1c218759a1b1885e6145c0e31b77c510e30bc38d2549
Size 1.2MB
Sample230829-26872abe9w
SHA256 c8138df0c5685172086a1c218759a1b1885e6145c0e31b77c510e30bc38d2549
MD5 7c51dc5d71be90a5c87cdc71bc724291
SHA1 69c20adb256634e021b18870f16b4823051468f6
SHA512 7caa9c3beb2adffcc9cc4911ead787c3cb21b1b5909d03866cc64a24c3d6ff5df7a91cd5e1f9f4abd7becf23ffda5fd7fec3e800bde0815499cee15fb1428b4f
SSDEEP 24576:9kF4MQb/sZnXRb7cFsC2nwHCcUzhzxRvL:9Bsb7cF8uCcGljL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8138df0c5685172086a1c218759a1b1885e6145c0e31b77c510e30bc38d2549

File Explorer

c8138df0c5685172086a1c218759a1b1885e6145c0e31b77c510e30bc38d2549

.exe 1.2MB

c8138df0c5685172086a1c218759a1b1885e6145c0e31b77c510e30bc38d2549

IMPHASH 06162d70da6722f2db2ef5121cd1d203
SHA256 c8138df0c5685172086a1c218759a1b1885e6145c0e31b77c510e30bc38d2549
MD5 7c51dc5d71be90a5c87cdc71bc724291
SHA1 69c20adb256634e021b18870f16b4823051468f6
SHA512 7caa9c3beb2adffcc9cc4911ead787c3cb21b1b5909d03866cc64a24c3d6ff5df7a91cd5e1f9f4abd7becf23ffda5fd7fec3e800bde0815499cee15fb1428b4f
SSDEEP 24576:9kF4MQb/sZnXRb7cFsC2nwHCcUzhzxRvL:9Bsb7cF8uCcGljL
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

640366

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

rasapi32

RasHangUpA RasGetConnectStatusA

winmm

midiStreamRestart midiStreamClose midiOutReset midiStreamStop midiStreamOut waveOutRestart waveOutUnprepareHeader waveOutPrepareHeader waveOutWrite waveOutPause waveOutReset midiOutPrepareHeader midiStreamProperty midiStreamOpen midiOutUnprepareHeader waveOutOpen waveOutClose waveOutGetNumDevs

ws2_32

WSACleanup WSAStartup gethostbyname inet_ntoa inet_addr gethostname select send closesocket WSAAsyncSelect htons socket setsockopt recvfrom ioctlsocket connect ntohl WSASetLastError accept getpeername recv

kernel32

CreateSemaphoreA FileTimeToSystemTime GetTimeZoneInformation SetLastError Process32Next Process32First CreateToolhelp32Snapshot SetFilePointer GetFileSize GetCurrentProcess TerminateProcess OpenProcess GetWindowsDirectoryA GetSystemDirectoryA GetVersion TerminateThread CreateMutexA ReleaseMutex SuspendThread ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA InterlockedExchange IsBadCodePtr IsBadReadPtr CompareStringA GetStringTypeW GetStringTypeA SetUnhandledExceptionFilter IsBadWritePtr VirtualAlloc LCMapStringW LCMapStringA SetEnvironmentVariableA VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter GetFileType SetStdHandle GetACP HeapSize RaiseException GetLocalTime GetSystemTime RtlUnwind GetStartupInfoA GetOEMCP GetCPInfo GetProcessVersion SetErrorMode GlobalFlags GetCurrentThread GetFileTime TlsGetValue LocalReAlloc TlsSetValue TlsFree GlobalHandle TlsAlloc LocalAlloc lstrcmpA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpiA SetEndOfFile UnlockFile LockFile FlushFileBuffers DuplicateHandle lstrcpynA FileTimeToLocalFileTime LocalFree InterlockedDecrement InterlockedIncrement WriteFile WaitForMultipleObjects CreateFileA SetEvent FindResourceA CloseHandle WaitForSingleObject GetTickCount GetCommandLineA MulDiv GetProcAddress GetModuleHandleA GetVolumeInformationA SetCurrentDirectoryA GetCurrentDirectoryA DeleteFileA GetFileAttributesA FindClose FindFirstFileA GetTempPathA LoadResource LockResource ReadFile lstrlenW RemoveDirectoryA GetModuleFileNameA WideCharToMultiByte MultiByteToWideChar GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA lstrlenA WinExec lstrcpyA FindNextFileA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc GetUserDefaultLCID GetFullPathNameA FreeLibrary LoadLibraryA GetLastError GetVersionExA WritePrivateProfileStringA CreateThread CreateEventA Sleep GlobalAlloc GlobalLock GlobalUnlock CompareStringW

user32

wsprintfA CloseClipboard GetClipboardData OpenClipboard GetWindowRect SetClipboardData EmptyClipboard GetSysColorBrush GetForegroundWindow GetWindowTextA GetDlgItem FindWindowA GetWindowThreadProcessId GetClassNameA GetDesktopWindow SetWindowTextA LoadIconA TranslateMessage DrawFrameControl DrawEdge DrawFocusRect WindowFromPoint GetMessageA DispatchMessageA SetRectEmpty RegisterClipboardFormatA CreateIconFromResourceEx CreateIconFromResource DrawIconEx CreatePopupMenu AppendMenuA ModifyMenuA LoadStringA GetMenuCheckMarkDimensions GetMenuState SetMenuItemBitmaps CheckMenuItem MoveWindow IsDialogMessageA ScrollWindowEx SendDlgItemMessageA MapWindowPoints AdjustWindowRectEx GetScrollPos RegisterClassA GetMenuItemCount GetMenuItemID CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetLastActivePopup RegisterWindowMessageA GetWindowPlacement GetNextDlgTabItem CreateMenu CreateAcceleratorTableA GetDlgCtrlID GetSubMenu EnableMenuItem ClientToScreen EnumDisplaySettingsA LoadImageA SystemParametersInfoA ShowWindow IsWindowEnabled TranslateAcceleratorA GetKeyState CopyAcceleratorTableA PostQuitMessage IsZoomed GetClassInfoA DefWindowProcA GetSystemMenu DeleteMenu GetMenu SetMenu PeekMessageA IsIconic SetFocus GetActiveWindow GetWindow DestroyAcceleratorTable SetWindowRgn GetMessagePos ScreenToClient ChildWindowFromPointEx CopyRect LoadBitmapA WinHelpA KillTimer SetTimer ReleaseCapture GetCapture SetCapture GetScrollRange SetScrollRange SetScrollPos SetRect InflateRect IntersectRect DestroyIcon PtInRect OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA GetSysColor SetActiveWindow SetCursorPos LoadCursorA SetCursor GetDC FillRect IsRectEmpty ReleaseDC IsChild DestroyMenu SetForegroundWindow UnregisterClassA EqualRect UpdateWindow ValidateRect InvalidateRect GetClientRect GetFocus GetParent GetTopWindow PostMessageA IsWindow SetParent DestroyCursor SendMessageA SetWindowPos MessageBoxA GetCursorPos GetSystemMetrics GetWindowTextLengthA CharUpperA GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA DestroyWindow CreateDialogIndirectParamA EndDialog

gdi32

GetViewportExtEx ExtSelectClipRgn LineTo MoveToEx ExcludeClipRect GetClipBox ScaleWindowExtEx SetWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx PtVisible SetBkColor CreateRectRgnIndirect SetStretchBltMode GetClipRgn CreatePolygonRgn SelectClipRgn DeleteObject CreateDIBitmap GetSystemPaletteEntries CreatePalette StretchBlt SelectPalette RealizePalette GetDIBits GetWindowExtEx GetViewportOrgEx GetWindowOrgEx BeginPath EndPath PathToRegion CreateEllipticRgn CreateRoundRectRgn GetTextColor GetBkMode GetBkColor GetROP2 GetStretchBltMode GetPolyFillMode CreateCompatibleBitmap CreateDCA CreateBitmap SelectObject CreatePen PatBlt CombineRgn CreateRectRgn FillRgn CreateSolidBrush CreateFontIndirectA GetStockObject GetObjectA EndPage EndDoc DeleteDC StartDocA StartPage BitBlt CreateCompatibleDC Ellipse Rectangle LPtoDP DPtoLP GetCurrentObject RoundRect GetTextExtentPoint32A GetDeviceCaps RectVisible TextOutA ExtTextOutA Escape GetTextMetricsA SaveDC RestoreDC SetBkMode SetPolyFillMode SetROP2 SetTextColor SetMapMode

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueA RegSetValueExA RegOpenKeyExA RegCloseKey RegCreateKeyExA

shell32

ShellExecuteA SHGetSpecialFolderPathA Shell_NotifyIconA

ole32

OleRun CoCreateInstance CLSIDFromString OleUninitialize OleInitialize CLSIDFromProgID

oleaut32

SafeArrayAccessData SafeArrayGetElement VariantCopyInd VariantInit SysAllocString SafeArrayDestroy SafeArrayCreate SafeArrayPutElement RegisterTypeLi LHashValOfNameSys LoadTypeLi SafeArrayUnaccessData UnRegisterTypeLi SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound VariantChangeType VariantClear VariantCopy

comctl32

ImageList_Destroy ord17

wininet

InternetCloseHandle

comdlg32

ChooseColorA GetFileTitleA GetSaveFileNameA GetOpenFileNameA