228c3baa3d5b6ca9aef2825389611da8249487d406b8cf5fc98bc1356153918d

Sharing

Copy URL Twitter E-mail

General

Target
228c3baa3d5b6ca9aef2825389611da8249487d406b8cf5fc98bc1356153918d
Size 5.8MB
Sample230906-aayb4scc31
SHA256 228c3baa3d5b6ca9aef2825389611da8249487d406b8cf5fc98bc1356153918d
MD5 c17a83ff11e57365df780cd5bb636d6c
SHA1 fa5fcb6fd675b9b88eb16b89095f8c922555ee56
SHA512 df4d71e7b72c42feee4e10a7ac210ff4bcf413410637d37bf615d57a4aaec76667aec44a9f65ff19334fc5c0b95a07ab229d4269447550bba0ca01ee30fa872d
SSDEEP 98304:E0Go8eJIp/1kB7g/OBbhTaAdycJup/1kB7g/OBbhTaAdyJp/1kB7g/OBbhTaAdy:E0P8eGp/qBrdzkp/qBrdWp/qBrd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
228c3baa3d5b6ca9aef2825389611da8249487d406b8cf5fc98bc1356153918d

File Explorer

228c3baa3d5b6ca9aef2825389611da8249487d406b8cf5fc98bc1356153918d

.exe 5.8MB

228c3baa3d5b6ca9aef2825389611da8249487d406b8cf5fc98bc1356153918d

IMPHASH a421010cae8d22bd5e7bdfb411658fe7
SHA256 228c3baa3d5b6ca9aef2825389611da8249487d406b8cf5fc98bc1356153918d
MD5 c17a83ff11e57365df780cd5bb636d6c
SHA1 fa5fcb6fd675b9b88eb16b89095f8c922555ee56
SHA512 df4d71e7b72c42feee4e10a7ac210ff4bcf413410637d37bf615d57a4aaec76667aec44a9f65ff19334fc5c0b95a07ab229d4269447550bba0ca01ee30fa872d
SSDEEP 98304:E0Go8eJIp/1kB7g/OBbhTaAdycJup/1kB7g/OBbhTaAdyJp/1kB7g/OBbhTaAdy:E0P8eGp/qBrdzkp/qBrdWp/qBrd
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

109144

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree SetUnhandledExceptionFilter VirtualAlloc IsBadWritePtr LCMapStringA LCMapStringW GetStringTypeA FreeEnvironmentStringsW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA FreeEnvironmentStringsA UnhandledExceptionFilter HeapSize GetProfileStringA InterlockedExchange HeapReAlloc TerminateProcess GetACP GetSystemTime GetTimeZoneInformation HeapAlloc HeapFree RaiseException ExitProcess GetCommandLineA RtlUnwind GetFileTime GetFileSize GetFileAttributesA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle GetThreadLocale WritePrivateProfileStringA GetOEMCP GetCPInfo GetProcessVersion TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc SizeofResource GlobalFlags lstrcpynA MulDiv SetLastError GetTickCount CloseHandle GlobalAlloc lstrcmpA GetCurrentThread FileTimeToLocalFileTime FileTimeToSystemTime FormatMessageA GetModuleFileNameA FreeLibrary GetVersion GetCurrentThreadId GlobalGetAtomNameA lstrcmpiA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcpyA GetModuleHandleA GlobalLock GlobalUnlock GlobalFree LockResource FindResourceA LoadResource lstrcatA LoadLibraryA GetProcAddress GetLocalTime Sleep WideCharToMultiByte GetStartupInfoA LocalFree InterlockedDecrement InterlockedIncrement lstrlenA MultiByteToWideChar GetStringTypeW GetLastError

user32

SetParent CharNextA PostThreadMessageA SetCapture SetRect WindowFromPoint KillTimer ReleaseCapture GetSysColorBrush LoadCursorA GetDesktopWindow GetClassNameA DestroyMenu InflateRect GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint ClientToScreen LoadStringA MapDialogRect SetWindowContextHelpId RegisterClipboardFormatA GetMessageA TranslateMessage ValidateRect SetCursor PostQuitMessage wvsprintfA InvalidateRect SetRectEmpty ReleaseDC GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps EnableMenuItem ShowWindow MoveWindow SetWindowTextA IsDialogMessageA PostMessageA UpdateWindow SendDlgItemMessageA MapWindowPoints GetSysColor PeekMessageA DispatchMessageA GetFocus SetFocus GetNextDlgGroupItem ScreenToClient EqualRect DeferWindowPos BeginDeferWindowPos CopyRect EndDeferWindowPos IsWindowVisible EnableWindow LoadIconA SendMessageA GetCursorPos HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA IsWindowUnicode GetTopWindow MessageBoxA IsChild GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID CharUpperA LockWindowUpdate GetDCEx CheckMenuItem MessageBeep GetWindowTextLengthA GetWindowTextA GetDlgCtrlID GetKeyState CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA PtInRect GetWindowRect GetSystemMetrics AppendMenuA GetSystemMenu GetClientRect GetDC SetTimer wsprintfA IsWindowEnabled GetDlgItem GetWindowLongA GetParent DestroyWindow CreateDialogIndirectParamA IsWindow SetActiveWindow GetActiveWindow EndDialog GetNextDlgTabItem GetWindowPlacement IsIconic SystemParametersInfoA IntersectRect OffsetRect RegisterWindowMessageA SetWindowPos SetWindowLongA GetWindow SetForegroundWindow GetForegroundWindow GetLastActivePopup GetMessagePos GetMessageTime DefWindowProcA AdjustWindowRectEx CopyAcceleratorTableA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetWindowDC

gdi32

GetWindowExtEx CreateSolidBrush CreatePatternBrush PtVisible RectVisible TextOutA ExtTextOutA Escape GetViewportExtEx SetRectRgn CombineRgn CreateFontIndirectA DPtoLP GetTextMetricsA GetTextColor GetBkColor LPtoDP BitBlt CreateRectRgn LineTo MoveToEx GetMapMode GetDeviceCaps ExcludeClipRect SelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetBkMode GetStockObject RestoreDC SaveDC StartDocA CreateFontA GetCharWidthA DeleteObject CreateCompatibleBitmap CreateCompatibleDC SelectObject StretchDIBits DeleteDC CreateRectRgnIndirect PatBlt CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox EndDoc GetTextExtentPointA CreateDIBitmap EndPage StartPage IntersectClipRect

comdlg32

PrintDlgA GetFileTitleA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegCreateKeyExA RegOpenKeyExA RegSetValueExA RegCloseKey

comctl32

ImageList_ReplaceIcon ord17 ImageList_Destroy ImageList_Create

oledlg

ord8

ole32

CoRevokeClassObject CoGetClassObject CoRegisterMessageFilter CoFreeUnusedLibraries OleInitialize CLSIDFromString CLSIDFromProgID CoCreateInstance OleRun CoTaskMemFree OleFlushClipboard OleIsCurrentClipboard StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoTaskMemAlloc OleUninitialize

olepro32

ord253

oleaut32

SysStringLen SysFreeString SysStringByteLen VariantClear VariantInit VariantCopy SysAllocString VariantChangeType SysAllocStringLen VariantTimeToSystemTime GetErrorInfo SysAllocStringByteLen

wininet

InternetSetFilePointer InternetReadFile InternetQueryDataAvailable FtpOpenFileA InternetConnectA InternetOpenA InternetCrackUrlA FtpGetFileSize InternetWriteFile InternetCloseHandle