8f116aee53abca68ca7be71a7b5574c84f5df03d38fc8a524ce4d256ab380aa4

Sharing

Copy URL Twitter E-mail

General

Target
8f116aee53abca68ca7be71a7b5574c84f5df03d38fc8a524ce4d256ab380aa4
Size 636KB
Sample230923-c8q2ssdg59
SHA256 8f116aee53abca68ca7be71a7b5574c84f5df03d38fc8a524ce4d256ab380aa4
MD5 2d05cb7fb4726bb51c6059540f0e013e
SHA1 e7d75ad671c662ba956e54ccfff28465e851624d
SHA512 890999d65ab16445eb6743ad83802c14d3798da9485a973b237dc3c419683358e9c2609a3566594e53a60ae207561724c06c533c4d1fa2c42f9f9056e0e8b82b
SSDEEP 6144:JfIJs1RHFDIOhkzJwz9OhcHQU8rATKbGHbI0/tGKP15Vuc7GHbI0/tGKP15Vuc1h:dYmAtcH5049Duca049Duc1y6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f116aee53abca68ca7be71a7b5574c84f5df03d38fc8a524ce4d256ab380aa4

File Explorer

8f116aee53abca68ca7be71a7b5574c84f5df03d38fc8a524ce4d256ab380aa4

.exe 636KB

8f116aee53abca68ca7be71a7b5574c84f5df03d38fc8a524ce4d256ab380aa4

IMPHASH c4a784232bca53e5d6c372fa53bf8d4c
SHA256 8f116aee53abca68ca7be71a7b5574c84f5df03d38fc8a524ce4d256ab380aa4
MD5 2d05cb7fb4726bb51c6059540f0e013e
SHA1 e7d75ad671c662ba956e54ccfff28465e851624d
SHA512 890999d65ab16445eb6743ad83802c14d3798da9485a973b237dc3c419683358e9c2609a3566594e53a60ae207561724c06c533c4d1fa2c42f9f9056e0e8b82b
SSDEEP 6144:JfIJs1RHFDIOhkzJwz9OhcHQU8rATKbGHbI0/tGKP15Vuc7GHbI0/tGKP15Vuc1h:dYmAtcH5049Duca049Duc1y6
MD5 SHA1 SHA512 SSDEEP

windows x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

103060

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

TraceMessage GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW UnregisterTraceGuids RegCreateKeyExW RegSetValueExW RegCloseKey RegOpenKeyExW RegDeleteKeyExW EventRegister EventWrite EventUnregister RegGetValueW RegQueryValueExW

kernel32

GetCurrentProcessId GlobalDeleteAtom HeapAlloc GetProcessHeap GetSystemDirectoryW GetLocaleInfoW UnhandledExceptionFilter FormatMessageW GlobalAddAtomW GetTickCount64 GetTickCount ReleaseMutex RegisterApplicationRestart SetProcessShutdownParameters CloseHandle GetLastError CreateMutexW Sleep CompareStringW GetModuleHandleW IsProcessInJob GetCurrentProcess GetCurrentThreadId GetStartupInfoW SetUnhandledExceptionFilter QueryPerformanceCounter GetSystemTimeAsFileTime TerminateProcess HeapSetInformation

gdi32

SetStretchBltMode CombineRgn CreateRectRgn LineTo MoveToEx SetBkMode SetTextColor CreateSolidBrush StretchBlt GetStockObject CreateCompatibleBitmap GetObjectW CreateCompatibleDC DeleteDC SelectObject DeleteObject CreateBrushIndirect CreateBitmap

user32

GetAsyncKeyState FindWindowW PostMessageW CallNextHookEx LoadStringW SetForegroundWindow SetWindowsHookExW SystemParametersInfoW UnhookWindowsHookEx ShowSystemCursor GetSystemMetrics GetWindowLongW GetAncestor PtInRect EqualRect GetDesktopWindow GetWindowRect IsRectEmpty OffsetRect MonitorFromPoint GetMonitorInfoW CopyRect RemovePropW CloseDesktop GetUserObjectInformationW GetThreadDesktop SetWindowPlacement SendInput CheckMenuRadioItem InsertMenuItemW GetMessagePos GetKeyState WindowFromPhysicalPoint ShowWindow SetTimer KillTimer ClipCursor DestroyWindow IsWindow GetPhysicalCursorPos CreateWindowExW UnionRect RegisterClassExW UpdateWindow IsIconic MonitorFromRect DefWindowProcW GetGUIThreadInfo SetRect InflateRect IntersectRect GetWindowLongPtrW SetWindowLongPtrW LoadCursorW SetWindowRgn RegisterClassW FillRect CreatePopupMenu GetDoubleClickTime SendMessageTimeoutW RealGetWindowClassW GetClassNameW SetWinEventHook UnhookWinEvent SetDlgItemTextW SetCursor TrackPopupMenu PostQuitMessage ord2001 SetMagnificationDesktopMagnification SetMagnificationDesktopColorEffect SetLayeredWindowAttributes SetPropW GetParent GetDlgCtrlID MapWindowPoints EnableWindow MonitorFromWindow SetFocus CheckDlgButton SendDlgItemMessageW LoadImageW GetSysColor CreateDialogParamW GetDlgItem GetCursorPos GetWindowThreadProcessId UpdateLayeredWindow ReleaseDC GetDC IsWindowEnabled GetForegroundWindow GetCapture DispatchMessageW TranslateMessage IsDialogMessageW GetMessageW RegisterHotKey UnregisterHotKey SetRectEmpty GetWindow SetWindowPos AdjustWindowRectEx IsWindowVisible SendMessageW LoadIconW SetWindowLongW SetPhysicalCursorPos EnumDisplayMonitors InvalidateRect EndDeferWindowPos DeferWindowPos BeginDeferWindowPos AdjustWindowRect GetClientRect EndPaint BeginPaint

msvcrt

memset memcpy ceilf ?terminate@@YAXXZ __set_app_type _fmode _commode __setusermatherr _amsg_exit _initterm _wcmdln exit _cexit _exit _XcptFilter __C_specific_handler __wgetmainargs _vsnwprintf _purecall ??2@YAPEAX_K@Z wcstok ??3@YAXPEAX@Z _wcsicmp ceil

ole32

CoUninitialize CoInitialize CoCreateInstance

oleacc

AccessibleObjectFromEvent AccessibleObjectFromWindow

comctl32

ord17 ord345 InitCommonControlsEx

oleaut32

SysFreeString VariantInit VariantClear

gdiplus

GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStream GdipCloneImage GdipDisposeImage GdipFillPolygonI GdipFillRectangleI GdipDrawPolygonI GdipSetSmoothingMode GdipDeleteGraphics GdipCreateFromHDC GdipDeletePen GdipCreatePen1 GdipCreateSolidFill GdipDeleteBrush GdipAlloc GdipFree GdiplusShutdown GdiplusStartup

shell32

SHAppBarMessage ShellExecuteW

ntdll

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind WinSqmAddToStream WinSqmSetDWORD WinSqmIsOptedIn WinSqmIncrementDWORD

shlwapi

ord628 StrCmpW

dwmapi

DwmSetWindowAttribute DwmIsCompositionEnabled

dui70

InitProcessPriv InitThread UnInitProcessPriv UnInitThread ??0NativeHWNDHost@DirectUI@@QEAA@XZ ??1NativeHWNDHost@DirectUI@@UEAA@XZ ?Initialize@NativeHWNDHost@DirectUI@@QEAAJPEBG0PEAUHWND__@@PEAUHICON__@@HHHHHHPEAUHINSTANCE__@@I@Z ?EndDefer@Element@DirectUI@@QEAAXK@Z ?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z StrToID ?SetContentString@Element@DirectUI@@QEAAJPEBG@Z ?DestroyWindow@NativeHWNDHost@DirectUI@@QEAAXXZ ?WndProc@HWNDElement@DirectUI@@UEAA_JPEAUHWND__@@I_K_J@Z ?CanSetFocus@HWNDElement@DirectUI@@UEAA_NXZ ?OnCompositionChanged@HWNDElement@DirectUI@@UEAAXXZ ?OnWmThemeChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z ?OnGetDlgCode@HWNDElement@DirectUI@@UEAAXPEAUtagMSG@@PEA_J@Z ?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UEAAXPEAUKeyboardEvent@2@@Z ?OnThemeChanged@HWNDElement@DirectUI@@UEAAXPEAUThemeChangedEvent@2@@Z ?GetHWND@HWNDElement@DirectUI@@UEAAPEAUHWND__@@XZ ?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z ?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z ?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z ?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ ?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z ?DefaultAction@Element@DirectUI@@UEAAJXZ ?GetAccessibleImpl@HWNDElement@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z ?GetClassInfoW@HWNDElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ ?GetKeyFocused@Element@DirectUI@@UEAA_NXZ ?RemoveTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z ?ActivateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@K@Z ?UpdateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z ?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z ?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z ?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z ?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z ?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z ?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z ?SetKeyFocus@Element@DirectUI@@UEAAXXZ ?GetClassInfoPtr@CCPushButton@DirectUI@@SAPEAUIClassInfo@2@XZ ?GetKeyFocusedElement@HWNDElement@DirectUI@@SAPEAVElement@2@XZ ?GetLocation@Element@DirectUI@@QEAAPEBUtagPOINT@@PEAPEAVValue@2@@Z ?Click@Button@DirectUI@@SA?AVUID@@XZ ?SetEnabled@Element@DirectUI@@QEAAJ_N@Z ?SetLayoutPos@Element@DirectUI@@QEAAJH@Z ??0HWNDElement@DirectUI@@QEAA@XZ ?OnEvent@HWNDElement@DirectUI@@UEAAXPEAUEvent@2@@Z ?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ ?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z ?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z ?GetExtent@Element@DirectUI@@QEAAPEBUtagSIZE@@PEAPEAVValue@2@@Z ?OnGroupChanged@HWNDElement@DirectUI@@UEAAXH_N@Z ?Add@Element@DirectUI@@QEAAJPEAV12@@Z ?LoadFromResource@DUIFactory@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG1PEAVElement@2@PEAKPEAPEAV42@1@Z ?Destroy@Layout@DirectUI@@QEAAXXZ ?SetLayout@Element@DirectUI@@QEAAJPEAVLayout@2@@Z ?Create@FillLayout@DirectUI@@SAJPEAPEAVLayout@2@@Z ?DoubleBuffered@Element@DirectUI@@QEAAX_N@Z ?Host@NativeHWNDHost@DirectUI@@QEAAXPEAVElement@2@@Z ?SetAccessible@Element@DirectUI@@QEAAJ_N@Z ?SetActive@Element@DirectUI@@QEAAJH@Z ?Release@Value@DirectUI@@QEAAXXZ ?SetVisible@Element@DirectUI@@QEAAJ_N@Z ?Initialize@HWNDElement@DirectUI@@QEAAJPEAUHWND__@@_NIPEAVElement@2@PEAK@Z ?Register@HWNDElement@DirectUI@@SAJXZ ?Destroy@Element@DirectUI@@QEAAJ_N@Z ??1DUIFactory@DirectUI@@QEAA@XZ ??1HWNDElement@DirectUI@@UEAA@XZ ?IsRTLReading@Element@DirectUI@@UEAA_NXZ ?IsContentProtected@Element@DirectUI@@UEAA_NXZ ?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z ?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z ?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z ?OnPropertyChanged@HWNDElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z ?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z ?OnInput@HWNDElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z ?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z ?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z ?OnDestroy@HWNDElement@DirectUI@@UEAAXXZ ?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z ?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z ?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z ?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z ?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z ?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z ?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z

magnification

MagSetWindowTransform MagSetWindowSource MagUninitialize MagInitialize