e20740838b806011ff9146c184b25c93726fe72a94e333a3b985623419fb04e4

Sharing

Copy URL Twitter E-mail

General

Target
e20740838b806011ff9146c184b25c93726fe72a94e333a3b985623419fb04e4
Size 1.8MB
Sample231008-f75eksce44
SHA256 e20740838b806011ff9146c184b25c93726fe72a94e333a3b985623419fb04e4
MD5 2c6fccbab280b7fcfe361c5b08a7f197
SHA1 a093ae2c8e8c11bfcaa034523d9f16fb7cfb98f9
SHA512 d8a4f61ffd164666be10500fbdf05b290cadb47402544b32abb9dac720392dac762cac35ae445bb3b048859f3c521578db6acd2a58835a1bff41274620767142
SSDEEP 49152:9QVAsDAQz2KkP95lT9AgqyTXNj5UdR/uc7Dj1SH/rkY:SVrDAzKI7lT9Agqy5jidcOcH/I
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e20740838b806011ff9146c184b25c93726fe72a94e333a3b985623419fb04e4

File Explorer

e20740838b806011ff9146c184b25c93726fe72a94e333a3b985623419fb04e4

.exe 1.8MB

e20740838b806011ff9146c184b25c93726fe72a94e333a3b985623419fb04e4

IMPHASH 3a609c667a7257fdc4f383e40108e892
SHA256 e20740838b806011ff9146c184b25c93726fe72a94e333a3b985623419fb04e4
MD5 2c6fccbab280b7fcfe361c5b08a7f197
SHA1 a093ae2c8e8c11bfcaa034523d9f16fb7cfb98f9
SHA512 d8a4f61ffd164666be10500fbdf05b290cadb47402544b32abb9dac720392dac762cac35ae445bb3b048859f3c521578db6acd2a58835a1bff41274620767142
SSDEEP 49152:9QVAsDAQz2KkP95lT9AgqyTXNj5UdR/uc7Dj1SH/rkY:SVrDAzKI7lT9Agqy5jidcOcH/I
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1075501

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleOutputCP WriteConsoleA IsValidLocale WriteConsoleW GetLocaleInfoW EnumSystemLocalesA GetUserDefaultLCID GetConsoleMode GetConsoleCP CompareStringW GetTimeZoneInformation InitializeCriticalSectionAndSpinCount QueryPerformanceCounter VirtualFree HeapCreate SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStdHandle LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA IsValidCodePage GetACP GetFileType SetStdHandle GetSystemTimeAsFileTime HeapSize CreateThread ExitThread ExitProcess VirtualQuery GetSystemInfo VirtualAlloc HeapReAlloc RaiseException RtlUnwind HeapFree HeapAlloc GetStartupInfoA GetCommandLineA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess FindResourceExA VirtualProtect Sleep GetProfileIntA SearchPathA GetTempPathA GetTempFileNameA GetTickCount lstrcpyA GetCurrentDirectoryA GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime SetErrorMode GetModuleHandleW FileTimeToSystemTime GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GetModuleFileNameW GetCurrentProcessId WaitForSingleObject ResumeThread SetThreadPriority GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFree CopyFileA GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree lstrlenW MulDiv lstrlenA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA LoadLibraryA GetLastError SetLastError FreeLibrary lstrcmpW GetModuleHandleA GetProcAddress GetVersionExA GetThreadLocale InterlockedIncrement MultiByteToWideChar CloseHandle WriteProcessMemory ReadProcessMemory OpenProcess GetCurrentProcess GetPrivateProfileIntA WritePrivateProfileStringA FindResourceA LoadResource LockResource SizeofResource WideCharToMultiByte SetEnvironmentVariableA GetModuleFileNameA

user32

GetKeyboardLayout MapVirtualKeyA ToAsciiEx PostThreadMessageA LoadMenuA SetRectEmpty DeleteMenu WaitMessage WindowFromPoint LoadCursorA GetSysColorBrush ReleaseCapture SetCapture InvalidateRgn InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableA EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect DestroyMenu GetMenuItemInfoA InflateRect ShowOwnedPopups SetCursor GetMessageA TranslateMessage GetCursorPos ValidateRect GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog SetWindowContextHelpId MapDialogRect MessageBeep RedrawWindow IsZoomed PostQuitMessage CharUpperA GetMenuStringA InsertMenuA RemoveMenu IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA CheckDlgButton SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA CreateMenu SetPropA GetKeyboardState RemovePropA GetFocus SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints ScrollWindow TrackPopupMenu GetKeyState SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible UpdateWindow PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient GetDoubleClickTime GetIconInfo SubtractRect EqualRect DeferWindowPos EnableWindow LoadIconA GetSystemMenu SetCursorPos AppendMenuA GetScrollInfo SetScrollInfo SetWindowPlacement DefWindowProcA CallWindowProcA GetMenu SetWindowLongA SetWindowPos IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect IsWindow GetDlgItem GetWindowLongA GetParent OffsetRect PtInRect CopyRect GetAsyncKeyState DestroyAcceleratorTable LoadAcceleratorsA CreateAcceleratorTableA SetWindowRgn NotifyWinEvent CreatePopupMenu SetParent SetClassLongA IsMenu KillTimer BringWindowToTop GetDlgCtrlID GetWindow CharNextA GetWindowThreadProcessId FindWindowA DrawIcon GetClientRect GetSystemMetrics IsIconic SetTimer SendMessageA DestroyCursor GetPropA GetWindowRgn CopyIcon CharUpperBuffA GetUpdateRect FrameRect TranslateMDISysAccel DrawMenuBar DefMDIChildProcA DefFrameProcA IsClipboardFormatAvailable MapVirtualKeyExA GetKeyNameTextA IsCharLowerA GetMenuDefaultItem SetMenuDefaultItem UpdateLayeredWindow EnableScrollBar UnionRect LockWindowUpdate DrawIconEx DrawFocusRect DrawFrameControl DrawEdge UnpackDDElParam ReuseDDElParam InsertMenuItemA TranslateAcceleratorA UnregisterClassA GetNextDlgGroupItem EmptyClipboard CloseClipboard SetClipboardData LoadImageA DestroyIcon CopyImage OpenClipboard DrawStateA RegisterClipboardFormatA GetClassNameA EnumChildWindows

gdi32

DeleteObject SelectClipRgn CreateRectRgn GetViewportExtEx GetWindowExtEx GetPixel PtVisible RectVisible TextOutA Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush SelectPalette GetObjectType CreatePen CreateSolidBrush CreateHatchBrush CreateRectRgnIndirect GetRgnBox OffsetRgn CreateDIBitmap CreateCompatibleBitmap GetTextMetricsA EnumFontFamiliesA GetTextCharsetInfo SetTextAlign SetDIBColorTable PatBlt GetDIBits RealizePalette CombineRgn StretchBlt SetPixel CreateDIBSection SetRectRgn GetMapMode DPtoLP CreateEllipticRgn CreatePolygonRgn Polyline Ellipse Polygon Rectangle RoundRect CreatePalette GetPaletteEntries GetWindowOrgEx PtInRegion FillRgn FrameRgn GetBoundsRect GetViewportOrgEx LPtoDP ExtFloodFill SetPaletteEntries GetNearestPaletteIndex GetSystemPaletteEntries EnumFontFamiliesExA GetTextFaceA SetPixelV LineTo MoveToEx IntersectClipRect ExcludeClipRect SetMapMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC GetTextExtentPoint32A ExtTextOutA BitBlt CreateCompatibleDC CreateFontIndirectA CopyMetaFileA CreateBitmap SetBkColor SetTextColor GetClipBox GetDCOrgEx GetTextColor GetBkColor GetDeviceCaps CreateRoundRectRgn GetStockObject GetObjectA

msimg32

AlphaBlend TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

LookupPrivilegeValueA AdjustTokenPrivileges RegCloseKey RegQueryValueExA RegOpenKeyA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegEnumKeyExA OpenProcessToken RegQueryValueA RegEnumKeyA RegDeleteKeyA RegDeleteValueA

shell32

SHGetFileInfoA SHAppBarMessage DragQueryFileA DragFinish ShellExecuteA SHBrowseForFolderA SHGetPathFromIDListA

comctl32

InitCommonControlsEx ImageList_GetIconSize

shlwapi

PathIsUNCA PathFindExtensionA PathFindFileNameA PathStripToRootA PathRemoveFileSpecW

oledlg

ord8

ole32

CoInitializeEx CoUninitialize OleGetClipboard DoDragDrop OleFlushClipboard OleIsCurrentClipboard OleLockRunning OleInitialize CoFreeUnusedLibraries OleUninitialize CoCreateInstance CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CoTaskMemFree IsAccelerator OleTranslateAccelerator RevokeDragDrop CoLockObjectExternal RegisterDragDrop OleDestroyMenuDescriptor OleCreateMenuDescriptor CoRegisterMessageFilter CreateStreamOnHGlobal CoRevokeClassObject

oleaut32

VariantInit SysStringLen SysFreeString SysAllocStringByteLen VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy VariantChangeType VariantClear SysAllocStringLen OleCreateFontIndirect

gdiplus

GdipDrawImageI GdipGetImageGraphicsContext GdiplusShutdown GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipCloneImage

imm32

ImmReleaseContext ImmGetContext ImmGetOpenStatus

winmm

PlaySoundA