a2f24d09406a587ae2bed026ae78fb29c27967853f726a0e70bc08f908b1440e

Sharing

Copy URL Twitter E-mail

General

Target
a2f24d09406a587ae2bed026ae78fb29c27967853f726a0e70bc08f908b1440e
Size 1.8MB
Sample231027-2jv2wscc56
SHA256 a2f24d09406a587ae2bed026ae78fb29c27967853f726a0e70bc08f908b1440e
MD5 dfbe7cd0e77ee8e58786a0b62e834f6d
SHA1 c17115400ddd6f53bb3ddadeb380dc7541babc16
SHA512 e888a15214a0677ed2e273d93bba299cb57d35c89c005d69773053ada7da930f462757c347dcab1cf747b9c3fc7f86097a0800284af31fbaf82bff46f1e0e560
SSDEEP 24576:LvTj2z3fPlTxoPqNqFUKmK+i8ZtKR3nR9GIq2K00fYI41b:rmP9Td8FUKmK+i8ZtQRpOa1b
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2f24d09406a587ae2bed026ae78fb29c27967853f726a0e70bc08f908b1440e

File Explorer

a2f24d09406a587ae2bed026ae78fb29c27967853f726a0e70bc08f908b1440e

.exe 1.8MB

a2f24d09406a587ae2bed026ae78fb29c27967853f726a0e70bc08f908b1440e

IMPHASH 20d77db67071c7987ae741aa3b6835a6
SHA256 a2f24d09406a587ae2bed026ae78fb29c27967853f726a0e70bc08f908b1440e
MD5 dfbe7cd0e77ee8e58786a0b62e834f6d
SHA1 c17115400ddd6f53bb3ddadeb380dc7541babc16
SHA512 e888a15214a0677ed2e273d93bba299cb57d35c89c005d69773053ada7da930f462757c347dcab1cf747b9c3fc7f86097a0800284af31fbaf82bff46f1e0e560
SSDEEP 24576:LvTj2z3fPlTxoPqNqFUKmK+i8ZtKR3nR9GIq2K00fYI41b:rmP9Td8FUKmK+i8ZtQRpOa1b
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

426096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

urlmon

UrlMkGetSessionOption UrlMkSetSessionOption

msvcrt

__set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln _except_handler3 _exit _XcptFilter exit _controlfp

imagehlp

UpdateDebugInfoFileEx UnmapDebugInformation

comctl32

ImageList_Destroy ImageList_GetBkColor ImageList_GetIconSize ImageList_GetImageInfo InitCommonControlsEx ImageList_DrawIndirect

kernel32

WritePrivateProfileStringW LoadLibraryA LeaveCriticalSection ExitProcess GetTickCount EnterCriticalSection InitializeCriticalSection GetCommandLineA IsValidCodePage GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime QueryPerformanceCounter GetACP ConvertDefaultLocale CreateFileA CreateFileW CreateThread DeleteCriticalSection DuplicateHandle EnumResourceLanguagesW EnumResourceNamesW EnumResourceTypesW FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileW FindResourceW FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary FreeResource GetCommandLineW GetConsoleCP GetConsoleMode GetConsoleOutputCP GetCPInfo GetCurrentProcess GetEnvironmentStringsW GetFileAttributesW GetFileTime GetFileType GetFullPathNameW GetLastError GetLocaleInfoA GetLocaleInfoW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStartupInfoA GetStartupInfoW GetStdHandle GetStringTypeA GetStringTypeW GetSystemInfo WriteFile GetTimeZoneInformation GetVersionExA GetVersionExW GetVolumeInformationW GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GlobalFindAtomW GlobalFlags GlobalFree GlobalHandle GlobalLock GlobalReAlloc HeapAlloc HeapCreate HeapFree HeapReAlloc HeapSize InterlockedDecrement InterlockedExchange InterlockedIncrement LCMapStringA LCMapStringW LoadLibraryExA LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFree LocalReAlloc LocalSize LockFile LockResource lstrcmpA lstrcmpW lstrlenA lstrlenW MulDiv MultiByteToWideChar OpenProcess RaiseException ReadFile SetEndOfFile SetEnvironmentVariableA SetErrorMode SetFilePointer SetHandleCount SetLastError SetStdHandle SetThreadExecutionState SizeofResource Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue UnlockFile VirtualAlloc VirtualFree VirtualProtect VirtualQuery WideCharToMultiByte WriteConsoleA WriteConsoleW GetThreadLocale

user32

DefFrameProcW DefMDIChildProcA DefMDIChildProcW DefWindowProcA DefWindowProcW DestroyIcon DestroyMenu DestroyWindow DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawStateW DrawTextExW DrawTextW EnableMenuItem EnableScrollBar EnableWindow EndDialog EnumWindows EqualRect FillRect GetActiveWindow GetCapture GetClassInfoExW GetClassInfoW GetClassLongW GetClassNameW GetClientRect GetCursorPos GetDC GetDlgCtrlID GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetIconInfo GetKeyState GetLastActivePopup GetMenuCheckMarkDimensions GetMenuItemCount GetMenuItemID GetMenuState GetMessagePos GetMessageTime GetMessageW GetNextDlgGroupItem GetNextDlgTabItem GetParent GetPropW GetScrollInfo GetScrollPos GetSubMenu GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetWindowDC GetWindowLongA GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId GrayStringW InflateRect IntersectRect InvalidateRect InvalidateRgn IsChild IsDialogMessageW IsIconic IsRectEmpty IsWindowEnabled IsWindowUnicode IsWindowVisible KillTimer LoadBitmapW LoadCursorW LoadIconW LoadImageW LoadMenuW LookupIconIdFromDirectoryEx MapDialogRect MapWindowPoints MessageBeep MessageBoxW ModifyMenuW MoveWindow OffsetRect PeekMessageW PostMessageW PostQuitMessage PostThreadMessageW PtInRect RegisterClassA RegisterClassW RegisterClipboardFormatW RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient SendDlgItemMessageA SendDlgItemMessageW SendMessageTimeoutW SendMessageW SetActiveWindow SetCapture SetClassLongW SetCursor SetFocus SetForegroundWindow SetMenuItemBitmaps SetPropW SetRectEmpty SetScrollInfo SetScrollPos SetTimer SetWindowContextHelpId SetWindowLongA SetWindowLongW SetWindowPos SetWindowRgn SetWindowsHookExW SetWindowTextW ShowWindow SystemParametersInfoA SystemParametersInfoW TabbedTextOutW TranslateMessage UnhookWindowsHookEx UnregisterClassW UpdateWindow ValidateRect DefFrameProcA DefDlgProcW DefDlgProcA CreateWindowExW CreateIconIndirect CreateIconFromResourceEx CreateDialogIndirectParamW CopyRect CopyAcceleratorTableW ClientToScreen CheckMenuItem CharUpperW CharNextW CallWindowProcW CallWindowProcA CallNextHookEx GetDesktopWindow GetWindowLongW CopyIcon

gdi32

SetViewportOrgEx SetWindowExtEx SetWindowOrgEx StretchDIBits TextOutW SetViewportExtEx

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegQueryValueW RegQueryValueExW RegOpenKeyW RegOpenKeyExW RegEnumKeyW RegSetValueExW

ole32

CoGetClassObject CoRegisterMessageFilter CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CoFreeUnusedLibraries CreateILockBytesOnHGlobal OleInitialize OleIsCurrentClipboard OleUninitialize StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes OleFlushClipboard CoUninitialize

shlwapi

PathFindFileNameW PathRemoveFileSpecA PathStripToRootW PathIsUNCW

Name

.text

Size

416KB

Virtual Size

412KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

14.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

4KB

Virtual Size

38B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

432KB

Virtual Size

432KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vli004

Size

999KB

Virtual Size

999KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

a2f24d09406a587ae2bed026ae78fb29c27967853f726a0e70bc08f908b1440e

urlmon

msvcrt

imagehlp

comctl32

kernel32

user32

gdi32

winspool.drv

advapi32

ole32

shlwapi

generic