0f9796da19d00da478370b0141ef547e32327d68e4b53ff3ae1de1c7107ff480

Sharing

Copy URL Twitter E-mail

General

Target
0f9796da19d00da478370b0141ef547e32327d68e4b53ff3ae1de1c7107ff480
Size 5.9MB
Sample231114-hsdz7agh7t
SHA256 0f9796da19d00da478370b0141ef547e32327d68e4b53ff3ae1de1c7107ff480
MD5 c9a884874dac59155d1e44453a7ac78c
SHA1 f2a93b01ca55f6f49bb30c6d2a3ea6e2cf9fb9ec
SHA512 909f31a5e8a8400509a60ae41497a3e3dec54c306e9b037178561450e8c2cdf5fbb5e75ccb9a1712c93cbe7d8adcdef86de2fadb96448230987aa860b554a316
SSDEEP 98304:jZXNPNY1/bfmoa5+PdEc3ay92ai0PtDLIpERaMZK:nVYnaIdeP0PtD06RaaK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f9796da19d00da478370b0141ef547e32327d68e4b53ff3ae1de1c7107ff480

File Explorer

0f9796da19d00da478370b0141ef547e32327d68e4b53ff3ae1de1c7107ff480

.exe 5.9MB

0f9796da19d00da478370b0141ef547e32327d68e4b53ff3ae1de1c7107ff480

IMPHASH bb677fbadcdf2eca3595d1faeddecfdd
SHA256 0f9796da19d00da478370b0141ef547e32327d68e4b53ff3ae1de1c7107ff480
MD5 c9a884874dac59155d1e44453a7ac78c
SHA1 f2a93b01ca55f6f49bb30c6d2a3ea6e2cf9fb9ec
SHA512 909f31a5e8a8400509a60ae41497a3e3dec54c306e9b037178561450e8c2cdf5fbb5e75ccb9a1712c93cbe7d8adcdef86de2fadb96448230987aa860b554a316
SSDEEP 98304:jZXNPNY1/bfmoa5+PdEc3ay92ai0PtDLIpERaMZK:nVYnaIdeP0PtD06RaaK
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3688172

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

sndPlaySoundW mciSendCommandW timeGetTime mciGetErrorStringW

oleacc

LresultFromObject

shlwapi

PathIsRelativeW

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW GetDefaultPrinterW EnumPrintersW

comdlg32

FindTextW ChooseFontW ChooseColorW GetSaveFileNameW GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo InitCommonControls ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add ImageList_GetDragImage FlatSB_SetScrollProp ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB FlatSB_GetScrollInfo ImageList_Write ImageList_DrawIndirect ImageList_SetBkColor ImageList_GetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_Replace ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_Draw ImageList_Remove ImageList_ReplaceIcon

shell32

DragFinish SHGetDesktopFolder DragQueryFileW IsUserAnAdmin DragAcceptFiles Shell_NotifyIconW SHAppBarMessage ShellExecuteW

user32

CopyImage MoveWindow SetMenuItemInfoW GetMenuItemInfoW DefFrameProcW SetCaretPos GetCaretPos ScrollWindowEx GetDlgCtrlID FrameRect RegisterWindowMessageW GetMenuStringW FillRect ClipCursor SendMessageA IsClipboardFormatAvailable EnumWindows ShowOwnedPopups GetClassInfoW GetScrollRange SetActiveWindow GetActiveWindow DrawEdge GetKeyboardLayoutList LoadBitmapW EnumChildWindows GetScrollBarInfo UnhookWindowsHookEx SetCapture GetCapture CreatePopupMenu ShowCaret GetMenuItemID DestroyCaret CharLowerBuffW PostMessageW SetWindowLongW IsZoomed SetParent DrawMenuBar GetClientRect IsChild SendDlgItemMessageW IsIconic CallNextHookEx ShowWindow SetForegroundWindow GetWindowTextW GetAsyncKeyState IsDialogMessageW DestroyWindow RegisterClassW EndMenu CharNextW GetFocus GetDC SetFocus ReleaseDC GetClassLongW SetScrollRange DrawTextW PeekMessageA MessageBeep SetClassLongW LockWindowUpdate RemovePropW GetSubMenu DestroyIcon IsWindowVisible GetMenuBarInfo PtInRect DispatchMessageA UnregisterClassW GetTopWindow SendMessageW GetMessageTime NotifyWinEvent GetComboBoxInfo CreateMenu LoadStringW CharLowerW SetWindowRgn SetWindowPos GetMenuItemCount GetSysColorBrush GetWindowDC DrawTextExW EnumClipboardFormats ScrollDC GetScrollInfo SetWindowTextW GetMessageExtraInfo GetSysColor EnableScrollBar TrackPopupMenu keybd_event DrawIconEx GetClassNameW GetMessagePos GetIconInfo SetScrollInfo GetKeyNameTextW GetDesktopWindow SetCursorPos GetCursorPos SetMenu GetMenuState GetMenu SetRect GetKeyState IsRectEmpty CreateIconFromResourceEx ValidateRect IsCharAlphaW GetCursor KillTimer BeginDeferWindowPos WaitMessage TranslateMDISysAccel GetWindowPlacement GetClipboardFormatNameW CreateIconIndirect GetMenuItemRect CreateWindowExW ChildWindowFromPoint GetDCEx PeekMessageW MonitorFromWindow GetUpdateRect SetTimer WindowFromPoint BeginPaint DrawStateW RegisterClipboardFormatW MapVirtualKeyW OffsetRect IsWindowUnicode DispatchMessageW DefMDIChildProcW GetSystemMenu SetScrollPos GetScrollPos InflateRect DrawFocusRect ReleaseCapture LoadCursorW ScrollWindow GetLastActivePopup GetCursorInfo SetMenuInfo GetSystemMetrics CharUpperBuffW ClientToScreen SetClipboardData GetClipboardData SetWindowPlacement GetMonitorInfoW CheckMenuItem CharUpperW DefWindowProcW MapDialogRect GetForegroundWindow ToAscii EnableWindow GetWindowThreadProcessId RedrawWindow EndPaint MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW ActivateKeyboardLayout GetParent CreateCaret MonitorFromRect InsertMenuItemW GetPropW MessageBoxW SetPropW UpdateWindow MsgWaitForMultipleObjects DestroyMenu SetWindowsHookExW GetDoubleClickTime EmptyClipboard GetDlgItem AdjustWindowRectEx IsWindow DrawIcon EnumThreadWindows InvalidateRect SetKeyboardState GetKeyboardState ScreenToClient DrawFrameControl IsCharAlphaNumericW BringWindowToTop SetCursor CreateIcon RemoveMenu SubtractRect CreateDialogIndirectParamW GetKeyboardLayoutNameW OpenClipboard TranslateMessage MapWindowPoints EnumDisplayMonitors CallWindowProcW CountClipboardFormats CloseClipboard DestroyCursor PostQuitMessage ShowScrollBar LoadImageW EnableMenuItem DeferWindowPos HideCaret EndDeferWindowPos LoadMenuIndirectW FindWindowExW MonitorFromPoint LoadIconW SystemParametersInfoW GetWindow GetWindowLongW GetWindowRect InsertMenuW IsWindowEnabled IsDialogMessageA FindWindowW DeleteMenu GetKeyboardLayout

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

oleaut32

GetErrorInfo SysFreeString VariantClear VariantInit SysReAllocStringLen SafeArrayCreate SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound VariantCopy VariantChangeType VariantCopyInd

advapi32

RegSetValueExW RegEnumKeyExW RegFlushKey RegQueryValueExW RegDeleteKeyW RegCloseKey RegCreateKeyExW RegQueryInfoKeyW RegOpenKeyExW

msvcrt

memcpy memset

kernel32

GetFileTime SetFileTime GetACP CloseHandle LocalFree GetCurrentProcessId SizeofResource QueryPerformanceFrequency IsValidCodePage IsDebuggerPresent GetFullPathNameW VirtualFree GetProcessHeap ExitProcess HeapAlloc GetCPInfoExW GlobalSize RtlUnwind GetCPInfo EnumSystemLocalesW GetStdHandle GetModuleHandleW FreeLibrary HeapDestroy ReadFile GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW CreateThread CompareStringW MapViewOfFile CreateMutexW LoadLibraryA ResetEvent MulDiv FreeResource GetVersion RaiseException MoveFileW GlobalAddAtomW FormatMessageW SwitchToThread GetExitCodeThread WriteConsoleW GetCurrentThread LoadLibraryExW LockResource GetCurrentThreadId UnhandledExceptionFilter VirtualQuery GlobalFindAtomW VirtualQueryEx GlobalFree Sleep EnterCriticalSection SetFilePointer LoadResource SuspendThread GetTickCount WritePrivateProfileStringW GetFileSize GetTempFileNameW GetStartupInfoW GlobalDeleteAtom GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW InitializeCriticalSection GetThreadPriority GetCurrentProcess SetThreadPriority GlobalLock VirtualAlloc GetTempPathW GetCommandLineW GetSystemInfo LeaveCriticalSection GetProcAddress ResumeThread GetVersionExW VerifyVersionInfoW HeapCreate LCMapStringW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage UnmapViewOfFile GlobalHandle lstrlenW CompareStringA QueryPerformanceCounter SetEndOfFile lstrcmpW HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent CreateFileW GetLocaleInfoW EnumResourceNamesW DeleteFileW FreeConsole GetLocalTime WaitForSingleObject WriteFile CreateFileMappingW ExitThread DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode IsValidLocale TlsSetValue CreateDirectoryW GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW GetPrivateProfileStringW WaitForMultipleObjectsEx GetThreadLocale SetThreadLocale

ole32

RevokeDragDrop CreateDataAdviseHolder CoCreateInstance CoUninitialize OleGetClipboard ReleaseStgMedium OleSetClipboard RegisterDragDrop IsEqualGUID CreateStreamOnHGlobal OleInitialize OleUninitialize CoInitialize CoDisconnectObject CoTaskMemFree CoTaskMemAlloc StringFromCLSID DoDragDrop

gdi32

Pie SetBkMode GetRandomRgn CreateCompatibleBitmap GetEnhMetaFileHeader RectVisible AngleArc TranslateCharsetInfo ResizePalette SetAbortProc SetTextColor GetTextColor StretchBlt RoundRect SelectClipRgn RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx CreatePalette CreateDCW CreateICW CreatePen PolyBezierTo GetStockObject CreateSolidBrush Polygon MoveToEx PlayEnhMetaFile Ellipse StartPage GetBitmapBits StartDocW GetSystemPaletteEntries GetEnhMetaFileBits SetBitmapBits GetEnhMetaFilePaletteEntries CreatePenIndirect SetMapMode GetMapMode CreateFontIndirectW PolyBezier ExtCreatePen LPtoDP EndDoc GetObjectW GetCurrentObject GetWinMetaFileBits SetROP2 GetEnhMetaFileDescriptionW ArcTo Arc CreateRectRgnIndirect TextOutW SelectPalette ExcludeClipRect MaskBlt SetWindowOrgEx CreatePatternBrush EndPage DeleteEnhMetaFile Chord SetDIBits SetViewportOrgEx CreateRectRgn RealizePalette SetDIBColorTable GetDIBColorTable CreateBrushIndirect PatBlt SetEnhMetaFileBits Rectangle SaveDC DeleteDC BitBlt FrameRgn GetDeviceCaps GetTextExtentPoint32W GetClipBox Polyline IntersectClipRect CreateBitmap CombineRgn SetWinMetaFileBits CreateDIBitmap GetStretchBltMode CreateDIBSection SetStretchBltMode GetDIBits LineTo GetRgnBox EnumFontsW SetWindowExtEx CreateHalftonePalette SelectObject DeleteObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW OffsetRgn SetBkColor GetBkColor CreateCompatibleDC GetBrushOrgEx GetCurrentPositionEx SetDCPenColor GetNearestPaletteIndex GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetPixel GdiFlush SetViewportExtEx SetPixel PolyPolyline EnumFontFamiliesExW StretchDIBits GetPaletteEntries

Name

.text

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

227KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

119B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

84B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

93B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

298KB

Virtual Size

297KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0f9796da19d00da478370b0141ef547e32327d68e4b53ff3ae1de1c7107ff480

winmm

oleacc

shlwapi

winspool.drv

comdlg32

comctl32

shell32

user32

version

oleaut32

advapi32

msvcrt

kernel32

ole32

gdi32

generic