525643e0a155a1ee9b096e1874f35528a7541b7b9cac9a858ad4865374a75bd5

Sharing

Copy URL Twitter E-mail

General

Target
525643e0a155a1ee9b096e1874f35528a7541b7b9cac9a858ad4865374a75bd5
Size 2.1MB
Sample231222-jme6qscedm
SHA256 525643e0a155a1ee9b096e1874f35528a7541b7b9cac9a858ad4865374a75bd5
MD5 3e10e13e44441fa2dea5cf4b694dc218
SHA1 a474c711d403fd47ec870aeef1e85d48addb675c
SHA512 a29c7917cb46bbd375484b8dd6c731e3cff6f73a16e6c89cca589611eb65a6cf27e3535109cbb3721ef18f768a953190b9b38d3c4c98456f97da5c9c03912741
SSDEEP 24576:EWN4RCTp+VcaQo2+fWaq2GiZamLA42AfDz0iYPIGC3iSd4/LOak4ItASG1KftbaA:EWN4RqpGcaQATf1JATElo3Q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
525643e0a155a1ee9b096e1874f35528a7541b7b9cac9a858ad4865374a75bd5

File Explorer

525643e0a155a1ee9b096e1874f35528a7541b7b9cac9a858ad4865374a75bd5

.exe 2.1MB

525643e0a155a1ee9b096e1874f35528a7541b7b9cac9a858ad4865374a75bd5

IMPHASH 488e0658f525c4fd48d8e95d859245f3
SHA256 525643e0a155a1ee9b096e1874f35528a7541b7b9cac9a858ad4865374a75bd5
MD5 3e10e13e44441fa2dea5cf4b694dc218
SHA1 a474c711d403fd47ec870aeef1e85d48addb675c
SHA512 a29c7917cb46bbd375484b8dd6c731e3cff6f73a16e6c89cca589611eb65a6cf27e3535109cbb3721ef18f768a953190b9b38d3c4c98456f97da5c9c03912741
SSDEEP 24576:EWN4RCTp+VcaQo2+fWaq2GiZamLA42AfDz0iYPIGC3iSd4/LOak4ItASG1KftbaA:EWN4RqpGcaQATf1JATElo3Q
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

407304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_LoadImageW ImageList_SetImageCount ImageList_SetOverlayImage ImageList_Write ord17 InitializeFlatSB ImageList_GetImageInfo ImageList_GetImageCount ImageList_GetIconSize ImageList_GetDragImage ImageList_GetBkColor ImageList_EndDrag ImageList_DrawEx ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_Destroy ImageList_Create ImageList_Copy ImageList_BeginDrag ImageList_Add FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo ImageList_SetIconSize FlatSB_GetScrollPos

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

setupapi

SetupDiSetClassInstallParamsA SetupDiGetClassDevsA SetupDiGetDeviceInstallParamsW SetupDiGetDeviceInterfaceDetailA SetupDiEnumDeviceInterfaces SetupDiGetDeviceRegistryPropertyA

kernel32

LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetCommandLineA GetStartupInfoA GetModuleHandleW GetVersion CreateThread DeleteCriticalSection DeleteFileW DeviceIoControl EnumCalendarInfoW ExitProcess ExitThread FileTimeToDosDateTime FileTimeToLocalFileTime FindClose FindCloseChangeNotification FindFirstChangeNotificationW FindFirstFileW FindNextChangeNotification FindNextFileW FindResourceW FormatMessageW FreeResource GetACP GetCPInfo GetDateFormatW GetDiskFreeSpaceW GetExitCodeThread GetFileAttributesW GetFileSize GetFileType GetFullPathNameW GetLastError GetLocaleInfoW GetLocalTime GetModuleFileNameW GetPrivateProfileStringW GetStdHandle GetSystemInfo GetThreadLocale GetThreadPriority GetVersionExW GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GetSystemTimeAsFileTime GlobalFree GlobalLock GlobalSize GlobalUnlock InterlockedCompareExchange InterlockedExchangeAdd IsValidLocale LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFree LockResource lstrcmpiA lstrcmpW lstrcpynW lstrcpyW lstrlenW MulDiv MultiByteToWideChar OpenProcess OutputDebugStringW RaiseException ReadFile ReadProcessMemory ReleaseMutex ResetEvent ResumeThread SetEndOfFile SetErrorMode SetEvent SetFilePointer SetLastError SetThreadLocale SetThreadPriority SizeofResource Sleep SuspendThread TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualAllocEx VirtualFree VirtualFreeEx VirtualProtect VirtualQuery VirtualQueryEx WaitForMultipleObjectsEx WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW WriteProcessMemory LCMapStringW LCMapStringA GetOEMCP HeapReAlloc HeapFree HeapCreate HeapDestroy GetVersionExA GetEnvironmentVariableA SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA GetCurrentProcess TerminateProcess TlsAlloc HeapAlloc GetModuleHandleA RtlUnwind GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCommandLineW FreeLibrary GetConsoleMode LoadLibraryA GetProcAddress GetStringTypeA GetStringTypeW InterlockedDecrement InterlockedIncrement GlobalFindAtomW

user32

GetKeyState GetLastActivePopup GetMenuItemCount GetMenuItemID GetMenuItemInfoW GetMenuItemRect GetMenuState GetMenuStringW GetMessageExtraInfo GetMessagePos GetMessageTime GetParent GetPropW GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColorBrush GetSystemMenu GetSystemMetrics GetUpdateRect GetWindowDC GetWindowLongW GetWindowPlacement GetWindowRect GetWindowRgn GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InflateRect InsertMenuItemW InsertMenuW IntersectRect InvalidateRect IsCharAlphaNumericW IsCharAlphaW IsChild IsClipboardFormatAvailable IsDialogMessageA IsDialogMessageW IsIconic IsRectEmpty IsWindowEnabled IsWindowUnicode IsWindowVisible IsZoomed KillTimer LoadBitmapW LoadCursorW LoadIconW LoadKeyboardLayoutW LoadStringW LockWindowUpdate MapVirtualKeyW MapWindowPoints MessageBeep MessageBoxA MessageBoxIndirectW MessageBoxW MoveWindow MsgWaitForMultipleObjectsEx OffsetRect OpenClipboard PeekMessageA PeekMessageW PostMessageW PostQuitMessage PtInRect RedrawWindow RegisterClassW GetKeyNameTextW RegisterWindowMessageW GetCursorPos ReleaseDC RemoveMenu RemovePropW ScreenToClient ScrollWindowEx SendMessageA SendMessageW SetActiveWindow SetCapture SetCaretPos SetClassLongW SetClipboardData SetCursorPos SetFocus SetForegroundWindow SetKeyboardState SetMenuItemInfoW SetParent SetPropW SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowsHookExW SetWindowTextW ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoW TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnregisterClassW UpdateWindow ValidateRect WaitMessage WindowFromDC WindowFromPoint GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetIconInfo GetForegroundWindow GetFocus GetDoubleClickTime CharLowerBuffW CharLowerW FindWindowExW FillRect EqualRect EnumWindows EnumThreadWindows EnumClipboardFormats EnumChildWindows EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextW DrawTextExW DrawMenuBar DrawIconEx DrawFrameControl DrawFocusRect DrawEdge DispatchMessageW DispatchMessageA DestroyWindow GetDlgItem GetDlgCtrlID FindWindowW RegisterClipboardFormatW GetDCEx CharNextW CharUpperBuffW CheckMenuItem ClientToScreen CloseClipboard GetClipboardData GetClientRect GetClassNameW GetClassLongW GetClassInfoW GetCaretPos GetCapture GetAsyncKeyState GetActiveWindow ReleaseCapture FrameRect DestroyMenu DestroyIcon DestroyCursor DestroyCaret DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreateWindowExW CreatePopupMenu CreateMenu CreateIconIndirect CreateCaret CreateAcceleratorTableW CountClipboardFormats CopyRect CopyImage CopyIcon GetDesktopWindow

winspool.drv

EnumPrintersW OpenPrinterW DocumentPropertiesW ClosePrinter

comdlg32

GetSaveFileNameW PrintDlgW GetOpenFileNameW

advapi32

RegCloseKey RegUnLoadKeyW RegSetValueExW RegSaveKeyW RegRestoreKeyW RegReplaceKeyW RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegLoadKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegConnectRegistryW OpenThreadToken

shell32

ExtractIconW ShellExecuteExW CommandLineToArgvW ShellExecuteW

ole32

CoTaskMemAlloc CoTaskMemFree OleInitialize OleUninitialize

oleaut32

VariantCopy VariantClear VariantChangeType SysReAllocStringLen SysFreeString SysAllocStringLen SafeArrayUnaccessData SafeArrayPutElement SafeArrayPtrOfIndex VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

525643e0a155a1ee9b096e1874f35528a7541b7b9cac9a858ad4865374a75bd5

comctl32

version

setupapi

kernel32

user32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

generic