569f1a44260f85ed9d900a1a85591a44

Sharing

Copy URL Twitter E-mail

General

Target
569f1a44260f85ed9d900a1a85591a44
Size 34KB
Sample231226-frpn7abbc4
SHA256 0b3e1026408effc04cbc6efa2e1f41c846b59bae434c187e44948230d6af87fd
MD5 569f1a44260f85ed9d900a1a85591a44
SHA1 7505f1c298acbd7e67f9bf14edcf0fb252802c9f
SHA512 cab96ccf4ef6f32e1494a697c817420ba8f0ba010e5ee4ba805054c6378173dad595bd19833c53c5fbb5534cb29879a717509e39a4a3ca48ebd7f3d46746c139
SSDEEP 768:ha8lahZqQdUpHvEPp6w7p/ANZm2OVORi838X5:ha8cOpH8hb7p/AbfRw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
569f1a44260f85ed9d900a1a85591a44

File Explorer

569f1a44260f85ed9d900a1a85591a44

.dll 34KB

569f1a44260f85ed9d900a1a85591a44

IMPHASH 97a15a6826ac9b5d563c2643690578e9
SHA256 0b3e1026408effc04cbc6efa2e1f41c846b59bae434c187e44948230d6af87fd
MD5 569f1a44260f85ed9d900a1a85591a44
SHA1 7505f1c298acbd7e67f9bf14edcf0fb252802c9f
SHA512 cab96ccf4ef6f32e1494a697c817420ba8f0ba010e5ee4ba805054c6378173dad595bd19833c53c5fbb5534cb29879a717509e39a4a3ca48ebd7f3d46746c139
SSDEEP 768:ha8lahZqQdUpHvEPp6w7p/ANZm2OVORi838X5:ha8cOpH8hb7p/AbfRw
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalLock GetSystemDirectoryA CreateThread WaitForSingleObject SetFilePointer GetLastError CreateEventA GetModuleFileNameA GetTempPathA GetWindowsDirectoryA GlobalUnlock SetFileAttributesA ExitProcess GetCommandLineA CreateMutexA GlobalFree LoadLibraryA GetProcAddress GlobalAlloc VirtualProtect Sleep MultiByteToWideChar GetCurrentDirectoryA GetFileAttributesA GetPrivateProfileStringA DeleteFileA CreateFileA GetFileSize ReadFile CloseHandle WideCharToMultiByte WriteFile

user32

GetParent GetWindowThreadProcessId EnumWindows wsprintfA GetWindowTextA ReleaseDC GetWindowRect GetDC GetDesktopWindow GetClientRect CallWindowProcA GetClassNameA SetWindowLongA RegisterShellHookWindow RegisterWindowMessageA

gdi32

CreateDCA GetDeviceCaps DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetDIBits RealizePalette SelectPalette GetStockObject GetObjectA DeleteDC

gdiplus

GdipCloneImage GdipAlloc GdipFree GdipGetImageEncodersSize GdipGetImageEncoders GdiplusStartup GdipDisposeImage GdiplusShutdown GdipSaveImageToFile GdipLoadImageFromFile

msvcp60

??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ

ws2_32

inet_ntoa send recv socket inet_addr htons connect closesocket gethostbyname WSACleanup WSAStartup

wininet

InternetOpenUrlA InternetOpenA InternetReadFile InternetCloseHandle

msvcrt

strrchr _access strcat strchr strncpy abs malloc wcscmp __dllonexit _onexit _initterm _adjust_fdiv _getpid _stricmp _strlwr _strrev free memcpy __CxxFrameHandler strcmp _wtoi atoi wcscpy sprintf strcpy fopen fgets strstr fclose ??2@YAPAXI@Z memset strlen

netapi32

Netbios

Sharing

General

Malware Config

Signatures

File Explorer

569f1a44260f85ed9d900a1a85591a44

kernel32

user32

gdi32

gdiplus

msvcp60

ws2_32

wininet

msvcrt

netapi32

generic