0e906c16f20779bcb800bbab284eb75e

Sharing

Copy URL Twitter E-mail

General

Target
0e906c16f20779bcb800bbab284eb75e
Size 177KB
Sample231230-e5r6ssgah5
SHA256 7d42f8f7131f3ff51c17e8ace8040e4ea1645416509ce9e724ef25b39d24e1fc
MD5 0e906c16f20779bcb800bbab284eb75e
SHA1 5d14d6d921d4a5aef3e7a3b32932b2ec690b5058
SHA512 9f8b829519ee9ade2a8ae25df785e3b20cead94c10f01fb82ea8194b23627f25270046afb5ac3c96847fd1fa3356b5aec8a99a0174e8cb0e7a55e1f29e2dc2b8
SSDEEP 3072:z05lwKUhhE2SrOX//sBjtSTZLy3Ve4nXGsEG+uh89nS:osKUDarOX3ghSxA84nhEYC9nS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e906c16f20779bcb800bbab284eb75e

File Explorer

0e906c16f20779bcb800bbab284eb75e

.exe 177KB

0e906c16f20779bcb800bbab284eb75e

IMPHASH 8768a8bb5390de0a0f375c261bd9f7f9
SHA256 7d42f8f7131f3ff51c17e8ace8040e4ea1645416509ce9e724ef25b39d24e1fc
MD5 0e906c16f20779bcb800bbab284eb75e
SHA1 5d14d6d921d4a5aef3e7a3b32932b2ec690b5058
SHA512 9f8b829519ee9ade2a8ae25df785e3b20cead94c10f01fb82ea8194b23627f25270046afb5ac3c96847fd1fa3356b5aec8a99a0174e8cb0e7a55e1f29e2dc2b8
SSDEEP 3072:z05lwKUhhE2SrOX//sBjtSTZLy3Ve4nXGsEG+uh89nS:osKUDarOX3ghSxA84nhEYC9nS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

72588

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalGetAtomNameA GetDateFormatA GetFileTime GlobalSize AreFileApisANSI IsBadStringPtrW GetCommandLineA GlobalFindAtomW MulDiv EnumResourceLanguagesA VerifyVersionInfoW CreateNamedPipeA MultiByteToWideChar LocalUnlock MoveFileExA SetCommState GetFileInformationByHandle GetAtomNameA ResetEvent lstrcmpW GetCPInfo GetPriorityClass WinExec CopyFileA CallNamedPipeW MoveFileA CreateNamedPipeW GetThreadLocale VirtualFree VirtualProtect SetLocalTime GetOEMCP GetDateFormatW GetThreadTimes SetMailslotInfo GetFileAttributesW GetACP GlobalFree SetPriorityClass ReadFile TryEnterCriticalSection GlobalHandle QueryPerformanceCounter IsBadCodePtr GetSystemTime GetStartupInfoW SetHandleCount FormatMessageA lstrcpynW GetCurrentThread GetSystemWindowsDirectoryA CloseHandle SetHandleInformation GetLongPathNameW

gdi32

SetAbortProc RestoreDC SetBitmapDimensionEx SetROP2 GetPaletteEntries RoundRect SelectObject CreateHatchBrush CreateFontA GetObjectW ExtTextOutW CreateDiscardableBitmap Polyline GetNearestColor SetViewportExtEx SetViewportOrgEx EnumFontFamiliesW CreateBrushIndirect ExcludeClipRect RemoveFontResourceW WidenPath UnrealizeObject GetClipBox CreateFontW SetDIBitsToDevice SetPaletteEntries GetPixel GetDIBits ScaleViewportExtEx GetSystemPaletteEntries StretchDIBits GetMapMode EndPage ScaleWindowExtEx StartPage GetTextMetricsW SetRectRgn CreateRectRgnIndirect OffsetRgn Escape DPtoLP CreateRectRgn StretchBlt GetROP2 ResizePalette SetWindowExtEx EndPath PathToRegion

user32

CharUpperBuffW FindWindowExW CreateDialogIndirectParamW mouse_event CharNextExA CharLowerW MonitorFromPoint SetWindowTextW InsertMenuItemW EnableScrollBar AppendMenuW DefFrameProcW ExitWindowsEx CreateDialogParamA DrawFocusRect DefWindowProcW DispatchMessageA VkKeyScanW GetDlgItemTextW SetForegroundWindow EnableWindow SetUserObjectInformationW InSendMessageEx SendMessageTimeoutA PeekMessageA MapVirtualKeyA DefWindowProcA wsprintfA GetTopWindow InflateRect SetWindowLongW DestroyAcceleratorTable CreateWindowExW GetClassInfoA LoadCursorA CharPrevA InvalidateRect PostThreadMessageW GetWindowTextW DeleteMenu MonitorFromRect DrawEdge WaitMessage RegisterWindowMessageA TabbedTextOutW HiliteMenuItem AdjustWindowRect ClipCursor SystemParametersInfoW IsWindow GetDesktopWindow DestroyIcon DialogBoxParamW SetRect SetDlgItemInt CheckDlgButton GetMenuState IsCharAlphaNumericW GetMenuItemCount CharUpperA GetKeyboardLayout GetMessageTime GetClassInfoExA SetWindowLongA ScrollWindowEx GetWindow UnloadKeyboardLayout SetScrollInfo GetMessagePos UnionRect GetIconInfo GetClassInfoW DeferWindowPos IsChild FrameRect DestroyCursor DrawStateA MessageBoxExW DrawStateW DrawTextExW IsMenu SetSysColors CharNextA DrawFrameControl GetFocus LockWindowUpdate OffsetRect DialogBoxIndirectParamA FindWindowA MessageBoxA InvalidateRgn EndPaint GetMenuItemRect CreateIconFromResource GetKeyboardLayoutNameW OpenIcon CreateCaret ShowCursor InsertMenuA ShowOwnedPopups IsDlgButtonChecked ClientToScreen AppendMenuA DragObject IsWindowUnicode GetSysColorBrush LoadImageW TranslateAcceleratorA PostMessageW TrackPopupMenuEx SetDlgItemTextW PostQuitMessage BeginDeferWindowPos AdjustWindowRectEx CheckRadioButton GetUpdateRect MapVirtualKeyW GetForegroundWindow DefFrameProcA InvertRect CreateIconIndirect SetClassLongW

ole32

CoInitializeEx

advapi32

RegEnumKeyExA CryptDecrypt OpenEventLogW LookupAccountNameW RegCreateKeyW GetLengthSid RegQueryValueExA RegCreateKeyA RegCreateKeyExW ControlService RegEnumKeyW RegisterServiceCtrlHandlerW RegOpenKeyA InitializeAcl RegOpenKeyW

comctl32

ImageList_Write CreatePropertySheetPageW InitCommonControlsEx ImageList_GetImageCount ImageList_Remove ImageList_GetIcon

Name

.text

Size

119KB

Virtual Size

118KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.psikif

Size

1024B

Virtual Size

1012B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.yid

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pox

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hob

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.Kuduag

Size

512B

Virtual Size

35B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.refee

Size

512B

Virtual Size

189B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0e906c16f20779bcb800bbab284eb75e

kernel32

gdi32

user32

ole32

advapi32

comctl32

generic