399edfa62137f82f7a9eac56f24b2b02

Sharing

Copy URL Twitter E-mail

General

Target
399edfa62137f82f7a9eac56f24b2b02
Size 4.8MB
Sample231231-rnwtwafea6
SHA256 b0f5e0d2f91141d9369c4ba7d33e7ada46161cba0a37bb063e66d2201d57fde1
MD5 399edfa62137f82f7a9eac56f24b2b02
SHA1 54c4ec6801a122044fb93045d6485892fb02c5cf
SHA512 35afabbf340f592eeddfce5a9880998c90980b65100c1f4384aedea252f1d079d192fcb7f30057eefb055cbd02d5560becba5f5ebe3ac0355b2b01d68236a3b5
SSDEEP 98304:oZNAeB2Tagh93zwQN221YxpUnJ10OqGNhODy64tzGwCoJfKplYM:oZNAK2eG8fuYxpUnclSdKLx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
399edfa62137f82f7a9eac56f24b2b02

File Explorer

399edfa62137f82f7a9eac56f24b2b02

.exe .ps1 4.8MB

399edfa62137f82f7a9eac56f24b2b02

IMPHASH ac9907dd8a633d6f7f5c29aed074d81c
SHA256 b0f5e0d2f91141d9369c4ba7d33e7ada46161cba0a37bb063e66d2201d57fde1
MD5 399edfa62137f82f7a9eac56f24b2b02
SHA1 54c4ec6801a122044fb93045d6485892fb02c5cf
SHA512 35afabbf340f592eeddfce5a9880998c90980b65100c1f4384aedea252f1d079d192fcb7f30057eefb055cbd02d5560becba5f5ebe3ac0355b2b01d68236a3b5
SSDEEP 98304:oZNAeB2Tagh93zwQN221YxpUnJ10OqGNhODy64tzGwCoJfKplYM:oZNAK2eG8fuYxpUnclSdKLx
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4228

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_AGGRESIVE_WS_TRIM IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegLoadKeyW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegReplaceKeyW RegRestoreKeyW RegSaveKeyW RegSetValueExW RegUnLoadKeyW

kernel32

CloseHandle CreateFileA CreateFileMappingA DeleteFileW EnterCriticalSection EnumCalendarInfoW EnumResourceNamesA EnumResourceTypesA ExitProcess ExitThread FileTimeToDosDateTime FileTimeToLocalFileTime FindClose FindFirstFileW FindNextFileW FindResourceA FindResourceW FormatMessageW FreeLibrary FreeResource GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameW GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetDiskFreeSpaceW GetDriveTypeW GetEnvironmentStrings GetEnvironmentVariableW GetExitCodeThread GetFileAttributesA GetFileAttributesW GetFileSize GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeW GetSystemDefaultUILanguage GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadLocale GetThreadPriority GetTickCount GetUserDefaultUILanguage GetVersion GetVersionExW GetWindowsDirectoryA GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GlobalFindAtomW GlobalFree GlobalLock GlobalMemoryStatus GlobalSize GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection InterlockedCompareExchange InterlockedExchangeAdd IsDBCSLeadByteEx IsDebuggerPresent IsValidCodePage IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFileTimeToFileTime LocalFree LockResource MapViewOfFile MulDiv MultiByteToWideChar OpenFileMappingA OpenProcess QueryPerformanceCounter RaiseException ReadFile ReadProcessMemory RemoveDirectoryW ResetEvent ResumeThread RtlUnwind SetConsoleCtrlHandler SetEndOfFile SetErrorMode SetEvent SetFileAttributesW SetFilePointer SetHandleCount SetLastError SetThreadLocale SetThreadPriority SignalObjectAndWait SizeofResource Sleep SuspendThread SwitchToThread SystemTimeToFileTime TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualAllocEx VirtualFree VirtualFreeEx VirtualQuery VirtualQueryEx WaitForMultipleObjectsEx WaitForSingleObject WideCharToMultiByte WriteFile lstrcatA lstrcmpW lstrcmpiA lstrcpyW lstrcpynW lstrlenA lstrlenW

version

GetFileVersionInfoW VerQueryValueW

winspool.drv

DocumentPropertiesW EnumPrintersW ord203 OpenPrinterW

comctl32

ImageList_Copy ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_DrawEx ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIconSize ImageList_GetImageCount ImageList_GetImageInfo ImageList_LoadImageW ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetIconSize ImageList_SetImageCount ImageList_SetOverlayImage ImageList_Write ord17 InitializeFlatSB

gdi32

CreateHalftonePalette CreateICW CreatePalette CreatePenIndirect CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject Ellipse EndDoc EndPage EnumFontFamiliesExW EnumFontsW ExcludeClipRect ExtCreatePen ExtCreateRegion ExtFloodFill ExtTextOutW FrameRgn GdiFlush GetBitmapBits GetBitmapDimensionEx GetBrushOrgEx GetClipBox GetCurrentObject GetCurrentPositionEx GetDCOrgEx GetDIBColorTable GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileDescriptionW GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetGlyphOutlineW GetGraphicsMode GetNearestPaletteIndex GetObjectW GetPaletteEntries GetPixel GetRgnBox GetStockObject GetSystemPaletteEntries GetTextExtentPoint32W GetTextExtentPointW GetTextMetricsW GetViewportOrgEx GetWinMetaFileBits GetWindowOrgEx IntersectClipRect LineDDA LineTo MaskBlt ModifyWorldTransform MoveToEx PatBlt Pie PlayEnhMetaFile PolyBezierTo Polygon Polyline RealizePalette RectVisible Rectangle ResizePalette RestoreDC RoundRect SaveDC SelectClipRgn SelectObject SelectPalette SetAbortProc SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetDIBits SetEnhMetaFileBits SetGraphicsMode SetPaletteEntries SetPixelV SetROP2 SetStretchBltMode SetTextAlign SetTextColor SetViewportOrgEx SetWinMetaFileBits SetWindowOrgEx SetWorldTransform StartDocW StartPage StretchBlt StretchDIBits TextOutW UnrealizeObject

user32

ClientToScreen CloseClipboard CopyIcon CopyImage CopyRect CreateAcceleratorTableW CreateCaret CreateIconIndirect CreateMenu CreatePopupMenu CreateWindowExW DefFrameProcW DefMDIChildProcW DefWindowProcW DeleteMenu DestroyCaret DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawEdge DrawFocusRect DrawFrameControl DrawIconEx DrawMenuBar DrawTextExW DrawTextW EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EnumChildWindows EnumClipboardFormats EnumThreadWindows EnumWindows FillRect FindWindowExW FindWindowW FrameRect GetActiveWindow GetAsyncKeyState GetCapture GetClassInfoW GetClassLongW GetClassNameW GetClientRect GetClipboardData GetClipboardFormatNameW GetCursorPos GetDCEx GetDesktopWindow GetDlgItemTextA GetDlgItemTextW GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextW GetKeyState GetKeyboardLayoutList GetKeyboardLayoutNameW GetKeyboardState GetLastActivePopup GetMenuItemCount GetMenuItemID GetMenuItemInfoW GetMenuItemRect GetMenuState GetMenuStringW GetMessageExtraInfo GetMessagePos GetMessageW GetParent GetPropW GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColorBrush GetSystemMetrics GetTopWindow GetWindowDC GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId GetWindowWord HideCaret InflateRect InsertMenuItemW InsertMenuW IntersectRect InvalidateRect IsChild IsClipboardFormatAvailable IsDialogMessageA IsDialogMessageW IsIconic IsRectEmpty IsWindowEnabled IsWindowUnicode IsWindowVisible IsZoomed KillTimer LoadBitmapW LoadCursorW LoadIconW LoadImageA LoadKeyboardLayoutW LoadStringW MapVirtualKeyW MapWindowPoints MessageBeep MessageBoxA MessageBoxIndirectW MessageBoxW MoveWindow MsgWaitForMultipleObjectsEx OffsetRect OpenClipboard PeekMessageA PeekMessageW PostMessageW PostQuitMessage PtInRect RedrawWindow RegisterClassW RegisterClipboardFormatW RegisterWindowMessageW ReleaseCapture ReleaseDC RemoveMenu RemovePropW ScreenToClient ScrollWindow SendDlgItemMessageW SendMessageA SendMessageW SetActiveWindow SetCapture SetCaretPos SetClassLongW SetClipboardData SetCursorPos SetFocus SetForegroundWindow SetMenuItemInfoW SetParent SetPropW SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowCaret ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoW TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnregisterClassW UpdateWindow ValidateRect WaitMessage WindowFromDC wsprintfA GetSystemMenu

ole32

OleInitialize OleUninitialize ProgIDFromCLSID StgCreateDocfile StringFromCLSID

oleaut32

GetErrorInfo SafeArrayPutElement SafeArrayUnaccessData SysAllocStringLen SysFreeString SysReAllocStringLen VariantChangeType VariantClear VariantCopyInd VariantInit

Name

.text

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

14.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

310KB

Virtual Size

309KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.relod

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

399edfa62137f82f7a9eac56f24b2b02

advapi32

kernel32

version

winspool.drv

comctl32

gdi32

user32

ole32

oleaut32

generic