a8bf8166c67cc2445b507916624dc2c9[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a8bf8166c67cc2445b507916624dc2c9.exe
Size 260KB
Sample240107-yb6a4sdfb7
SHA256 4451d9d0075891bd96dc577628c0cfbf17a905cd7357e9e0038726c407ab576f
MD5 a8bf8166c67cc2445b507916624dc2c9
SHA1 6ce3ceea9fd43f9b9f5519545dcd3dee84f1075e
SHA512 42579b291bb643b389bed051ec0045f9616856eaaa19f703dede3e0e382f60305279325974d0e6a5d6af321d1ace8f8219aca316a795ac034ec0f682887f2675
SSDEEP 6144:0tX21Y7+PO6hIKxeYBy4GPIRMKFpIq7EbjkUvudrhTl:ChIhIKxeRHPI7FpwbjkMWhTl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8bf8166c67cc2445b507916624dc2c9.exe

File Explorer

a8bf8166c67cc2445b507916624dc2c9.exe

.exe 260KB

a8bf8166c67cc2445b507916624dc2c9.exe

IMPHASH 1dd3af5a7c39a505d5c1756e3f30a4aa
SHA256 4451d9d0075891bd96dc577628c0cfbf17a905cd7357e9e0038726c407ab576f
MD5 a8bf8166c67cc2445b507916624dc2c9
SHA1 6ce3ceea9fd43f9b9f5519545dcd3dee84f1075e
SHA512 42579b291bb643b389bed051ec0045f9616856eaaa19f703dede3e0e382f60305279325974d0e6a5d6af321d1ace8f8219aca316a795ac034ec0f682887f2675
SSDEEP 6144:0tX21Y7+PO6hIKxeYBy4GPIRMKFpIq7EbjkUvudrhTl:ChIhIKxeRHPI7FpwbjkMWhTl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetThreadLocale HeapDestroy HeapReAlloc HeapSize IsProcessorFeaturePresent VirtualFree VirtualAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime DeleteFileW GlobalFree FatalAppExitW WideCharToMultiByte CreateThread lstrcpyW GlobalAlloc GlobalLock GlobalUnlock lstrcpynW lstrcmpiW GetCurrentThreadId SetLastError FlushInstructionCache OpenEventW WaitForSingleObject CloseHandle FreeLibrary LoadLibraryExW LocalFree FormatMessageW lstrlenW HeapAlloc GetProcessHeap RaiseException HeapFree GetUserDefaultLangID FindFirstFileW FindClose FindResourceExW FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetACP LocalAlloc GetVersion GetProcAddress

user32

MessageBoxW IsWindow MapWindowPoints GetDlgItem GetTopWindow SetDlgItemTextW ShowWindow ScreenToClient SetWindowPlacement GetWindowPlacement GetClientRect GetWindowRect GetWindow SetClipboardData OffsetRect ReleaseCapture GetCapture SetCapture CopyRect IsRectEmpty InflateRect DrawTextW EndDialog DestroyWindow MapDialogRect UnregisterClassA GetSystemMetrics GetParent CloseClipboard CallNextHookEx GetFocus DefWindowProcW SetWindowsHookExW GetDC ReleaseDC GetClassNameW RedrawWindow PtInRect SetRectEmpty SetCursor GetCursorPos BeginPaint EndPaint PostMessageW InvalidateRect SetTimer KillTimer GetDlgCtrlID DrawFocusRect CallWindowProcW GetWindowDC IsCharAlphaNumericW DrawIconEx GetTabbedTextExtentW SetForegroundWindow DrawStateW TabbedTextOutW SetFocus CreateWindowExW IsWindowEnabled GetKeyState OpenClipboard EmptyClipboard GetActiveWindow GetNextDlgTabItem UnhookWindowsHookEx SetWindowPos MoveWindow GetWindowTextLengthW GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW SystemParametersInfoW DestroyIcon LoadImageW DialogBoxParamW SetWindowLongW GetSysColor LoadCursorW

gdi32

Polygon ExtCreatePen SetROP2 GetBkColor SetViewportOrgEx SetTextAlign TextOutW GetTextExtentExPointW CreateCompatibleDC SetTextColor CombineRgn CreateRectRgn RoundRect GetClipRgn SelectClipRgn BitBlt PtInRegion CreateRectRgnIndirect CreateCompatibleBitmap DeleteDC SetBkColor ExtTextOutW GetTextExtentPoint32W SetBkMode GetTextMetricsW SelectObject GetStockObject GetObjectType GetObjectW CreateSolidBrush CreateFontIndirectW CreatePen DeleteObject

advapi32

RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW

shell32

ShellExecuteExW SHGetSpecialFolderPathW

ole32

CoCreateInstance CreateStreamOnHGlobal

oleaut32

SysStringLen VarBstrCmp VariantClear DispCallFunc GetErrorInfo SysFreeString SysAllocStringLen SafeArrayUnlock SafeArrayGetLBound SafeArrayGetUBound SafeArrayLock SysAllocString SafeArrayCreate SafeArrayDestroy VariantInit SysAllocStringByteLen SysStringByteLen

shlwapi

StrChrW ColorAdjustLuma

comctl32

ImageList_GetImageCount ImageList_Create ImageList_ReplaceIcon ImageList_Draw _TrackMouseEvent ImageList_GetIcon InitCommonControlsEx ImageList_Destroy

msimg32

GradientFill

msoert2

PszAllocA

iaspolcy

DllUnregisterServer

Name

.text

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.YqVRuz

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sa

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.UFR

Size

512B

Virtual Size

307B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aUI

Size

1024B

Virtual Size

819B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

212KB

Virtual Size

306KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1024B

Virtual Size

791B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a8bf8166c67cc2445b507916624dc2c9.exe

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

msoert2

iaspolcy

generic