4a5da3a41402028f1ab9a5bf4f70d8d2

Sharing

Copy URL Twitter E-mail

General

Target
4a5da3a41402028f1ab9a5bf4f70d8d2
Size 1.2MB
Sample240108-eebq5abfc6
SHA256 c649fcbd206ba1ae9419c3a80aea1d9762ced8df1ad7386b03c962403a13656e
MD5 4a5da3a41402028f1ab9a5bf4f70d8d2
SHA1 c7af71e6514764f7bf00516cf64f568b400034d6
SHA512 d03070778fd7e921e63c555d0db5cc40afc1a41253349b383d14436d8e3eb166d3ca64f339113382079056528e1334af4e82afbcf2be22eaa055a26df6c0ee25
SSDEEP 24576:p+Y4LzLis/XpASZviycBm7PQnz76CU7/wOc+KGYRLAY1ZrPVhSbw5a:p+YQWcpAlyf7PQz72zc+KGYRpzPIw5a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a5da3a41402028f1ab9a5bf4f70d8d2

File Explorer

4a5da3a41402028f1ab9a5bf4f70d8d2

.exe 1.2MB

4a5da3a41402028f1ab9a5bf4f70d8d2

IMPHASH 1944dfd2522768e48947087dad9abcf2
SHA256 c649fcbd206ba1ae9419c3a80aea1d9762ced8df1ad7386b03c962403a13656e
MD5 4a5da3a41402028f1ab9a5bf4f70d8d2
SHA1 c7af71e6514764f7bf00516cf64f568b400034d6
SHA512 d03070778fd7e921e63c555d0db5cc40afc1a41253349b383d14436d8e3eb166d3ca64f339113382079056528e1334af4e82afbcf2be22eaa055a26df6c0ee25
SSDEEP 24576:p+Y4LzLis/XpASZviycBm7PQnz76CU7/wOc+KGYRLAY1ZrPVhSbw5a:p+YQWcpAlyf7PQz72zc+KGYRpzPIw5a
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysAllocStringLen GetActiveObject SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantInit

advapi32

RegCloseKey RegEnumKeyExA RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegCloseKey LookupPrivilegeValueA GetUserNameA CloseServiceHandle

user32

GetKeyboardType LoadStringA MessageBoxA CreateWindowExA WindowFromPoint WindowFromDC WaitMessage ValidateRect UpdateWindow UnregisterClassA UnionRect UnhookWindowsHookEx TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW SystemParametersInfoA ShowWindow ShowScrollBar ShowOwnedPopups SetWindowRgn SetWindowsHookExA SetWindowTextA SetWindowPos SetWindowPlacement SetWindowLongW SetWindowLongA SetScrollRange SetScrollPos SetScrollInfo SetRectEmpty SetRect SetPropA SetParent SetMenuItemInfoA SetMenu SetKeyboardState SetForegroundWindow SetFocus SetCursor SetClipboardData SetClassLongA SetCaretPos SetCapture SetActiveWindow SendNotifyMessageA SendMessageW SendMessageA ScrollWindowEx ScrollWindow ScreenToClient RemovePropA RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageA RegisterHotKey RegisterClipboardFormatA RegisterClassA RedrawWindow PtInRect PostThreadMessageA PostQuitMessage PeekMessageW PeekMessageA OpenClipboard OffsetRect OemToCharA MoveWindow MessageBoxA MapWindowPoints MapVirtualKeyA LoadStringA LoadKeyboardLayoutA LoadImageA LoadIconA LoadCursorA LoadBitmapA KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageW IsDialogMessageA IsChild IsCharUpperA IsCharAlphaNumericA IsCharAlphaA InvalidateRgn InvalidateRect IntersectRect InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId GetWindowTextLengthW GetWindowTextW GetWindowRgn GetWindowRect GetWindowPlacement GetWindowLongW GetWindowLongA GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetScrollBarInfo GetPropA GetParent GetWindow GetMessageTime GetMessagePos GetMenuStringA GetMenuState GetMenuItemRect GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameA GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextA GetForegroundWindow GetFocus GetDoubleClickTime GetDlgItem GetDesktopWindow GetDCEx GetDC GetCursor GetClipboardData GetClientRect GetClassNameA GetClassLongA GetClassInfoA GetCaretPos GetCapture GetActiveWindow FrameRect FindWindowExA FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EnumDisplaySettingsA EnumClipboardFormats EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextA DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DrawAnimatedRects DispatchMessageW DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DestroyCaret DeleteMenu DefWindowProcA DefMDIChildProcA DefFrameProcA CreatePopupMenu CreateMenu CreateIcon CreateCaret CopyRect CopyImage CloseClipboard ClientToScreen ChildWindowFromPoint CheckMenuItem ChangeDisplaySettingsA CallWindowProcA CallNextHookEx BeginPaint AttachThreadInput CharNextA CharLowerBuffA CharLowerA CharUpperBuffA CharUpperA CharToOemA AdjustWindowRectEx ActivateKeyboardLayout BlockInput

kernel32

GetACP Sleep VirtualFree VirtualAlloc GetTickCount QueryPerformanceCounter InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrcpynA GetThreadLocale GetStartupInfoA GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLastError FindFirstFileA FindClose ExitProcess ExitThread CompareStringA WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException GetFileSize GetFileType CreateFileA CloseHandle TlsSetValue lstrcmpA lstrcatA WriteFile WideCharToMultiByte WaitForSingleObject VirtualQuery VirtualProtect VirtualFree VirtualAlloc UnmapViewOfFile TerminateThread TerminateProcess Sleep SizeofResource SetThreadPriority SetThreadLocale SetProcessPriorityBoost SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReleaseMutex ReadFile OpenProcess OpenMutexA MultiByteToWideChar MulDiv MoveFileExA MoveFileA MapViewOfFile LoadResource LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalSize GlobalMemoryStatus GlobalLock GlobalFree GlobalFindAtomA GlobalDeleteAtom GlobalAlloc GlobalAddAtomA GetVolumeInformationA GetVersionExA GetVersion GetUserDefaultLCID GetThreadPriority GetThreadLocale GetStringTypeExA GetStdHandle GetShortPathNameA GetModuleHandleA GetModuleFileNameA GetLogicalDrives GetLocaleInfoA GetLocalTime GetLastError GetFullPathNameA GetFileSize GetExitCodeThread GetEnvironmentVariableA GetDriveTypeA GetDiskFreeSpaceExA GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetComputerNameA GetCPInfo GetACP FreeResource InterlockedIncrement InterlockedExchange InterlockedDecrement FreeLibrary FormatMessageA FindResourceA FindNextFileA FindFirstFileA FindClose FileTimeToLocalFileTime FileTimeToDosDateTime ExpandEnvironmentStringsA ExitThread EnumCalendarInfoA EnterCriticalSection DeleteFileA DeleteCriticalSection CreateThread CreateProcessA CreateMutexA CreateFileMappingA CreateFileA CreateEventA CreateDirectoryA CopyFileA CompareStringW CompareStringA CloseHandle Beep Sleep GetVersionExA MulDiv

gdi32

UnrealizeObject StretchBlt SetWindowOrgEx SetWindowExtEx SetWinMetaFileBits SetViewportOrgEx SetViewportExtEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetMapMode SetEnhMetaFileBits SetBkMode SelectPalette SelectObject SelectClipRgn SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline PolyPolyline PlayEnhMetaFile PatBlt MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsA GetTextExtentPointA GetTextExtentPoint32A GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectA GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionA GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetBrushOrgEx GetBitmapDimensionEx GetBitmapBits GdiFlush FrameRgn FillRgn ExtTextOutA ExtCreatePen ExcludeClipRect Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRoundRectRgn CreateRectRgn CreatePolygonRgn CreatePenIndirect CreatePen CreatePalette CreateHalftonePalette CreateFontIndirectW CreateFontIndirectA CreateEnhMetaFileA CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileA CombineRgn CloseEnhMetaFile BitBlt TranslateCharsetInfo

version

VerQueryValueA

ole32

IsAccelerator OleSetMenuDescriptor OleUninitialize OleInitialize StringFromCLSID CoInitialize IsEqualGUID

comctl32

UninitializeFlatSB InitializeFlatSB _TrackMouseEvent ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_BeginDrag ImageList_GetIcon ImageList_DrawEx ImageList_Replace ImageList_GetBkColor ImageList_ReplaceIcon ImageList_SetImageCount ImageList_Create InitCommonControls

wininet

HttpQueryInfoA

shell32

ShellExecuteExA ExtractIconA SHGetMalloc SHChangeNotify

comdlg32

GetOpenFileNameA

urlmon

URLOpenStreamA

winmm

sndPlaySoundA

msimg32

GradientFill

Name

.text

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

88B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4a5da3a41402028f1ab9a5bf4f70d8d2

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

wininet

shell32

comdlg32

urlmon

winmm

msimg32

generic