4a6c04ed816dd24e716de805c5acf354

Sharing

Copy URL Twitter E-mail

General

Target
4a6c04ed816dd24e716de805c5acf354
Size 32KB
Sample240108-ex14qscab4
SHA256 dc17b2c65dcd0675013eeaba3d1f09940c054d07cb51a9a5c4fa8f372e2877f1
MD5 4a6c04ed816dd24e716de805c5acf354
SHA1 7e517d1be090dbcad568ae8a1ec688dbb3b80ee1
SHA512 0ce4a81e9b6a60858a7ebbc22c7f16f73f525f9c46ecb9cef81b19bb59393cc201a5bb49d0fa4192030f631dd44321a2a3ff643f29413f6e0587e189fe90290e
SSDEEP 768:tZ2I7fc/zqbCP7yvReKERlhCDglRbBWbkhQ:t0Iw/zqA7QReKED8klRbBWbiQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a6c04ed816dd24e716de805c5acf354

File Explorer

4a6c04ed816dd24e716de805c5acf354

.dll 32KB

4a6c04ed816dd24e716de805c5acf354

IMPHASH 2642b364e27835a51be8c4ccd0c1cfa4
SHA256 dc17b2c65dcd0675013eeaba3d1f09940c054d07cb51a9a5c4fa8f372e2877f1
MD5 4a6c04ed816dd24e716de805c5acf354
SHA1 7e517d1be090dbcad568ae8a1ec688dbb3b80ee1
SHA512 0ce4a81e9b6a60858a7ebbc22c7f16f73f525f9c46ecb9cef81b19bb59393cc201a5bb49d0fa4192030f631dd44321a2a3ff643f29413f6e0587e189fe90290e
SSDEEP 768:tZ2I7fc/zqbCP7yvReKERlhCDglRbBWbkhQ:t0Iw/zqA7QReKED8klRbBWbiQ
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateThread WaitForSingleObject ReadFile GetFileSize SetFilePointer GetLastError CreateEventA GetModuleFileNameA GetTempPathA GetWindowsDirectoryA GetSystemDirectoryA SetFileAttributesA GetCommandLineA MultiByteToWideChar GlobalLock CreateFileA WriteFile GlobalUnlock GlobalFree CloseHandle GlobalAlloc GetCurrentDirectoryA DeleteFileA GetModuleHandleA Sleep ExitProcess IsBadReadPtr LoadLibraryA GetProcAddress VirtualProtect

user32

GetDesktopWindow GetClientRect CallWindowProcA GetClassNameA SetWindowLongA RegisterShellHookWindow RegisterWindowMessageA GetDC wsprintfA ReleaseDC EnumWindows GetKeyboardState MapVirtualKeyA GetWindowTextA ToAscii GetParent GetWindowThreadProcessId GetWindowRect

gdi32

CreateDCA GetDeviceCaps DeleteDC GetObjectA GetStockObject DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetDIBits RealizePalette SelectPalette

gdiplus

GdipDisposeImage GdipLoadImageFromFile GdiplusStartup GdipGetImageEncoders GdipGetImageEncodersSize GdipFree GdipAlloc GdipCloneImage GdiplusShutdown GdipSaveImageToFile

msvcp60

??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ

ws2_32

connect htons gethostbyname socket recv inet_ntoa WSAStartup send WSACleanup inet_addr closesocket

wininet

InternetReadFile InternetOpenUrlA InternetOpenA InternetCloseHandle

msvcrt

strrchr _access strcat strchr atoi strncpy strstr abs malloc free __dllonexit _onexit _initterm _adjust_fdiv _getpid _stricmp _strlwr _strrev wcscmp ??2@YAPAXI@Z __CxxFrameHandler strtok sprintf strlen strcmp memset strcpy memcpy

netapi32

Netbios

Sharing

General

Malware Config

Signatures

File Explorer

4a6c04ed816dd24e716de805c5acf354

kernel32

user32

gdi32

gdiplus

msvcp60

ws2_32

wininet

msvcrt

netapi32

generic