54fd51085eb924ce2458f6c70d3aad53

Sharing

Copy URL Twitter E-mail

General

Target
54fd51085eb924ce2458f6c70d3aad53
Size 1.9MB
Sample240112-ar2qvscag2
SHA256 b43af2aa7b2e5b040640b5cedd431aa70e064ceb96e2a9ba941f40e2b3eebcd2
MD5 54fd51085eb924ce2458f6c70d3aad53
SHA1 3829997a0109a65c5f1b6cf080c3a27d0ba71a27
SHA512 ed4bef9f43a65325a888798518288653084d95589d1fe2c43218884fbb2b3402a56e7ee9f65f21ef7570c04454eec7370a16250592f5017d56ab3a4c6c124832
SSDEEP 12288:lVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1z:8fP7fWsK5z9A+WGAW+V5SB6Ct4bnb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54fd51085eb924ce2458f6c70d3aad53

File Explorer

54fd51085eb924ce2458f6c70d3aad53

.dll 1.9MB

54fd51085eb924ce2458f6c70d3aad53

IMPHASH 6668be91e2c948b183827f040944057f
SHA256 b43af2aa7b2e5b040640b5cedd431aa70e064ceb96e2a9ba941f40e2b3eebcd2
MD5 54fd51085eb924ce2458f6c70d3aad53
SHA1 3829997a0109a65c5f1b6cf080c3a27d0ba71a27
SHA512 ed4bef9f43a65325a888798518288653084d95589d1fe2c43218884fbb2b3402a56e7ee9f65f21ef7570c04454eec7370a16250592f5017d56ab3a4c6c124832
SSDEEP 12288:lVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1z:8fP7fWsK5z9A+WGAW+V5SB6Ct4bnb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

266352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

AddGadgetMessageHandler AddLayeredRef AdjustClipInsideRef AttachWndProcA AttachWndProcW AutoTrace BeginHideInputPaneAnimation BeginShowInputPaneAnimation BuildAnimation BuildDropTarget BuildInterpolation CacheDWriteRenderTarget ChangeCurrentAnimationScenario ClearPushedOpacitiesFromGadgetTree ClearTopmostVisual CreateAction CreateGadget CustomGadgetHitTestQuery DUserBuildGadget DUserCastClass DUserCastDirect DUserCastHandle DUserDeleteGadget DUserFindClass DUserFlushDeferredMessages DUserFlushMessages DUserGetAlphaPRID DUserGetGutsData DUserGetRectPRID DUserGetRotatePRID DUserGetScalePRID DUserInstanceOf DUserPostEvent DUserPostMethod DUserRegisterGuts DUserRegisterStub DUserRegisterSuper DUserSendEvent DUserSendMethod DUserStopAnimation DUserStopPVLAnimation DeleteHandle DestroyPendingDCVisuals DetachGadgetVisuals DetachWndProc DisableContainerHwnd DllMain DrawGadgetTree EndInputPaneAnimation EnsureAnimationsEnabled EnsureGadgetTransInitialized EnumGadgets FindGadgetFromPoint FindGadgetMessages FindGadgetTargetingInfo FindStdColor FireGadgetMessages ForwardGadgetMessage FreeGdiDxInteropStagingBuffer GadgetTransCompositionChanged GadgetTransSettingChanged GetActionTimeslice GetCachedDWriteRenderTarget GetDUserModule GetDebug GetFinalAnimatingPosition GetGadget GetGadgetAnimation GetGadgetBitmap GetGadgetBufferInfo GetGadgetCenterPoint GetGadgetFlags GetGadgetFocus GetGadgetLayerInfo GetGadgetMessageFilter GetGadgetProperty GetGadgetRect GetGadgetRgn GetGadgetRootInfo GetGadgetRotation GetGadgetScale GetGadgetSize GetGadgetStyle GetGadgetTicket GetGadgetVisual GetMessageExA GetMessageExW GetStdColorBrushF GetStdColorBrushI GetStdColorF GetStdColorI GetStdColorName GetStdColorPenF GetStdColorPenI GetStdPalette InitGadgetComponent InitGadgets InvalidateGadget InvalidateLayeredDescendants IsGadgetParentChainStyle IsInsideContext IsStartDelete LookupGadgetTicket MapGadgetPoints PeekMessageExA PeekMessageExW RegisterGadgetMessage RegisterGadgetMessageString RegisterGadgetProperty ReleaseDetachedObjects ReleaseLayeredRef ReleaseMouseCapture RemoveClippingImmunityFromVisual RemoveGadgetMessageHandler RemoveGadgetProperty ResetDUserDevice ScheduleGadgetTransitions SetActionTimeslice SetAtlasingHints SetGadgetBufferInfo SetGadgetCenterPoint SetGadgetFillF SetGadgetFillI SetGadgetFlags SetGadgetFocus SetGadgetFocusEx SetGadgetLayerInfo SetGadgetMessageFilter SetGadgetOrder SetGadgetParent SetGadgetProperty SetGadgetRect SetGadgetRootInfo SetGadgetRotation SetGadgetScale SetGadgetStyle SetHardwareDeviceUsage SetMinimumDCompVersion SetRestoreCachedLayeredRefFlag SetTransitionVisualProperties SetWindowResizeFlag UnregisterGadgetMessage UnregisterGadgetMessageString UnregisterGadgetProperty UtilBuildFont UtilDrawBlendRect UtilDrawOutlineRect UtilGetColor UtilSetBackground WaitMessageEx

Name

.text

Size

260KB

Virtual Size

257KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

404KB

Virtual Size

403KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

96KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.qkm

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.cvjb

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tlmkv

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wucsxe

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fltwtj

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sfplio

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rpg

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bewzc

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vksvaw

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wmhg

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kswemc

Size

4KB

Virtual Size

877B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kaxfk

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.efuu

Size

4KB

Virtual Size

905B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xrag

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tnkunj

Size

4KB

Virtual Size

571B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.cdn

Size

4KB

Virtual Size

571B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.qmg

Size

4KB

Virtual Size

571B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wdvl

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lmbi

Size

4KB

Virtual Size

503B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jtdvb

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hdvo

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edezhu

Size

208KB

Virtual Size

205KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.erwmtu

Size

4KB

Virtual Size

461B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.toc

Size

4KB

Virtual Size

461B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wss

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kvdz

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vsvctr

Size

4KB

Virtual Size

802B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.cyzdev

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wso

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ooghkw

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xaep

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kwf

Size

4KB

Virtual Size

571B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.scxi

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gqcuxc

Size

4KB

Virtual Size

318B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.euu

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=483, id=204, productName=VS2012 UPD4 build 61030, version=61030,

count=354, id=261, productName=VS2015 UPD1 build 23506, version=23506,

count=443, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=483, id=223, productName=VS2013 UPD2 build 30501, version=30501,

count=80, id=225, productName=VS2013 UPD4 build 31101, version=31101,

count=256, id=224, productName=VS2013 UPD4 build 31101, version=31101,

count=161, id=260, productName=VS2017 v15.5.4 build 25834, version=25834,

count=478, id=158, productName=VS2010 build 30319, version=30319,

count=475, id=201, productName=VS2012 UPD3 build 60610, version=60610,

count=389, id=258, productName=VS2017 v15.5.4 build 25834, version=25834,

count=133, id=206, productName=VS2012 UPD2 build 60315, version=60315,

count=405, id=256, productName=VS2015 UPD1 build 23506, version=23506,

count=491, id=201, productName=VS2012 UPD4 build 61030, version=61030,

count=144, id=204, productName=VS2012 UPD2 build 60315, version=60315,

count=495, id=204, productName=VS2012 UPD2 build 60315, version=60315,

count=424, id=206, productName=VS2012 build 50727, version=50727,

count=171, id=222, productName=VS2013 UPD5 build 40629, version=40629,

count=194, id=147, productName=VS2008 build 21022, version=21022,

count=122, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,

count=180, id=203, productName=VS2012 UPD1 build 51106, version=51106,

count=302, id=1, productName=Unmarked objects,

count=142, id=145, productName=VS2008 build 21022, version=21022,

count=58, id=257, productName=VS2015 [14.0] build 23026, version=23026,

54fd51085eb924ce2458f6c70d3aad53

user32

setupapi

kernel32

gdi32

crypt32

advapi32

shlwapi

generic