0fee8335337e5fc0d2cd12b42aca1885eca64017aac2177febb56e53ef930298

General

Target
0fee8335337e5fc0d2cd12b42aca1885eca64017aac2177febb56e53ef930298
Size 266KB
Sample240118-3hmjssgcdr
SHA256 0fee8335337e5fc0d2cd12b42aca1885eca64017aac2177febb56e53ef930298
MD5 64d70c804f9e760d8ad07eb5729ae2df
SHA1 74314f68e28230f1fbb847fdf49086207841e931
SHA512 fec50549d73667a0c80cd211fd77193e188539cc2cce91f364c3de9d161a37b1e924ce22df004fdfe8f80feeb4fbf56f2c7c85909913bed73d039e3a50b17fd6
SSDEEP 3072:BcVe9bRSdAea6oA39hLvTHiqmETwXjuM+yMujuDBl8V/dA2C8oY46lh2SV8hUS8O:uIuueBRthbTCqmETCjuMpMa7ohrhE+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fee8335337e5fc0d2cd12b42aca1885eca64017aac2177febb56e53ef930298

File Explorer

0fee8335337e5fc0d2cd12b42aca1885eca64017aac2177febb56e53ef930298

.dll 266KB

0fee8335337e5fc0d2cd12b42aca1885eca64017aac2177febb56e53ef930298

IMPHASH e2869406c178dfc0ba8b86260d775291
SHA256 0fee8335337e5fc0d2cd12b42aca1885eca64017aac2177febb56e53ef930298
MD5 64d70c804f9e760d8ad07eb5729ae2df
SHA1 74314f68e28230f1fbb847fdf49086207841e931
SHA512 fec50549d73667a0c80cd211fd77193e188539cc2cce91f364c3de9d161a37b1e924ce22df004fdfe8f80feeb4fbf56f2c7c85909913bed73d039e3a50b17fd6
SSDEEP 3072:BcVe9bRSdAea6oA39hLvTHiqmETwXjuM+yMujuDBl8V/dA2C8oY46lh2SV8hUS8O:uIuueBRthbTCqmETCjuMpMa7ohrhE+
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

62392

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

VirtualProtect GetProcAddress GetCurrentProcess GetModuleHandleA Sleep CloseHandle CreateThread ReadProcessMemory IsBadReadPtr GetPrivateProfileStringA EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetComputerNameA WriteConsoleW SetEndOfFile HeapSize SetStdHandle CreateFileW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc ReadConsoleW WideCharToMultiByte InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetFileType FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx RtlUnwind

user32

SetCursorPos FindWindowA mouse_event MessageBoxA GetAsyncKeyState ShowWindow

d3dx9_42

D3DXVec3Project

ws2_32

socket closesocket htons recv connect inet_addr send WSAStartup

Name

.text

Size

174KB

Virtual Size

173KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

73KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

584B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0fee8335337e5fc0d2cd12b42aca1885eca64017aac2177febb56e53ef930298

kernel32

user32

d3dx9_42

ws2_32

generic