686ead54f11ad7a199730fa54bd87917

Sharing

Copy URL Twitter E-mail

General

Target
686ead54f11ad7a199730fa54bd87917
Size 3.5MB
Sample240119-x2fbyacbbr
SHA256 157dba446a7b409cd3c0b7b59b764fde1820a4c8c7431a2ea28e841ec9ea5056
MD5 686ead54f11ad7a199730fa54bd87917
SHA1 c45300b31ef01134e50004809d5e945c10ef6f21
SHA512 46cb02ef280e20b25201edb1d7fb0ab7752ea573c492e23c49421a931a60bd8ab700cd5fe851bbf71232cbe3627ac903a6133aaccd53111b8f8cc4d06caf2e39
SSDEEP 12288:2VI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:rfP7fWsK5z9A+WGAW+V5SB6Ct4bnb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
686ead54f11ad7a199730fa54bd87917

File Explorer

686ead54f11ad7a199730fa54bd87917

.dll 3.5MB

686ead54f11ad7a199730fa54bd87917

IMPHASH 6668be91e2c948b183827f040944057f
SHA256 157dba446a7b409cd3c0b7b59b764fde1820a4c8c7431a2ea28e841ec9ea5056
MD5 686ead54f11ad7a199730fa54bd87917
SHA1 c45300b31ef01134e50004809d5e945c10ef6f21
SHA512 46cb02ef280e20b25201edb1d7fb0ab7752ea573c492e23c49421a931a60bd8ab700cd5fe851bbf71232cbe3627ac903a6133aaccd53111b8f8cc4d06caf2e39
SSDEEP 12288:2VI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:rfP7fWsK5z9A+WGAW+V5SB6Ct4bnb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

266352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

BeginBufferedAnimation BeginBufferedPaint BeginPanningFeedback BufferedPaintClear BufferedPaintInit BufferedPaintRenderAnimation BufferedPaintSetAlpha BufferedPaintStopAllAnimations BufferedPaintUnInit CloseThemeData DllCanUnloadNow DllGetActivationFactory DllGetClassObject DrawThemeBackground DrawThemeBackgroundEx DrawThemeEdge DrawThemeIcon DrawThemeParentBackground DrawThemeParentBackgroundEx DrawThemeText DrawThemeTextEx EnableThemeDialogTexture EnableTheming EndBufferedAnimation EndBufferedPaint EndPanningFeedback GetBufferedPaintBits GetBufferedPaintDC GetBufferedPaintTargetDC GetBufferedPaintTargetRect GetColorFromPreference GetCurrentThemeName GetImmersiveColorFromColorSetEx GetImmersiveUserColorSetPreference GetThemeAnimationProperty GetThemeAnimationTransform GetThemeAppProperties GetThemeBackgroundContentRect GetThemeBackgroundExtent GetThemeBackgroundRegion GetThemeBitmap GetThemeBool GetThemeColor GetThemeDocumentationProperty GetThemeEnumValue GetThemeFilename GetThemeFont GetThemeInt GetThemeIntList GetThemeMargins GetThemeMetric GetThemePartSize GetThemePosition GetThemePropertyOrigin GetThemeRect GetThemeStream GetThemeString GetThemeSysBool GetThemeSysColor GetThemeSysColorBrush GetThemeSysFont GetThemeSysInt GetThemeSysSize GetThemeSysString GetThemeTextExtent GetThemeTextMetrics GetThemeTimingFunction GetThemeTransitionDuration GetUserColorPreference GetWindowTheme HitTestThemeBackground IsAppThemed IsCompositionActive IsThemeActive IsThemeBackgroundPartiallyTransparent IsThemeDialogTextureEnabled IsThemePartDefined OpenThemeData OpenThemeDataEx OpenThemeDataForDpi SetThemeAppProperties SetWindowTheme SetWindowThemeAttribute ThemeInitApiHook UpdatePanningFeedback

Name

.text

Size

260KB

Virtual Size

257KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

404KB

Virtual Size

403KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

96KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.qkm

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.cvjb

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tlmkv

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wucsxe

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fltwtj

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sfplio

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rpg

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bewzc

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vksvaw

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wmhg

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kswemc

Size

4KB

Virtual Size

877B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kaxfk

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pjf

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.favk

Size

4KB

Virtual Size

503B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vhtukj

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jwgahx

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.siz

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.mmeo

Size

4KB

Virtual Size

431B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jvl

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.dyumh

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.osdi

Size

4KB

Virtual Size

503B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ijvykn

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.cycua

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gbg

Size

4KB

Virtual Size

431B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jfzbof

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.zljqze

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.mrppt

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lnv

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nin

Size

4KB

Virtual Size

802B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idki

Size

4KB

Virtual Size

262B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ojq

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.dlg

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hkak

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ozcb

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wrpdh

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.acnbeq

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gguokl

Size

4KB

Virtual Size

571B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.mtuv

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rxc

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.cyyk

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.cnz

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kwk

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vagema

Size

4KB

Virtual Size

318B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.uyodk

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gpyk

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.yzklf

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bli

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.woo

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.asrjf

Size

4KB

Virtual Size

318B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.niohzj

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ilw

Size

4KB

Virtual Size

905B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.uqzkty

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rpl

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=483, id=204, productName=VS2012 UPD4 build 61030, version=61030,

count=354, id=261, productName=VS2015 UPD1 build 23506, version=23506,

count=443, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=483, id=223, productName=VS2013 UPD2 build 30501, version=30501,

count=80, id=225, productName=VS2013 UPD4 build 31101, version=31101,

count=256, id=224, productName=VS2013 UPD4 build 31101, version=31101,

count=161, id=260, productName=VS2017 v15.5.4 build 25834, version=25834,

count=478, id=158, productName=VS2010 build 30319, version=30319,

count=475, id=201, productName=VS2012 UPD3 build 60610, version=60610,

count=389, id=258, productName=VS2017 v15.5.4 build 25834, version=25834,

count=133, id=206, productName=VS2012 UPD2 build 60315, version=60315,

count=405, id=256, productName=VS2015 UPD1 build 23506, version=23506,

count=491, id=201, productName=VS2012 UPD4 build 61030, version=61030,

count=144, id=204, productName=VS2012 UPD2 build 60315, version=60315,

count=495, id=204, productName=VS2012 UPD2 build 60315, version=60315,

count=424, id=206, productName=VS2012 build 50727, version=50727,

count=171, id=222, productName=VS2013 UPD5 build 40629, version=40629,

count=194, id=147, productName=VS2008 build 21022, version=21022,

count=122, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,

count=180, id=203, productName=VS2012 UPD1 build 51106, version=51106,

count=302, id=1, productName=Unmarked objects,

count=142, id=145, productName=VS2008 build 21022, version=21022,

count=58, id=257, productName=VS2015 [14.0] build 23026, version=23026,

686ead54f11ad7a199730fa54bd87917

user32

setupapi

kernel32

gdi32

crypt32

advapi32

shlwapi

generic