712b82a22dca315bc0b19f33baed894c

Sharing

Copy URL Twitter E-mail

General

Target
712b82a22dca315bc0b19f33baed894c
Size 731KB
Sample240124-cm4e1afggm
SHA256 436c19c528a71225adcee3275fce2704617c6035c34303b6265e14297c8a3aec
MD5 712b82a22dca315bc0b19f33baed894c
SHA1 d16b5b7fbd0ce283d442845845040d93eb81a4d6
SHA512 a10701ab77ac28f582c51d7b9b90fd5775f183b95a793cfc73bfba2928d89b69d28a2271a4df737d4d2d05520757b395aa7c62fcfe55f9409bbc17985c550b34
SSDEEP 12288:TM+ZdkmHubeaCo6zAO0s2A/sUQBJ8lMSVacsb0z:TMcpTo6zhL0BOlDkc1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
712b82a22dca315bc0b19f33baed894c

File Explorer

712b82a22dca315bc0b19f33baed894c

.exe 731KB

712b82a22dca315bc0b19f33baed894c

IMPHASH e5e3df5164492dbdad9aba1734d78933
SHA256 436c19c528a71225adcee3275fce2704617c6035c34303b6265e14297c8a3aec
MD5 712b82a22dca315bc0b19f33baed894c
SHA1 d16b5b7fbd0ce283d442845845040d93eb81a4d6
SHA512 a10701ab77ac28f582c51d7b9b90fd5775f183b95a793cfc73bfba2928d89b69d28a2271a4df737d4d2d05520757b395aa7c62fcfe55f9409bbc17985c550b34
SSDEEP 12288:TM+ZdkmHubeaCo6zAO0s2A/sUQBJ8lMSVacsb0z:TMcpTo6zhL0BOlDkc1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

377680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapDestroy GetStartupInfoA SetHandleCount GetCommandLineW GetCommandLineA GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetStdHandle HeapSize SetStdHandle CreateThread ExitThread VirtualQuery GetSystemInfo VirtualAlloc GetDateFormatA GetTimeFormatA PeekNamedPipe GetFileType TerminateProcess GetSystemTimeAsFileTime HeapReAlloc RtlUnwind GlobalFlags SetErrorMode VirtualProtect TlsFree LocalReAlloc HeapCreate VirtualFree LCMapStringA IsBadWritePtr GetOEMCP GetStringTypeA GetCurrentDirectoryA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale HeapAlloc GetDriveTypeA SetEnvironmentVariableA SetFilePointer GetFileInformationByHandle InterlockedDecrement GlobalSize CreateFileA InterlockedExchange GetACP GetLocaleInfoA FindClose GetTimeZoneInformation MulDiv GetSystemDirectoryA GetWindowsDirectoryA GetModuleFileNameA GetModuleHandleA CompareStringA LocalAlloc LocalLock LocalUnlock SetThreadPriority FreeResource WaitForMultipleObjects ResetEvent QueryPerformanceFrequency QueryPerformanceCounter GetLocalTime GetOverlappedResult WriteFile GetProcessHeap TlsSetValue TlsAlloc TlsGetValue GlobalHandle GlobalReAlloc GetCurrentThread lstrcmpiA ConvertDefaultLocale HeapFree lstrlenA IsBadReadPtr TerminateThread DeviceIoControl Beep SetLastError IsBadCodePtr LocalFree ReadFile InterlockedIncrement SetUnhandledExceptionFilter GetCurrentProcessId ExitProcess SetEvent ResumeThread WritePrivateProfileStringA GetPrivateProfileStringA GetThreadLocale SetThreadLocale GlobalAlloc GlobalFree SetConsoleCtrlHandler GlobalLock GlobalUnlock GetCurrentProcess LoadLibraryA FreeLibrary RaiseException GetFileSize GetTickCount GetCurrentThreadId GetLastError LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection WaitForSingleObject CloseHandle Sleep LoadResource LockResource SizeofResource GetVersion EnumResourceLanguagesW GlobalDeleteAtom GetVersionExA GetFileTime FileTimeToLocalFileTime FileTimeToSystemTime ReleaseMutex DuplicateHandle UnlockFile LockFile FlushFileBuffers SuspendThread lstrcmpA SetEndOfFile CreateHardLinkA CancelDeviceWakeupRequest GetTapeParameters CreateIoCompletionPort DefineDosDeviceA SetMessageWaitingIndicator GetConsoleTitleW GetCommModemStatus SetConsoleCursorInfo GetStringTypeExW UnmapViewOfFile lstrcpyA DosDateTimeToFileTime Process32Next GetProcAddress lstrcatA FindFirstFileA FindNextFileA DeleteFileA OpenProcess Thread32Next CreateToolhelp32Snapshot Process32First Thread32First GetModuleHandleW

user32

wsprintfA IsWindow IsWindowVisible TranslateMessage FrameRect UpdateWindow InvalidateRect CreatePopupMenu CreateIconIndirect CopyRect InflateRect OffsetRect DrawFocusRect GetClientRect GetActiveWindow GetNextDlgTabItem GetParent WindowFromPoint GetDlgItem DestroyWindow MessageBoxA DestroyMenu DestroyCursor SetCursor GetSubMenu SetWindowPos MapWindowPoints ScreenToClient SetForegroundWindow GetCursorPos CloseClipboard PtInRect DrawEdge DrawFrameControl SetRect GetCapture SetCapture ReleaseCapture GetMessagePos GetWindow GetFocus LockWindowUpdate GetDCEx GetNextDlgGroupItem DeleteMenu SetParent UnpackDDElParam ReuseDDElParam SetMenu InvalidateRgn SetWindowContextHelpId MapDialogRect EndDialog ShowOwnedPopups IsWindowEnabled IsDlgButtonChecked SetDlgItemInt GetDlgItemInt GetDesktopWindow GetSysColor FillRect GetClassNameA GetIconInfo GetDC ReleaseDC ClientToScreen GetWindowRect SetTimer ExitWindowsEx KillTimer IsRectEmpty UnhookWindowsHookEx CallNextHookEx EmptyClipboard SetClipboardData EnumWindows GetSystemMetrics RedrawWindow OpenClipboard CheckRadioButton SendDlgItemMessageA GetForegroundWindow GetTopWindow GetMessageTime DestroyIcon GetAsyncKeyState ScrollDC IsChild ChildWindowFromPointEx SubtractRect UnionRect GetLastActivePopup WaitMessage PostQuitMessage CheckDlgButton SetFocus MoveWindow BeginPaint EndPaint GetDialogBaseUnits ShowWindow GetWindowRgn SetWindowRgn ShowCursor BeginDeferWindowPos DeferWindowPos EndDeferWindowPos SetRectEmpty GetWindowTextA SetDlgItemTextA SetWindowTextA ScrollWindow CheckMenuRadioItem AdjustWindowRectEx CopyIcon ShowScrollBar DrawIconEx CopyImage SetMenuDefaultItem EqualRect MessageBeep FlashWindow SetActiveWindow BringWindowToTop IsIconic GetSystemMenu RemoveMenu GetMenuItemCount EnableMenuItem CheckMenuItem CreateMenu DrawIcon IntersectRect GetDoubleClickTime GetSysColorBrush GetKeyState GetWindowDC GetMenu IsMenu GetScrollInfo IsZoomed GetMenuItemID GetMenuState ValidateRect GetMenuCheckMarkDimensions SetMenuItemBitmaps GetWindowPlacement SystemParametersInfoA GetDlgCtrlID SetWindowPlacement SetScrollInfo GetScrollPos SetScrollPos GetScrollRange SetScrollRange TrackPopupMenu GetInputDesktop GetGUIThreadInfo GetMenuStringW MapVirtualKeyA UnregisterHotKey GetMenuBarInfo IsCharLowerA CreateWindowExW InsertMenuItemW GetClipboardFormatNameW DialogBoxParamA OemKeyScan EnableScrollBar WinHelpA GetWindowTextLengthW UnhookWindowsHook IsDialogMessageW DdeInitializeW SetKeyboardState EnumDisplayMonitors GetGuiResources SetDoubleClickTime GetMessageA DispatchMessageA PostThreadMessageA CharNextA

gdi32

SetPixelV SetBoundsRect GetBitmapDimensionEx SetBitmapDimensionEx SetBkMode CombineRgn GetWindowOrgEx GetViewportOrgEx CreateRectRgn Escape RectVisible PtVisible GetWindowExtEx GetViewportExtEx GetMapMode GetBkColor GetBitmapBits SetBitmapBits CreateDIBSection SetDIBColorTable GdiFlush CreateRectRgnIndirect Rectangle RealizePalette CreatePalette Ellipse LPtoDP CreateEllipticRgn GetRgnBox SelectPalette CreatePatternBrush ScaleWindowExtEx SetWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectClipRgn MoveToEx LineTo IntersectClipRect ExcludeClipRect SetMapMode SetROP2 SetPolyFillMode CreatePolygonRgn FillRgn OffsetRgn SetRectRgn SaveDC GetClipBox ExtSelectClipRgn SetStretchBltMode SetDIBitsToDevice RestoreDC GetDIBits PatBlt CreatePen CreateSolidBrush Polygon SetTextAlign GetTextColor CreateCompatibleBitmap GetPixel SetPixel CreateCompatibleDC SelectObject SetBkColor BitBlt SetTextColor DeleteDC GetStockObject DPtoLP GetDeviceCaps CreateBitmap CreateBrushIndirect DeleteObject EngAssociateSurface GdiGetLocalFont EndPage GdiConvertDC GdiQueryTable SwapBuffers ColorCorrectPalette EngGetPrinterDataFileName FONTOBJ_cGetGlyphs CreateMetaFileW GdiStartDocEMF GdiEntry16 StartDocA GdiConvertBrush SetEnhMetaFileBits MaskBlt GdiAddFontResourceW CreateMetaFileA GdiReleaseDC GdiEntry14 SetDeviceGammaRamp GetTextMetricsW GetMetaFileW FONTOBJ_pvTrueTypeFontFile GetFontUnicodeRanges EngReleaseSemaphore TranslateCharsetInfo SetLayoutWidth SetMetaFileBitsEx EngPlgBlt GetCharABCWidthsI GdiConvertBitmapV5 SetPixelFormat EngLoadModule ArcTo SelectClipPath GdiGetPageCount GdiTransparentBlt GdiStartPageEMF StartDocW GetEnhMetaFileA GetEnhMetaFileW

advapi32

CryptAcquireContextA AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken CryptReleaseContext CryptGenRandom RegCloseKey RegOpenKeyW

shell32

SHGetMalloc DragFinish SHAppBarMessage Shell_NotifyIcon SHGetPathFromIDListA SHGetSpecialFolderLocation SHGetIconOverlayIndexW SHGetFolderPathA SHGetFolderLocation FindExecutableW ShellExecuteExW SHIsFileAvailableOffline SHInvokePrinterCommandW ShellAboutA ShellExecuteExA DragQueryFileW ExtractIconExA SHBrowseForFolderW SHGetFolderPathW SHQueryRecycleBinW ShellExecuteEx ExtractAssociatedIconExA SHGetFileInfo DragAcceptFiles CommandLineToArgvW

ole32

CoCreateInstance CoTaskMemFree StgOpenStorage CoTaskMemAlloc OleSetContainedObject OleCreateStaticFromData StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal ReleaseStgMedium OleDuplicateData CoInitialize CLSIDFromProgID CLSIDFromString OleUninitialize CoFreeUnusedLibraries OleInitialize RegisterDragDrop CoLockObjectExternal RevokeDragDrop OleGetClipboard CoGetClassObject StgOpenStorageOnILockBytes CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CoInitializeSecurity CoUninitialize CreateStreamOnHGlobal

shlwapi

PathFileExistsW PathRenameExtensionW PathRemoveFileSpecW PathIsRelativeW PathRemoveExtensionW PathFindExtensionW PathFindFileNameW PathRemoveBackslashW PathAddBackslashW PathIsURLW PathCanonicalizeW PathBuildRootW PathStripToRootW PathStripPathW PathGetDriveNumberW PathGetArgsW PathIsRootW PathCombineW PathIsUNCW UrlUnescapeW PathMatchSpecW StrCmpNIA StrStrA StrCmpNA StrRChrIW StrRStrIW StrRChrW StrChrA StrStrW StrRChrIA PathAppendA

comctl32

ImageList_Remove ImageList_Create ImageList_DragLeave ImageList_DragEnter ImageList_DragShowNolock ImageList_DragMove ImageList_EndDrag ImageList_BeginDrag ImageList_GetImageCount CreatePropertySheetPageW DestroyPropertySheetPage ImageList_Destroy ImageList_AddMasked ImageList_GetIconSize ImageList_GetIcon ImageList_SetOverlayImage ImageList_DrawEx ImageList_GetImageInfo ImageList_Draw ImageList_ReplaceIcon _TrackMouseEvent ImageList_Add ImageList_LoadImageW PropertySheetW ImageList_SetBkColor

Name

.text

Size

367KB

Virtual Size

367KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

98KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

y1tta28

Size

512B

Virtual Size

345B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

y1tta

Size

99KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

148KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

712b82a22dca315bc0b19f33baed894c

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

comctl32

generic