c60e39dc22620a8765e6fc5477aeec1658c5271d418e3fc3b8a4851a9264face

Sharing

Copy URL Twitter E-mail

General

Target
c60e39dc22620a8765e6fc5477aeec1658c5271d418e3fc3b8a4851a9264face
Size 1.2MB
Sample240416-camlqagc71
SHA256 c60e39dc22620a8765e6fc5477aeec1658c5271d418e3fc3b8a4851a9264face
MD5 54bee3317ecc95c926355c365088aa98
SHA1 b0dfd0cde4b433e80fcc91f5412c85e11e52dbc3
SHA512 582e6e70e30f451a687a85d96e4443689386687a7f7a672f2d47c86c2304d37e964bbaf43bc19d131be2993654976a322ced0487e5408b4d911f8284ba26fbca
SSDEEP 24576:FUtvGRTHhWva1TYEIEFlx0ktkXbEk0k11Cfz1/tWhKU2kuAN10T:+t+RTHhWmTYEI2HkrsCUOQT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c60e39dc22620a8765e6fc5477aeec1658c5271d418e3fc3b8a4851a9264face

File Explorer

c60e39dc22620a8765e6fc5477aeec1658c5271d418e3fc3b8a4851a9264face

.exe 1.2MB

c60e39dc22620a8765e6fc5477aeec1658c5271d418e3fc3b8a4851a9264face

IMPHASH eaebc6e5d3e8f55d170513373d0f93ae
SHA256 c60e39dc22620a8765e6fc5477aeec1658c5271d418e3fc3b8a4851a9264face
MD5 54bee3317ecc95c926355c365088aa98
SHA1 b0dfd0cde4b433e80fcc91f5412c85e11e52dbc3
SHA512 582e6e70e30f451a687a85d96e4443689386687a7f7a672f2d47c86c2304d37e964bbaf43bc19d131be2993654976a322ced0487e5408b4d911f8284ba26fbca
SSDEEP 24576:FUtvGRTHhWva1TYEIEFlx0ktkXbEk0k11Cfz1/tWhKU2kuAN10T:+t+RTHhWmTYEI2HkrsCUOQT
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

476320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

d3drm

D3DRMVectorRotate Direct3DRMCreate D3DRMVectorDotProduct

ddraw

DirectDrawCreate

ole32

CoTaskMemFree

kernel32

GetStringTypeW IsBadReadPtr IsBadWritePtr IsBadCodePtr GetStringTypeA FreeEnvironmentStringsW SetUnhandledExceptionFilter GetExitCodeProcess GetLocaleInfoA GetLocaleInfoW CompareStringA GetEnvironmentStringsW GetEnvironmentStrings lstrcmpiA FreeEnvironmentStringsA WideCharToMultiByte InterlockedIncrement InterlockedDecrement lstrcpynA GlobalLock GlobalUnlock MulDiv GetFullPathNameA GetShortPathNameA CopyFileA DeleteFileA GetLastError FormatMessageA CreateFileA UnhandledExceptionFilter GetStdHandle SetHandleCount SetStdHandle VirtualAlloc VirtualFree HeapCreate HeapDestroy LCMapStringW LCMapStringA GetOEMCP GetACP GetCPInfo TerminateProcess ExitProcess HeapSize HeapReAlloc RaiseException GetCommandLineA GetStartupInfoA GetFileType HeapAlloc HeapFree GetDriveTypeA SetEnvironmentVariableA SetCurrentDirectoryA GetLocalTime GetSystemTime GetTimeZoneInformation RtlUnwind FileTimeToLocalFileTime FileTimeToSystemTime SetErrorMode GetCurrentDirectoryA SystemTimeToFileTime LocalFileTimeToFileTime GetFileSize GetThreadLocale GetStringTypeExA GetVolumeInformationA FindClose MoveFileA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile GetCurrentProcess DuplicateHandle LoadLibraryA GetProcAddress FreeLibrary GetModuleHandleA SizeofResource SetLastError GlobalDeleteAtom GetCurrentThread GetDiskFreeSpaceA GetTempFileNameA SetFileTime GetFileTime GlobalMemoryStatus GlobalFlags CompareStringW GetVersion CreatePipe GetProcessVersion LocalReAlloc TlsGetValue CreateProcessA GlobalAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsAlloc GlobalHandle DeleteCriticalSection GetCurrentThreadId InitializeCriticalSection LocalAlloc GlobalAddAtomA lstrcatA GlobalGetAtomNameA WritePrivateProfileStringA lstrcmpA LocalFree VirtualProtect GetPrivateProfileStringA GetPrivateProfileIntA LockResource FindResourceA LoadResource GlobalFree MultiByteToWideChar PeekNamedPipe GetModuleFileNameA GetProfileStringA GetFileAttributesA lstrlenA lstrcpyA CreateDirectoryA ReadFile GetWindowsDirectoryA FindNextFileA FindFirstFileA CloseHandle WaitForSingleObject

user32

SetWindowTextA IsDialogMessageA MoveWindow CheckMenuItem SetMenuItemBitmaps ModifyMenuA EnableMenuItem GetMenuState GetSysColorBrush GetClassNameA GetMessageA LoadStringA ShowOwnedPopups wvsprintfA WindowFromPoint SetCursorPos GetMenuCheckMarkDimensions WaitMessage DestroyCursor IsZoomed IsRectEmpty DeleteMenu GetSystemMenu GetDCEx LockWindowUpdate InsertMenuA GetMenuStringA DestroyIcon GetTabbedTextExtentA InvertRect GetTopWindow IsChild RegisterClassA TrackPopupMenu GetWindowThreadProcessId GetWindowTextLengthA DefWindowProcA SetWindowsHookExA SetPropA CallNextHookEx GetForegroundWindow GetPropA RemovePropA CallWindowProcA GetMessageTime GetMessagePos RegisterWindowMessageA GetNextDlgTabItem EndDialog GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetLastActivePopup IsIconic EqualRect GetDlgCtrlID UnpackDDElParam ReuseDDElParam SetMenu DestroyMenu GetDesktopWindow SetRectEmpty MapDialogRect ShowWindow GetDlgItem GetFocus IsWindowEnabled SetFocus CharLowerA CharUpperA UnhookWindowsHookEx GetWindowTextA SetScrollPos DrawTextA TabbedTextOutA EndPaint SetParent PeekMessageA TranslateMessage DispatchMessageA GetWindow ValidateRect GetUpdateRect GetClassInfoA GetSysColor DrawFocusRect SetForegroundWindow SetCaretPos CreatePopupMenu AppendMenuA CopyRect LoadIconA MessageBoxA LoadBitmapA FillRect GetUpdateRgn LoadMenuA ClientToScreen InflateRect ReleaseCapture KillTimer ScrollDC UpdateWindow GetCapture IsWindowVisible SetActiveWindow SetCapture GetAsyncKeyState GetKeyState SetCursor GetCursorPos PtInRect ShowScrollBar OffsetRect PostQuitMessage GetDC ReleaseDC SetTimer GetWindowRect ScreenToClient LoadCursorA PostMessageA InvalidateRect EnableWindow GetActiveWindow wsprintfA GetMenuItemID AdjustWindowRectEx RedrawWindow SetWindowPos GetClientRect GetWindowLongA GetParent IsWindow SetWindowLongA DefMDIChildProcA DrawMenuBar TranslateAcceleratorA TranslateMDISysAccel DefFrameProcA CreateWindowExA BringWindowToTop GetMenu GetMenuItemCount SendDlgItemMessageA SystemParametersInfoA MapWindowPoints DeferWindowPos BeginDeferWindowPos EndDeferWindowPos ScrollWindow GetScrollInfo SetScrollInfo GetScrollRange SetScrollRange GetSubMenu SendMessageA GetScrollPos SetRect SetDlgItemTextA BeginPaint GetWindowDC IntersectRect GrayStringA FrameRect LoadAcceleratorsA WinHelpA IsWindowUnicode DefDlgProcA CharNextA ExcludeUpdateRgn HideCaret UnregisterClassA ShowCaret

gdi32

LineTo CreatePen CreateRectRgnIndirect SelectObject CombineRgn GetStockObject TextOutA CreateCompatibleBitmap BitBlt GetWindowOrgEx CreateCompatibleDC CreateRectRgn GetRgnBox GetObjectA Ellipse RealizePalette DeleteDC GetCharWidthA GetDeviceCaps Rectangle GetTextExtentPointA RectVisible Arc CreatePalette SetPixel SetStretchBltMode CreateBrushIndirect StretchDIBits GetTextMetricsA SetPaletteEntries StartDocA SaveDC GetPixel SelectPalette SetBkColor RestoreDC SetPolyFillMode SetROP2 SetBkMode SetTextColor SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetClipBox SelectClipRgn ExcludeClipRect IntersectClipRect SetTextAlign GetCurrentPositionEx DeleteObject GetViewportExtEx GetWindowExtEx CreatePatternBrush PtVisible ExtTextOutA Escape CreateBitmap PatBlt SetRectRgn CreateFontIndirectA DPtoLP GetViewportOrgEx AbortDoc EndDoc EndPage StartPage SetAbortProc CreateDCA LPtoDP GetNearestColor GetBkColor GetTextColor GetStretchBltMode GetPolyFillMode GetTextAlign GetBkMode GetROP2 GetTextFaceA MoveToEx CreateDIBitmap CreateSolidBrush

comdlg32

CommDlgExtendedError PrintDlgA GetFileTitleA ChooseColorA GetOpenFileNameA GetSaveFileNameA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegQueryValueA RegSetValueA GetFileSecurityA RegCreateKeyA RegOpenKeyA RegDeleteKeyA SetFileSecurityA RegEnumKeyA RegCloseKey RegOpenKeyExA RegCreateKeyExA RegDeleteValueA RegSetValueExA RegQueryValueExA

shell32

DragQueryFileA SHGetFileInfoA ShellExecuteA SHBrowseForFolderA DragFinish ExtractIconA SHGetPathFromIDListA

comctl32

ImageList_EndDrag ord17 ImageList_DragEnter ImageList_BeginDrag ImageList_LoadImageA ImageList_Destroy ImageList_SetBkColor CreatePropertySheetPageA DestroyPropertySheetPage PropertySheetA ImageList_DragMove ImageList_DragShowNolock ImageList_DragLeave

Name

.text

Size

714KB

Virtual Size

714KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

125KB

Virtual Size

124KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

33KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

310KB

Virtual Size

310KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

70KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c60e39dc22620a8765e6fc5477aeec1658c5271d418e3fc3b8a4851a9264face

d3drm

ddraw

ole32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

generic