8f6f82fe539aafc885ecb259542008abbfbdea143b5f15dd5d52b5f0f8ce1e27

General

Target
8f6f82fe539aafc885ecb259542008abbfbdea143b5f15dd5d52b5f0f8ce1e27
Size 372KB
Sample240418-afcbtscb5z
SHA256 8f6f82fe539aafc885ecb259542008abbfbdea143b5f15dd5d52b5f0f8ce1e27
MD5 ea63f1288d787af560bf5937e8b7ea0f
SHA1 f52b1794c05f562486bec45f9f8ba26520308fee
SHA512 adedff425c8f6f4d2a2b10ce02dfb3b05f7bf153fc3f4ca594badfbca9af56ebf0be9601d5a66f7c5919385214084491151981585a177d1c34cf42ba37a8a711
SSDEEP 6144:kqs7N/qdkOpEhSm7fSsTEPssU5qqDrSyhsTZI8M8FgUMI:kwpEhSKsU0qKYLP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f6f82fe539aafc885ecb259542008abbfbdea143b5f15dd5d52b5f0f8ce1e27

File Explorer

8f6f82fe539aafc885ecb259542008abbfbdea143b5f15dd5d52b5f0f8ce1e27

.dll 372KB

8f6f82fe539aafc885ecb259542008abbfbdea143b5f15dd5d52b5f0f8ce1e27

IMPHASH 1be7b68cf2792a69179963882788d153
SHA256 8f6f82fe539aafc885ecb259542008abbfbdea143b5f15dd5d52b5f0f8ce1e27
MD5 ea63f1288d787af560bf5937e8b7ea0f
SHA1 f52b1794c05f562486bec45f9f8ba26520308fee
SHA512 adedff425c8f6f4d2a2b10ce02dfb3b05f7bf153fc3f4ca594badfbca9af56ebf0be9601d5a66f7c5919385214084491151981585a177d1c34cf42ba37a8a711
SSDEEP 6144:kqs7N/qdkOpEhSm7fSsTEPssU5qqDrSyhsTZI8M8FgUMI:kwpEhSKsU0qKYLP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

327680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

comctl32

InitCommonControlsEx

kernel32

GetSystemTime MultiByteToWideChar WideCharToMultiByte lstrlenW GetLastError LoadLibraryA GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA InitializeCriticalSection CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle SetFilePointer GetSystemTimeAsFileTime GetCurrentProcessId GetUserDefaultLangID FindResourceExW LoadResource LockResource GetModuleFileNameW lstrcatW LoadLibraryW EnumResourceLanguagesW FreeLibrary WriteFile CloseHandle RtlUnwind EnterCriticalSection LeaveCriticalSection HeapAlloc HeapFree HeapReAlloc GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetModuleHandleA GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection Sleep ExitProcess VirtualFree VirtualAlloc HeapDestroy HeapCreate HeapSize FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount

user32

GetActiveWindow GetDesktopWindow SetForegroundWindow GetWindowLongW EndDialog SetWindowLongW IsWindowEnabled IsDlgButtonChecked GetDlgItemTextW MessageBoxW SetFocus SendDlgItemMessageW SetDlgItemTextW CheckDlgButton SetWindowPos DestroyWindow CheckRadioButton GetDlgItem GetWindowRect ScreenToClient SendMessageW EnableWindow ShowWindow DialogBoxIndirectParamW LoadStringW CreateWindowExW wsprintfW

advapi32

CryptEncrypt CryptImportKey CryptDecrypt CryptAcquireContextW CryptGetProvParam CryptGetUserKey CryptGenKey CryptDestroyKey CryptExportKey CryptReleaseContext

Name

.text

Size

208KB

Virtual Size

205KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

64KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rmnet

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

8f6f82fe539aafc885ecb259542008abbfbdea143b5f15dd5d52b5f0f8ce1e27

comctl32

kernel32

user32

advapi32

generic