6fd58187e55a7e2b38ce5fd13fcf716e07dfbfc570d7e5884895e39759d50f28

Sharing

Copy URL Twitter E-mail

General

Target
6fd58187e55a7e2b38ce5fd13fcf716e07dfbfc570d7e5884895e39759d50f28
Size 8.9MB
Sample240505-2k4qesbb78
SHA256 6fd58187e55a7e2b38ce5fd13fcf716e07dfbfc570d7e5884895e39759d50f28
MD5 a407db991d9423abb2cdceef7935bb3a
SHA1 75877eb1e4698cdfa1a4adf2f45d31651cb2a6b0
SHA512 a8c1715819e980a76dfcad90d2ef988adb281becc363fad82192fbb0d7ee0599ae96e3ccd750ce603d366218194f8c71d67764fe8fbc51c4da33439e8c13dffd
SSDEEP 196608:i9dH1UbkCchr3plFE5GFWhKUzGZ3gRTFWhvMaP3oZKv/r:i9Z1Ubkxhr3plFjWhKUzGZ3gRTFWZoIj
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

6fd58187e55a7e2b38ce5fd13fcf716e07dfbfc570d7e5884895e39759d50f28

.exe 8.9MB

6fd58187e55a7e2b38ce5fd13fcf716e07dfbfc570d7e5884895e39759d50f28

IMPHASH e76c4470619433796d0ce964e2d84f10
SHA256 6fd58187e55a7e2b38ce5fd13fcf716e07dfbfc570d7e5884895e39759d50f28
MD5 a407db991d9423abb2cdceef7935bb3a
SHA1 75877eb1e4698cdfa1a4adf2f45d31651cb2a6b0
SHA512 a8c1715819e980a76dfcad90d2ef988adb281becc363fad82192fbb0d7ee0599ae96e3ccd750ce603d366218194f8c71d67764fe8fbc51c4da33439e8c13dffd
SSDEEP 196608:i9dH1UbkCchr3plFE5GFWhKUzGZ3gRTFWhvMaP3oZKv/r:i9Z1Ubkxhr3plFjWhKUzGZ3gRTFWZoIj
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

da:c5:a7:4d:4e:c3:3a:40:ea:9d:d5:8f:6b:de:91:7b:26:d9:e8:54:b3:bc:c0:8e:71:72:3e:33:a0:46:3e:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91210242MA0YGH36XJ,CN=DauLue Intention Fly Network Technology Co.\, Ltd.,O=DauLue Intention Fly Network Technology Co.\, Ltd.,L=Dalian,ST=Liaoning,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130644616c69616e,1.3.6.1.4.1.311.60.2.1.2=#13084c69616f6e696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Apr 23, 2024

Subject

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 19, 2021 - May 18, 2036

Subject

Serial Number

02:20:f9:d4:79:65:39:f8:94:30:af:2a:2d:b6:a4:fe

Issuer

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2024 - Apr 16, 2025

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 7, 2023 - Dec 9, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

7075924

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW GetDefaultPrinterW EnumPrintersW

comdlg32

FindTextW ReplaceTextW ChooseFontW ChooseColorW GetSaveFileNameW GetSaveFileNameA GetOpenFileNameW GetOpenFileNameA PrintDlgW

comctl32

ImageList_GetImageInfo FlatSB_SetScrollInfo InitCommonControls ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add FlatSB_SetScrollProp ImageList_GetDragImage ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB ImageList_Copy FlatSB_GetScrollInfo ImageList_Write ImageList_DrawIndirect ImageList_SetBkColor ImageList_GetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_Replace ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_LoadImageW ImageList_Draw ImageList_Remove ImageList_ReplaceIcon ImageList_SetOverlayImage

shell32

SHBrowseForFolderW DragQueryFileW SHGetSpecialFolderLocation Shell_NotifyIconW SHGetSpecialFolderPathW SHGetDataFromIDListA ShellExecuteExW SHGetPathFromIDListW SHGetFileInfoW SHGetMalloc SHGetDesktopFolder SHGetImageList SHFileOperationA SHAppBarMessage ShellExecuteW

user32

CopyImage MoveWindow SetMenuItemInfoW GetMenuItemInfoW SetCaretPos DefFrameProcW PrintWindow GetDlgCtrlID FrameRect RegisterWindowMessageW GetMenuStringW FillRect SendMessageA IsClipboardFormatAvailable EnumWindows ShowOwnedPopups GetClassInfoExW GetClassInfoW GetScrollRange SetActiveWindow GetActiveWindow DrawEdge GetKeyboardLayoutList LoadBitmapW EnumChildWindows GetScrollBarInfo UnhookWindowsHookEx SetCapture GetCapture ShowCaret CreatePopupMenu GetMenuItemID DestroyCaret CharLowerBuffW PostMessageW SetWindowLongW IsZoomed SetParent DrawMenuBar GetClientRect IsChild LoadImageA SendDlgItemMessageW IsIconic CallNextHookEx ShowWindow GetWindowTextW SetForegroundWindow GetAsyncKeyState IsDialogMessageW DestroyWindow RegisterClassW EndMenu CharNextW GetFocus GetDC SetFocus ReleaseDC GetClassLongW SetScrollRange DrawTextW PeekMessageA MessageBeep SetClassLongW RemovePropW GetSubMenu DestroyIcon IsWindowVisible PtInRect DispatchMessageA UnregisterClassW GetTopWindow SendMessageW GetComboBoxInfo GetWindowInfo LoadStringW CreateMenu CharLowerW SetWindowRgn SetWindowPos GetMenuItemCount wvsprintfA GetSysColorBrush GetWindowDC GetDlgItemTextA DrawTextExW EnumClipboardFormats GetScrollInfo SetWindowTextW GetMessageExtraInfo GetSysColor EnableScrollBar TrackPopupMenu DrawIconEx GetClassNameW GetMessagePos GetIconInfo SetScrollInfo GetKeyNameTextW GetDesktopWindow SetCursorPos GetCursorPos EnumDisplaySettingsExW SetMenu GetMenuState GetMenu SetRect GetKeyState IsRectEmpty ValidateRect GetCursor KillTimer BeginDeferWindowPos WaitMessage TranslateMDISysAccel GetWindowPlacement GetClipboardFormatNameW GetMenuItemRect CreateIconIndirect CreateWindowExW GetMessageW GetDCEx PeekMessageW MonitorFromWindow GetUpdateRect SetTimer WindowFromPoint BeginPaint RegisterClipboardFormatW MapVirtualKeyW OffsetRect IsWindowUnicode DispatchMessageW CreateAcceleratorTableW DefMDIChildProcW GetSystemMenu SetScrollPos GetScrollPos InflateRect DrawFocusRect ReleaseCapture LoadCursorW ScrollWindow GetLastActivePopup GetDlgItemTextW GetSystemMetrics CharUpperBuffW ClientToScreen SetClipboardData GetClipboardData SetWindowPlacement GetMonitorInfoW CheckMenuItem CharUpperW DefWindowProcW GetForegroundWindow EnableWindow GetWindowThreadProcessId RedrawWindow CreateCursor EndPaint MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW ActivateKeyboardLayout DestroyAcceleratorTable GetParent CreateCaret MonitorFromRect InsertMenuItemW GetPropW MessageBoxW SetPropW UpdateWindow MsgWaitForMultipleObjects DestroyMenu SetWindowsHookExW EmptyClipboard GetDlgItem AdjustWindowRectEx IsWindow DrawIcon EnumThreadWindows InvalidateRect GetKeyboardState ScreenToClient DrawFrameControl BringWindowToTop SetCursor CreateIcon RemoveMenu GetKeyboardLayoutNameW OpenClipboard TranslateMessage MapWindowPoints EnumDisplayMonitors CallWindowProcW CountClipboardFormats CloseClipboard DestroyCursor CopyIcon PostQuitMessage ShowScrollBar EnableMenuItem DeferWindowPos HideCaret EndDeferWindowPos FindWindowExW MonitorFromPoint LoadIconW SystemParametersInfoW GetWindow GetWindowRect GetWindowLongW InsertMenuW IsWindowEnabled IsDialogMessageA FindWindowW GetKeyboardLayout DeleteMenu

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

oledlg

OleUIPasteSpecialW OleUIObjectPropertiesW OleUIInsertObjectW

oleaut32

SafeArrayPutElement GetErrorInfo VariantInit VariantClear SysFreeString SafeArrayAccessData SysReAllocStringLen SysAllocString SafeArrayCreate OleCreatePropertyFrame GetActiveObject SysAllocStringLen SafeArrayUnaccessData SafeArrayPtrOfIndex VariantCopy SafeArrayGetUBound SafeArrayGetLBound VariantChangeType VariantCopyInd

advapi32

RegSetValueExW RegConnectRegistryW RegEnumKeyExW RegLoadKeyW RegDeleteKeyW CryptDestroyHash RegOpenKeyExW RegQueryInfoKeyW RegUnLoadKeyW CryptGetHashParam CryptReleaseContext RegSaveKeyW RegDeleteValueW RegReplaceKeyW RegFlushKey RegQueryValueExW RegEnumValueW CryptHashData RegCloseKey CryptCreateHash RegCreateKeyExW CryptAcquireContextA RegRestoreKeyW

msvcrt

memcpy memset

avifil32

AVIStreamInfoW AVIFileCreateStreamW AVIStreamGetFrame AVIMakeCompressedStream AVIFileOpenW AVISaveOptionsFree AVIFileRelease AVIStreamRelease AVIStreamGetFrameClose AVIStreamWrite AVIStreamGetFrameOpen AVIFileInit AVISaveOptions AVIFileGetStream AVISaveVW AVIStreamSetFormat AVIFileExit

kernel32

SetFileAttributesW GetFileType SetFileTime QueryDosDeviceW GetACP CloseHandle LocalFree GetCurrentProcessId SizeofResource TerminateThread QueryPerformanceFrequency IsDebuggerPresent FindNextFileW GetFullPathNameW VirtualFree HeapAlloc ExitProcess GetFileAttributesA GetCPInfoExW GlobalSize GetLongPathNameW RtlUnwind GetCPInfo EnumSystemLocalesW GetStdHandle GetTimeZoneInformation FileTimeToLocalFileTime SystemTimeToTzSpecificLocalTime GetModuleHandleW FreeLibrary TryEnterCriticalSection HeapDestroy GetWindowsDirectoryA FileTimeToDosDateTime ReadFile GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW lstrlenA CreateThread CompareStringW CopyFileW GetFileSizeEx lstrcatA MapViewOfFile LoadLibraryA GetVolumeInformationW ResetEvent MulDiv CreateFileA EnumResourceNamesA FreeResource GetDriveTypeW GetVersion RaiseException MoveFileW GlobalAddAtomW FindFirstChangeNotificationW FormatMessageW SwitchToThread GetExitCodeThread ReadDirectoryChangesW GetCurrentThread GetFileAttributesExW IsBadReadPtr LoadLibraryExW LockResource FileTimeToSystemTime GetCurrentThreadId UnhandledExceptionFilter GlobalFindAtomW VirtualQuery GlobalFree VirtualQueryEx Sleep EnterCriticalSection SetFilePointer LoadResource SuspendThread GetTickCount WaitForMultipleObjects GetFileSize GlobalDeleteAtom GetStartupInfoW GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW InitializeCriticalSection GetThreadPriority GetCurrentProcess GlobalLock SetThreadPriority VirtualAlloc GetTempPathW GetCommandLineW GetSystemInfo LeaveCriticalSection GetProcAddress ResumeThread EnumResourceTypesA GetLogicalDriveStringsW GetVersionExW VerifyVersionInfoW HeapCreate LCMapStringW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage CreateProcessA GetConsoleOutputCP UnmapViewOfFile GetConsoleCP FindResourceA lstrlenW SetEndOfFile QueryPerformanceCounter lstrcmpW InitializeCriticalSectionAndSpinCount HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent GetLocaleInfoW CreateFileW SystemTimeToFileTime EnumResourceNamesW DeleteFileW IsDBCSLeadByteEx FindCloseChangeNotification GetLocalTime WaitForSingleObject WriteFile CreateFileMappingW ExitThread CreatePipe DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode GetComputerNameW TzSpecificLocalTimeToSystemTime IsValidLocale TlsSetValue CreateDirectoryW GetOverlappedResult GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW GlobalMemoryStatus CreateEventW WaitForMultipleObjectsEx GetThreadLocale SetThreadLocale

msvfw32

DrawDibOpen DrawDibDraw DrawDibClose

shfolder

SHGetFolderPathW

ole32

OleCreateLinkToFile StgCreateDocfileOnILockBytes StgCreateDocfile CreateBindCtx CoCreateGuid OleCreateStaticFromData CoCreateInstance OleCreate IsEqualGUID CreateILockBytesOnHGlobal OleCreateFromData CLSIDFromProgID CoInitialize CoTaskMemAlloc DoDragDrop StringFromCLSID RevokeDragDrop OleGetIconOfClass CoUninitialize OleCreateFromFile RegisterDragDrop OleSetContainedObject OleInitialize ProgIDFromCLSID CoInitializeEx OleUninitialize FreePropVariantArray OleCreateLinkFromData CoTaskMemFree OleSetMenuDescriptor

gdi32

Pie SetPaletteEntries SetBkMode GetRandomRgn CreateCompatibleBitmap CreatePolygonRgn GetEnhMetaFileHeader RectVisible AngleArc CloseMetaFile CreateMetaFileW SetAbortProc SetTextColor GetTextColor StretchBlt RoundRect SelectClipRgn RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx CreatePalette OffsetViewportOrgEx CreateDCW CreateICW PolyBezierTo GetStockObject CreateSolidBrush GetBkMode Polygon MoveToEx PlayEnhMetaFile Ellipse ModifyWorldTransform StartPage GetBitmapBits StartDocW AbortDoc GetSystemPaletteEntries GetEnhMetaFileBits OffsetWindowOrgEx CreatePenIndirect GetEnhMetaFilePaletteEntries SetMapMode CreateFontIndirectW PolyBezier ExtCreatePen DeleteMetaFile EndDoc GetObjectW GetCurrentObject GetWinMetaFileBits SetROP2 GetEnhMetaFileDescriptionW ArcTo Arc TextOutW SelectPalette SetGraphicsMode GetGraphicsMode ExcludeClipRect SetWindowOrgEx MaskBlt EndPage DeleteEnhMetaFile Chord SetDIBits SetViewportOrgEx GetViewportOrgEx CreateRectRgn RealizePalette SetDIBColorTable GetDIBColorTable GetGlyphOutlineW CreateBrushIndirect PatBlt LineDDA SetEnhMetaFileBits CreateEllipticRgn PlgBlt Rectangle DeleteDC SaveDC BitBlt SetWorldTransform FrameRgn GetDeviceCaps GetTextExtentPoint32W GetClipBox GetClipRgn Polyline IntersectClipRect CreateBitmap CombineRgn SetWinMetaFileBits CreateDIBitmap GetStretchBltMode CreateDIBSection SetStretchBltMode GetDIBits ExtCreateRegion LineTo GetRgnBox EnumFontsW SetWindowExtEx CreateHalftonePalette DeleteObject SelectObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW OffsetRgn SetBkColor SetMetaFileBitsEx CreateCompatibleDC GetBrushOrgEx GetCurrentPositionEx SetDCPenColor SetTextAlign CreateRoundRectRgn GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetPixel GdiFlush SetViewportExtEx SetPixel EnumFontFamiliesExW StretchDIBits GetPaletteEntries

Name

.text

Size

6.7MB

Virtual Size

6.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

224KB

Virtual Size

224KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

152KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

18KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

468KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

6fd58187e55a7e2b38ce5fd13fcf716e07dfbfc570d7e5884895e39759d50f28

PE Signature issue

winspool.drv

comdlg32

comctl32

shell32

user32

version

oledlg

oleaut32

advapi32

msvcrt

avifil32

kernel32

msvfw32

shfolder

ole32

gdi32

generic