b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc

Sharing

Copy URL Twitter E-mail

General

Target
b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc
Size 162KB
Sample240530-cdnyysbd67
SHA256 b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc
MD5 ea36b4d878de29f935d6a6bfe572751d
SHA1 499d45d103f3986a57daed8b0008a9675ff867e5
SHA512 efa0c99f20d31e39bd2812d659c73e030b54bbfab8e2176e7a15fad0a5523de6298e0a8c9cb61f331e12aacb96c29b5ea7afcc2605077960a7b97688d0364f06
SSDEEP 3072:n4d5Eow66zVJaolwYG0/xZJAV9DoRBbGyI3R6gNtE1ajncge:4dv6zKYO9URxjI3Ucng
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc

File Explorer

b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc

.exe 162KB

b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc

IMPHASH 00ba7da047cf6673979e19130b9460d0
SHA256 b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc
MD5 ea36b4d878de29f935d6a6bfe572751d
SHA1 499d45d103f3986a57daed8b0008a9675ff867e5
SHA512 efa0c99f20d31e39bd2812d659c73e030b54bbfab8e2176e7a15fad0a5523de6298e0a8c9cb61f331e12aacb96c29b5ea7afcc2605077960a7b97688d0364f06
SSDEEP 3072:n4d5Eow66zVJaolwYG0/xZJAV9DoRBbGyI3R6gNtE1ajncge:4dv6zKYO9URxjI3Ucng
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

35317

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegOpenKeyW RegQueryValueExW RegOpenKeyExW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegQueryValueExA RegOpenKeyExA

kernel32

SizeofResource LockResource LoadResource FindResourceW LocalAlloc LocalFree lstrcpynW lstrcpyW lstrcmpW GetProcAddress GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersionExA ExitProcess WriteFile GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetLastError GetEnvironmentStringsW LoadLibraryW GetFileType HeapDestroy HeapCreate VirtualFree HeapFree GetStringTypeA MultiByteToWideChar GetStringTypeW LoadLibraryA GetACP GetOEMCP GetCPInfo HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA VirtualProtect GetSystemInfo VirtualQuery LCMapStringA LCMapStringW RtlUnwind GetSystemDirectoryW FreeLibrary WideCharToMultiByte GlobalReAlloc CloseHandle GlobalAlloc GlobalHandle GlobalLock SetHandleCount CreateFileW GlobalFree GlobalUnlock

gdi32

CreateCompatibleBitmap SelectObject CreateSolidBrush DeleteDC BitBlt DeleteObject CreateCompatibleDC

user32

SendMessageW GetWindowRect GetClientRect SetScrollPos ScrollWindowEx SubtractRect MapWindowPoints GetWindowTextW GetFocus GetDlgCtrlID KillTimer EnableWindow ShowWindow GetWindow EndPaint DrawEdge BeginPaint DestroyWindow SetFocus SetForegroundWindow SetWindowPos OffsetRect GetMonitorInfoW MonitorFromPoint GetCursorPos GetDesktopWindow WinHelpW DestroyIcon SetPropW SetWindowLongW EnableMenuItem CreateWindowExW MonitorFromRect GetSystemMetrics RegisterDeviceNotificationW MapDialogRect LoadIconW LoadImageW IsIconic RemovePropW RegisterClassW DefDlgProcW LoadCursorW CreateDialogIndirectParamW PostQuitMessage DefWindowProcW UnhookWindowsHook DispatchMessageW TranslateMessage IsDialogMessageW TranslateAcceleratorW GetMessageW LoadAcceleratorsW FindWindowW SetWindowsHookW LoadStringW IsWindowEnabled IsDlgButtonChecked CheckRadioButton EndDialog DialogBoxParamW FillRect GetSysColor GetUpdateRect InvalidateRect wsprintfW SetWindowTextW MessageBoxW GetPropW UnregisterDeviceNotification IsWindow CallWindowProcW GetDlgItem GetWindowLongW GetMenu SetScrollInfo CheckMenuItem PostMessageW MoveWindow GetForegroundWindow

shell32

ShellAboutW

winmm

waveInGetNumDevs mixerGetNumDevs mixerGetControlDetailsW mixerGetLineControlsW mixerSetControlDetails waveOutGetDevCapsW midiOutGetDevCapsW midiOutGetNumDevs auxGetDevCapsW auxGetNumDevs waveOutMessage waveInMessage mixerOpen mixerClose timeKillEvent timeSetEvent mixerGetDevCapsW mixerGetLineInfoW mixerGetID mixerMessage PlaySoundW waveOutGetNumDevs

comctl32

ord17

setupapi

SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailW SetupDiOpenDeviceInterfaceW SetupDiCreateDeviceInfoList SetupDiOpenDevRegKey

Sharing

General

Malware Config

Signatures

File Explorer

b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc

advapi32

kernel32

gdi32

user32

shell32

winmm

comctl32

setupapi

generic