fdb4e10d1f83e739b67a66405db7a7faecbe0732084ff142b32ddda11384f5a5

Sharing

Copy URL Twitter E-mail

General

Target
fdb4e10d1f83e739b67a66405db7a7faecbe0732084ff142b32ddda11384f5a5
Size 1.9MB
Sample240602-2ej4tsae22
SHA256 fdb4e10d1f83e739b67a66405db7a7faecbe0732084ff142b32ddda11384f5a5
MD5 76e25df71338301932c5b8aade8d479a
SHA1 fbf138d299e0f7c2599cfbce8d77054357750d92
SHA512 cfaae97d691e68db5dd811af25e0221d50e7f9a6bb3647792ba9ee5733169bf8b58c4f0d34a5b557c259e6d72c850bb5cc1e6a53d1b1d4e7eb0ff0c7bcb4db04
SSDEEP 24576:f/ndghONSC29PdD9DecME/Ccf2gpgGVB/actsMNqkPW2E1Y0:fmhOP2pXD1+gp1rswE1Y0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdb4e10d1f83e739b67a66405db7a7faecbe0732084ff142b32ddda11384f5a5

File Explorer

fdb4e10d1f83e739b67a66405db7a7faecbe0732084ff142b32ddda11384f5a5

.exe 1.9MB

fdb4e10d1f83e739b67a66405db7a7faecbe0732084ff142b32ddda11384f5a5

IMPHASH 30201887c790b44769eebb423af255e0
SHA256 fdb4e10d1f83e739b67a66405db7a7faecbe0732084ff142b32ddda11384f5a5
MD5 76e25df71338301932c5b8aade8d479a
SHA1 fbf138d299e0f7c2599cfbce8d77054357750d92
SHA512 cfaae97d691e68db5dd811af25e0221d50e7f9a6bb3647792ba9ee5733169bf8b58c4f0d34a5b557c259e6d72c850bb5cc1e6a53d1b1d4e7eb0ff0c7bcb4db04
SSDEEP 24576:f/ndghONSC29PdD9DecME/Ccf2gpgGVB/actsMNqkPW2E1Y0:fmhOP2pXD1+gp1rswE1Y0
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

709844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

kernel32

DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection VirtualFree VirtualAlloc LocalFree LocalAlloc GetCurrentThreadId InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenA lstrcpynA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLastError GetCommandLineA FreeLibrary FindFirstFileA FindClose CreateDirectoryA ExitProcess ExitThread CreateThread WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException GetStdHandle GetFileSize GetSystemTime GetFileType CreateFileA CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleA lstrlenA lstrcpyA lstrcmpA WriteFile WaitForSingleObject WaitForMultipleObjects VirtualQuery VirtualAlloc UnmapViewOfFile Sleep SizeofResource SetThreadLocale SetLastError SetFileTime SetFilePointer SetFileAttributesA SetEvent SetErrorMode SetEndOfFile SetCurrentDirectoryA ResumeThread ResetEvent RemoveDirectoryA ReleaseMutex ReadFile MultiByteToWideChar MulDiv MoveFileA MapViewOfFile LockResource LocalFileTimeToFileTime LoadResource LoadLibraryA LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalReAlloc GlobalHandle GlobalLock GlobalFree GlobalFindAtomA GlobalDeleteAtom GlobalAlloc GlobalAddAtomA GetVersionExA GetVersion GetTickCount GetThreadLocale GetTempPathA GetSystemInfo GetSystemDirectoryA GetStringTypeExA GetStdHandle GetProfileStringA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLocalTime GetLastError GetFileAttributesA GetExitCodeThread GetEnvironmentVariableA GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentProcessId GetCurrentDirectoryA GetCPInfo GetACP FreeResource FreeLibrary FormatMessageA FindResourceA FindNextFileA FindNextChangeNotification FindFirstFileA FindFirstChangeNotificationA FindCloseChangeNotification FindClose FileTimeToLocalFileTime FileTimeToDosDateTime EnumCalendarInfoA EnterCriticalSection DosDateTimeToFileTime DeleteFileA DeleteCriticalSection CreateThread CreateProcessA CreateMutexA CreateFileA CreateEventA CreateDirectoryA CompareStringA CloseHandle Sleep

user32

GetKeyboardType LoadStringA MessageBoxA CharNextA WindowFromPoint WindowFromDC WinHelpA WaitMessage UpdateWindow UnregisterClassA UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoA ShowWindow ShowScrollBar ShowOwnedPopups ShowCursor SetWindowRgn SetWindowsHookExA SetWindowTextA SetWindowPos SetWindowPlacement SetWindowLongA SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropA SetMenuItemInfoA SetMenu SetForegroundWindow SetFocus SetCursor SetClassLongA SetCapture SetActiveWindow SendMessageA ScrollWindow ScreenToClient RemovePropA RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageA RegisterClipboardFormatA RegisterClassA RedrawWindow PtInRect PostQuitMessage PostMessageA PeekMessageA OffsetRect OemToCharA MsgWaitForMultipleObjects MessageBoxA MapWindowPoints MapVirtualKeyA LockWindowUpdate LoadStringA LoadKeyboardLayoutA LoadIconA LoadCursorA LoadBitmapA KillTimer IsZoomed IsWindowVisible IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageA IsChild InvalidateRect IntersectRect InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId GetWindowTextA GetWindowRgn GetWindowRect GetWindowPlacement GetWindowLongA GetWindowDC GetUpdateRect GetTopWindow GetSystemMetrics GetSystemMenu GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropA GetParent GetWindow GetMessagePos GetMenuStringA GetMenuState GetMenuItemRect GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextA GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassNameA GetClassInfoA GetCapture GetActiveWindow FrameRect FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EndPaint EndDeferWindowPos EnableWindow EnableScrollBar EnableMenuItem DrawTextExA DrawTextA DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DeferWindowPos DefWindowProcA DefMDIChildProcA DefFrameProcA CreateWindowExA CreatePopupMenu CreateMenu CreateIcon ClientToScreen ChildWindowFromPoint CheckMenuItem CallWindowProcA CallNextHookEx BeginPaint BeginDeferWindowPos CharNextA CharLowerBuffA CharLowerA CharUpperBuffA AdjustWindowRectEx ActivateKeyboardLayout

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey RegSetValueExA RegQueryValueExA RegOpenKeyExA RegFlushKey RegCreateKeyExA RegCloseKey

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayGetElement SafeArrayGetUBound SafeArrayGetLBound SafeArrayRedim SafeArrayCreate VariantChangeTypeEx VariantCopyInd VariantCopy VariantClear VariantInit GetErrorInfo SysFreeString

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

gdi32

UnrealizeObject StretchBlt StartPage StartDocA SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetMapMode SetEnhMetaFileBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline PlayEnhMetaFile PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsA GetTextExtentPoint32A GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectA GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits ExtTextOutA ExcludeClipRect EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateICA CreateHalftonePalette CreateFontIndirectA CreateDIBitmap CreateDIBSection CreateDCA CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileA CombineRgn BitBlt

ole32

OleUninitialize OleInitialize CoUninitialize CoInitialize

comctl32

ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_SetDragCursorImage ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

winspool.drv

OpenPrinterA EnumPrintersA DocumentPropertiesA ClosePrinter

shell32

ShellExecuteExA ShellExecuteA SHGetFileInfoA SHGetSpecialFolderLocation SHGetMalloc SHGetDesktopFolder

Name

.text

Size

689KB

Virtual Size

692KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

2KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zero

Size

Virtual Size

8.8MB

Characteristics

Name

.as_0001

Size

110KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zero

Size

Virtual Size

12KB

Characteristics

Name

.as_0002

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

fdb4e10d1f83e739b67a66405db7a7faecbe0732084ff142b32ddda11384f5a5

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

winspool.drv

shell32

generic