9bce28e9040c03f4ea1bf332c405e3a3d8f4086a568f15aec4f5ae9feff394fb

Sharing

Copy URL Twitter E-mail

General

Target
9bce28e9040c03f4ea1bf332c405e3a3d8f4086a568f15aec4f5ae9feff394fb
Size 9.6MB
Sample240603-s48n2sbb71
SHA256 9bce28e9040c03f4ea1bf332c405e3a3d8f4086a568f15aec4f5ae9feff394fb
MD5 f311e7b5d9c7a37576746069b655702f
SHA1 06e505d5961334b04e55e4c2a03a0dc91bdde5a2
SHA512 cf079b4443281d7a46190b03f5c69e3838e4f87403b53bccd904450c0b39397f30c7a6bba802e768b619f2b3b926a21f89646d9fcb2475e5cafd38f9f5206a50
SSDEEP 196608:K1MV1/Lz8pkxIOW2Si5OcIol4ema8v2FsA0KY53uyhqD4UO+rgxJZVaQ:rbNGH2d2mWHEQ3ZEzgxJx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bce28e9040c03f4ea1bf332c405e3a3d8f4086a568f15aec4f5ae9feff394fb

File Explorer

9bce28e9040c03f4ea1bf332c405e3a3d8f4086a568f15aec4f5ae9feff394fb

.exe 9.6MB

9bce28e9040c03f4ea1bf332c405e3a3d8f4086a568f15aec4f5ae9feff394fb

IMPHASH fae6db838620caa3adec0b9bb2847acb
SHA256 9bce28e9040c03f4ea1bf332c405e3a3d8f4086a568f15aec4f5ae9feff394fb
MD5 f311e7b5d9c7a37576746069b655702f
SHA1 06e505d5961334b04e55e4c2a03a0dc91bdde5a2
SHA512 cf079b4443281d7a46190b03f5c69e3838e4f87403b53bccd904450c0b39397f30c7a6bba802e768b619f2b3b926a21f89646d9fcb2475e5cafd38f9f5206a50
SSDEEP 196608:K1MV1/Lz8pkxIOW2Si5OcIol4ema8v2FsA0KY53uyhqD4UO+rgxJZVaQ:rbNGH2d2mWHEQ3ZEzgxJx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

iphlpapi

_PfAddFiltersToInterface@24 _PfBindInterfaceToIPAddress@12 _PfCreateInterface@24 _PfDeleteInterface@4 _PfRemoveFilterHandles@12 _PfUnBindInterface@4

msvfw32

ICDecompress ICOpen ICSendMessage ICClose

advapi32

AdjustTokenPrivileges AllocateAndInitializeSid CheckTokenMembership CloseServiceHandle FreeSid GetTokenInformation LookupAccountSidA LookupPrivilegeValueA OpenProcessToken OpenSCManagerA OpenServiceA RegCloseKey RegCreateKeyExA RegDeleteValueA RegFlushKey RegOpenKeyExA RegQueryValueExA RegSetValueExA

kernel32

CloseHandle CompareStringA CopyFileA CreateEventA CreateFileA CreateMutexA CreateThread CreateToolhelp32Snapshot DebugBreak DeleteCriticalSection DeleteFileA DeviceIoControl EnterCriticalSection EnumCalendarInfoA ExitProcess ExitThread FileTimeToDosDateTime FileTimeToLocalFileTime FindClose FindFirstFileA FindNextFileA FindResourceA FormatMessageA FreeLibrary FreeResource GetACP GetCPInfo GetCommandLineA GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceA GetEnvironmentStrings GetExitCodeThread GetFileAttributesA GetFileSize GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetSystemDirectoryA GetSystemInfo GetTempPathA GetThreadLocale GetTickCount GetUserDefaultLCID GetVersion GetVersionExA GetVolumeInformationA GetWindowsDirectoryA GlobalAddAtomA GlobalAlloc GlobalDeleteAtom GlobalFree GlobalHandle GlobalLock GlobalReAlloc GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedIncrement IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadResource LocalAlloc LocalFree LockResource MulDiv MultiByteToWideChar OpenEventA OpenMutexA OpenProcess Process32First Process32Next RaiseException ReadFile ReleaseMutex ResetEvent RtlUnwind SetConsoleCtrlHandler SetEndOfFile SetErrorMode SetEvent SetFileAttributesA SetFilePointer SetHandleCount SetLastError SetProcessAffinityMask SetThreadLocale SetThreadPriority SizeofResource Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpA lstrcpyA lstrcpynA lstrlenA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

wsock32

WSACleanup WSAStartup gethostbyname gethostname htonl ntohl

comctl32

ImageList_Add ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIconSize ImageList_GetImageCount ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetIconSize ImageList_Write ord17 ImageList_DrawEx

comdlg32

GetOpenFileNameA GetSaveFileNameA

gdi32

BitBlt CombineRgn CopyEnhMetaFileA CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateDIBitmap CreateFontIndirectA CreateHalftonePalette CreatePalette CreatePenIndirect CreateRectRgn CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject Ellipse ExcludeClipRect ExtTextOutA GdiFlush GetBitmapBits GetBrushOrgEx GetClipBox GetCurrentPositionEx GetDCOrgEx GetDIBColorTable GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetObjectA GetPaletteEntries GetPixel GetRgnBox GetStockObject GetSystemPaletteEntries GetTextExtentPoint32A GetTextExtentPointA GetTextMetricsA GetWinMetaFileBits GetWindowOrgEx IntersectClipRect LineTo MaskBlt MoveToEx PatBlt PlayEnhMetaFile Polyline RealizePalette RectVisible Rectangle RestoreDC SaveDC SelectObject SelectPalette SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetEnhMetaFileBits SetPixel SetROP2 SetStretchBltMode SetTextColor SetViewportOrgEx SetWinMetaFileBits SetWindowOrgEx StretchBlt UnrealizeObject

msacm32

acmDriverClose acmDriverDetailsA acmDriverEnum acmDriverOpen acmFormatDetailsA acmFormatEnumA acmFormatTagDetailsA acmMetrics acmStreamClose acmStreamConvert acmStreamOpen acmStreamPrepareHeader acmStreamSize acmStreamUnprepareHeader

shell32

ShellExecuteA

user32

ActivateKeyboardLayout AdjustWindowRectEx BeginPaint CallNextHookEx CallWindowProcA CharLowerA CharLowerBuffA CharNextA CharUpperBuffA CheckMenuItem ClientToScreen CreateIcon CreateMenu CreatePopupMenu CreateWindowExA DefFrameProcA DefMDIChildProcA DefWindowProcA DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawMenuBar DrawTextA EnableMenuItem EnableScrollBar EnableWindow EndPaint EnumThreadWindows EnumWindows EqualRect FillRect FindWindowA FrameRect GetActiveWindow GetCapture GetClassInfoA GetClientRect GetClipboardData GetCursor GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgItem GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextA GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardState GetKeyboardType GetLastActivePopup GetMenu GetMenuItemCount GetMenuItemID GetMenuItemInfoA GetMenuState GetMenuStringA GetParent GetPropA GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColor GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongA GetWindowPlacement GetWindowRect GetWindowTextA GetWindowThreadProcessId InflateRect InsertMenuA InsertMenuItemA IntersectRect InvalidateRect IsChild IsDialogMessageA IsIconic IsRectEmpty IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapA LoadCursorA LoadIconA LoadKeyboardLayoutA LoadStringA MapVirtualKeyA MapWindowPoints MessageBoxA MsgWaitForMultipleObjects OemToCharA OffsetRect PeekMessageA PostMessageA PostQuitMessage PtInRect RedrawWindow RegisterClassA RegisterClipboardFormatA RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollWindow SendMessageA SetActiveWindow SetCapture SetClassLongA SetCursor SetFocus SetForegroundWindow SetMenu SetMenuItemInfoA SetPropA SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongA SetWindowPlacement SetWindowPos SetWindowTextA SetWindowsHookExA ShowCursor ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoA TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnregisterClassA UpdateWindow WaitMessage WinHelpA WindowFromPoint wsprintfA GetSystemMenu

winmm

timeBeginPeriod timeEndPeriod timeGetDevCaps timeGetTime timeKillEvent timeSetEvent waveOutClose waveOutOpen waveOutPrepareHeader waveOutReset waveOutUnprepareHeader waveOutWrite

ole32

CoCreateInstance CoInitialize CoInitializeSecurity CoTaskMemFree CoUninitialize IsEqualGUID

oleaut32

GetErrorInfo SafeArrayDestroy SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SysAllocString SysAllocStringLen SysFreeString SysReAllocStringLen SysStringLen VariantChangeTypeEx VariantClear VariantCopyInd VariantInit

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

188KB

Virtual Size

244KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

12KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

55KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

50KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

9bce28e9040c03f4ea1bf332c405e3a3d8f4086a568f15aec4f5ae9feff394fb

iphlpapi

msvfw32

advapi32

kernel32

version

wsock32

comctl32

comdlg32

gdi32

msacm32

shell32

user32

winmm

ole32

oleaut32

generic