69c8d75a339e6f268f00968bfc64eeac2dda8d66a48fcf95f0f65495d19fb558

Resubmissions

04/07/2024, 12:52

240704-p4gnsayhqf 7

24/06/2024, 09:08

240624-k38nnaxgrk 7

Sharing

Copy URL Twitter E-mail

General

Target

69c8d75a339e6f268f00968bfc64eeac2dda8d66a48fcf95f0f65495d19fb558
Size

456KB
MD5

5727f56ae7f7799ac18e656049f6136f
SHA1

9b2002edd20da45c2bea5fb18b06505d91155af8
SHA256

69c8d75a339e6f268f00968bfc64eeac2dda8d66a48fcf95f0f65495d19fb558
SHA512

e5638add69d5d480c3f4aea3f4cac71ab97c7554df31dc58ba135900d9ea65be6f0b0267f2fbe034c7d7b800a51408f65d43f801f0bf019a90a6c6eb4dac4985
SSDEEP

12288:1Iiguz7U1CQhk80HeFEAOCoVxfCzCY6FXz4w0:1IipkppKe6AOPoCYOD0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69c8d75a339e6f268f00968bfc64eeac2dda8d66a48fcf95f0f65495d19fb558

Files

69c8d75a339e6f268f00968bfc64eeac2dda8d66a48fcf95f0f65495d19fb558
.exe windows:4 windows x86 arch:x86

6da163ecb886097473cac90f664f8a6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
TerminateProcess
IsDebuggerPresent
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetACP
IsValidCodePage
LCMapStringW
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetErrorMode
GetOEMCP
GetCPInfo
CreateFileA
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GlobalFlags
InterlockedDecrement
WritePrivateProfileStringA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GlobalUnlock
GlobalFree
FreeResource
GetCurrentProcessId
GlobalAddAtomA
ResumeThread
SetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalLock
lstrcmpA
FreeLibrary
CreateThread
WaitForMultipleObjects
SetEvent
GetFullPathNameW
WaitForSingleObject
Sleep
OpenFileMappingA
MapViewOfFile
VirtualAlloc
LocalAlloc
MulDiv
LocalFree
LoadLibraryA
LoadLibraryW
GetProcAddress
GetModuleFileNameW
CreateEventA
CreateFileW
ReadFileEx
WaitForSingleObjectEx
CloseHandle
ExitThread
GlobalAlloc
GetModuleHandleA
GetLastError
lstrlenA
RaiseException
WideCharToMultiByte
CompareStringA
MultiByteToWideChar
InterlockedExchange
GetVersion
LCMapStringA

user32

GetDesktopWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
GetLastActivePopup
IsWindowEnabled
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
PeekMessageA
ValidateRect
SetMenuItemBitmaps
LoadBitmapA
GetFocus
ModifyMenuA
GetMenuState
CheckMenuItem
PostMessageA
LoadImageA
UpdateWindow
SetScrollPos
InsertMenuItemA
BeginPaint
EndPaint
SetCapture
GetCursorPos
GetDialogBaseUnits
EnableMenuItem
LoadCursorA
GetMenuCheckMarkDimensions
GetWindowThreadProcessId
GetWindowTextA
GetSysColor
SetSysColors
FindWindowA
WaitForInputIdle
ShowWindow
SetForegroundWindow
CopyRect
SetFocus
SendDlgItemMessageA
DialogBoxParamA
GetWindowWord
DrawFocusRect
MessageBoxA
PostQuitMessage
DefWindowProcA
GetKeyState
SystemParametersInfoA
wsprintfA
GetParent
DrawIcon
LoadIconA
DestroyIcon
GetDlgItemTextA
EnumWindowStationsW
DialogBoxIndirectParamA
InvalidateRect
EqualRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetWindow
GetWindowPlacement
GetClientRect
GetClassNameA
SetWindowLongA
ScreenToClient
PtInRect
GetDlgItem
GetTopWindow
GetWindowLongA
GetDC
ReleaseDC
IsZoomed
DrawFrameControl
GetWindowRect
GetSystemMetrics
FrameRect
IsIconic
SetWindowPos
CallWindowProcA
GetDlgCtrlID
FillRect
OffsetRect
InflateRect
DrawIconEx
SendMessageA
GetScrollInfo
AdjustWindowRectEx
RegisterClassA
GetClassInfoA
GetClassInfoExA
UnregisterClassA
GetSysColorBrush
DestroyMenu
FindWindowExA
EnableWindow
DestroyCursor
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetForegroundWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetScrollRange
GetScrollPos
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
SetActiveWindow
CreateWindowExA
SetScrollInfo

gdi32

SetMapMode
PtVisible
RectVisible
TextOutA
ExtTextOutA
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
RestoreDC
SaveDC
GetClipBox
CreateBitmap
GetObjectA
CreateHalftonePalette
SelectPalette
RealizePalette
SetTextAlign
SetTextColor
GetDeviceCaps
SetViewportOrgEx
CreateCompatibleDC
SelectObject
GetTextExtentPoint32A
GetTextMetricsA
DeleteDC
CreateCompatibleBitmap
GetStockObject
SetBkColor
DeleteObject
Escape
CreateSolidBrush

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

CryptGetUserKey
CryptGetProvParam
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCloseKey
RegDeleteValueA

shell32

ShellExecuteExA
SHGetFileInfoA
ExtractIconExA
ShellExecuteA

comctl32

ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_Draw
ImageList_GetImageCount

shlwapi

PathParseIconLocationW
SHDeleteKeyA
PathFindFileNameA
PathFindExtensionA

opengl32

wglCreateContext
wglMakeCurrent

ole32

CoInitialize
GetRunningObjectTable
RevokeDragDrop
CoLockObjectExternal

oleaut32

VariantInit
VariantChangeType
VariantClear

mpr

WNetEnumResourceA
WNetCloseEnum
WNetOpenEnumA

userenv

CreateEnvironmentBlock

avifil32

AVIStreamStart

avicap32

capGetDriverDescriptionA

winmm

SendDriverMessage
timeSetEvent
timeKillEvent

rpcrt4

RpcStringBindingComposeA
RpcStringFreeA
RpcBindingFromStringBindingA

dbghelp

SymMatchFileName
SymLoadModule

setupapi

SetupDiSetDeviceInstallParamsA
SetupDiGetClassDevsA
SetupDiSetDeviceRegistryPropertyA
SetupDiGetDeviceInstallParamsA

wtsapi32

WTSQuerySessionInformationA

dnsapi

DnsQuery_UTF8
DnsQuery_A

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

6da163ecb886097473cac90f664f8a6d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

opengl32

ole32

oleaut32

mpr

userenv

avifil32

avicap32

winmm

rpcrt4

dbghelp

setupapi

wtsapi32

dnsapi

Sections

.text Size: 216KB - Virtual size: 214KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 168KB - Virtual size: 166KB

.text
Size: 216KB - Virtual size: 214KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 168KB - Virtual size: 166KB