8a65162c1638b2f14c1f122d7ccd1620c75a273192db831de9f3cf5b2963a061

Sharing

Copy URL Twitter E-mail

General

Target
8a65162c1638b2f14c1f122d7ccd1620c75a273192db831de9f3cf5b2963a061
Size 10.6MB
Sample240630-bwgrxsvfml
SHA256 8a65162c1638b2f14c1f122d7ccd1620c75a273192db831de9f3cf5b2963a061
MD5 aee34d4c14d5e15cf33f764c65218adc
SHA1 688e3d7cac3cdcb8029988835b3a6d9bde7b00e1
SHA512 4eded2530dad1d63168238218c78c8a0cf487107621bb5ca1104c75cbadc95c71b0f706fc383b25f5540ba4df4fa44b722fe468fe057113c94a7a496ac97bcaa
SSDEEP 196608:L7kzYy2a9I9+I/G7HZHDRLSP4eJ547E4GXjkRhc9M2Rb4MvowuJtJVm:qp2a9I9QLdhPT7EVXjk0e2aMQtt2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a65162c1638b2f14c1f122d7ccd1620c75a273192db831de9f3cf5b2963a061

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2

File Explorer

8a65162c1638b2f14c1f122d7ccd1620c75a273192db831de9f3cf5b2963a061

.exe 10.6MB

8a65162c1638b2f14c1f122d7ccd1620c75a273192db831de9f3cf5b2963a061

IMPHASH bda143ec8f6fcebc7755323c21daa9f4
SHA256 8a65162c1638b2f14c1f122d7ccd1620c75a273192db831de9f3cf5b2963a061
MD5 aee34d4c14d5e15cf33f764c65218adc
SHA1 688e3d7cac3cdcb8029988835b3a6d9bde7b00e1
SHA512 4eded2530dad1d63168238218c78c8a0cf487107621bb5ca1104c75cbadc95c71b0f706fc383b25f5540ba4df4fa44b722fe468fe057113c94a7a496ac97bcaa
SSDEEP 196608:L7kzYy2a9I9+I/G7HZHDRLSP4eJ547E4GXjkRhc9M2Rb4MvowuJtJVm:qp2a9I9QLdhPT7EVXjk0e2aMQtt2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

670210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvfw32

DrawDibDraw

avifil32

AVIStreamGetFrame AVIStreamInfoA

winmm

midiOutPrepareHeader PlaySoundA waveOutUnprepareHeader waveOutPrepareHeader waveOutWrite midiStreamClose waveOutPause waveOutReset midiStreamRestart midiOutReset midiStreamStop midiStreamOut midiStreamProperty midiStreamOpen midiOutUnprepareHeader waveOutOpen waveOutGetNumDevs waveOutClose

ws2_32

inet_addr gethostbyname WSAStartup WSACleanup select send closesocket WSAAsyncSelect htons socket recvfrom ioctlsocket connect recv getpeername accept __WSAFDIsSet shutdown inet_ntoa WSAGetLastError

rasapi32

RasGetConnectStatusA RasHangUpA

kernel32

SetLastError GetTimeZoneInformation GetVersion IsDBCSLeadByte lstrcmpA lstrcmpiA lstrcpynA FileTimeToSystemTime InterlockedDecrement VirtualAlloc VirtualFree TerminateThread InterlockedIncrement LocalFree FormatMessageA FileTimeToLocalFileTime DuplicateHandle FlushFileBuffers LockFile UnlockFile SetEndOfFile GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA LocalAlloc TlsAlloc GlobalHandle TlsFree TlsSetValue LocalReAlloc TlsGetValue GetFileTime GetCurrentThread GlobalFlags GetProfileIntA SetErrorMode GetProcessVersion GetCPInfo GetOEMCP GetStartupInfoA RtlUnwind GetSystemTime GetLocalTime RaiseException GetFileType HeapSize GetACP SetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetEnvironmentVariableA HeapDestroy HeapCreate SetEnvironmentVariableA LCMapStringA LCMapStringW IsBadWritePtr SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW CompareStringA CompareStringW IsBadReadPtr IsBadCodePtr TerminateProcess GetFileSize SetFilePointer CreateToolhelp32Snapshot Process32First Process32Next WideCharToMultiByte MultiByteToWideChar GetCurrentProcess GetWindowsDirectoryA GetSystemDirectoryA CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA WriteFile ReadFile GetLastError WaitForMultipleObjects CreateFileA SetEvent FindResourceA LoadResource LockResource lstrlenW GetModuleFileNameA GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA lstrlenA WinExec lstrcpyA FindNextFileA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc GetFullPathNameA FreeLibrary LoadLibraryA GetVersionExA WritePrivateProfileStringA GetPrivateProfileStringA CreateThread CreateEventA Sleep GlobalAlloc GlobalLock GlobalUnlock GetTempPathA FindFirstFileA FindClose SetFileAttributesA GetFileAttributesA CopyFileA CreateDirectoryA SetCurrentDirectoryA GetVolumeInformationA GetModuleHandleA GetProcAddress MulDiv GetCommandLineA GetTickCount WaitForSingleObject CloseHandle InterlockedExchange GetCurrentProcessId

user32

GetSysColorBrush ShowScrollBar GetScrollPos RegisterClassA GetMenuItemCount GetMenuItemID CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetLastActivePopup RegisterWindowMessageA GetWindowPlacement EndDialog CreateDialogIndirectParamA DestroyWindow EndPaint BeginPaint GetWindowDC GetWindowTextLengthA SetWindowTextA CharUpperA GetWindowTextA GetDlgItem GetClassNameA GetDesktopWindow GetForegroundWindow DrawStateA GetNextDlgTabItem FrameRect GetDoubleClickTime GetCursor ClipCursor GrayStringA DrawTextA TabbedTextOutA LoadIconA TranslateMessage DrawFrameControl DrawEdge DrawFocusRect WindowFromPoint GetMessageA DispatchMessageA RegisterClipboardFormatA CreateIconFromResourceEx CreateIconFromResource DrawIconEx CreatePopupMenu AppendMenuA ModifyMenuA CreateMenu CreateAcceleratorTableA GetDlgCtrlID GetSubMenu EnableMenuItem ClientToScreen LoadImageA SystemParametersInfoA ShowWindow IsWindowEnabled TranslateAcceleratorA GetKeyState CopyAcceleratorTableA PostQuitMessage IsZoomed GetClassInfoA DefWindowProcA GetSystemMenu DeleteMenu GetMenu SetMenu PeekMessageA IsIconic SetFocus GetActiveWindow GetWindow DestroyAcceleratorTable SetWindowRgn GetMessagePos ScreenToClient ChildWindowFromPointEx CopyRect LoadBitmapA WinHelpA KillTimer SetTimer ReleaseCapture GetCapture SetCapture GetScrollRange SetScrollRange SetScrollPos SetRect InflateRect IntersectRect DestroyIcon PtInRect OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA GetSysColor SetActiveWindow SetCursorPos LoadCursorA SetCursor GetDC FillRect InvertRect IsRectEmpty ReleaseDC IsChild UnregisterClassA LoadStringA SetRectEmpty wvsprintfA GetMenuCheckMarkDimensions GetMenuState SetMenuItemBitmaps CheckMenuItem MoveWindow IsDialogMessageA ScrollWindowEx SendDlgItemMessageA MapWindowPoints AdjustWindowRectEx DestroyMenu SetForegroundWindow GetWindowRect EqualRect UpdateWindow ValidateRect InvalidateRect GetClientRect GetFocus GetParent GetTopWindow PostMessageA IsWindow SetParent DestroyCursor SendMessageA SetWindowPos MessageBeep MessageBoxA GetCursorPos GetSystemMetrics IsClipboardFormatAvailable EmptyClipboard SetClipboardData OpenClipboard GetClipboardData CloseClipboard wsprintfA ScrollWindow GetScrollInfo EnumDisplaySettingsA SetScrollInfo

gdi32

CombineRgn PatBlt CreatePen GetObjectA SelectObject CreatePatternBrush CreateBitmap CreateDCA CreateCompatibleBitmap GetPolyFillMode GetStretchBltMode GetROP2 GetBkColor GetBkMode GetTextColor CreateRoundRectRgn CreateEllipticRgn PathToRegion EndPath BeginPath GetWindowOrgEx GetViewportOrgEx GetWindowExtEx GetDIBits RealizePalette SelectPalette StretchBlt CreateRectRgn FillRgn CreateDIBSection CreateRectRgnIndirect SetBkColor SetStretchBltMode RectVisible TextOutA ExtTextOutA GetTextMetricsA Escape AbortDoc CreateFontA SetBrushOrgEx SetBkMode SetTextColor SetDIBitsToDevice CreateSolidBrush SaveDC RestoreDC SetPolyFillMode SetROP2 SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetClipBox ExcludeClipRect MoveToEx LineTo ExtSelectClipRgn GetViewportExtEx CopyMetaFileA Ellipse Rectangle LPtoDP DPtoLP GetCurrentObject RoundRect GetClipRgn CreatePolygonRgn SelectClipRgn DeleteObject CreateDIBitmap GetSystemPaletteEntries GetStockObject CreateFontIndirectA EndPage EndDoc DeleteDC StartDocA StartPage BitBlt GetPixel CreateCompatibleDC GetTextExtentPoint32A PtVisible GetDeviceCaps CreatePalette

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

comdlg32

PrintDlgA ChooseColorA GetOpenFileNameA GetSaveFileNameA GetFileTitleA

advapi32

RegQueryValueA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey RegCreateKeyExA

shell32

SHBrowseForFolderA SHGetSpecialFolderPathA SHGetPathFromIDListA ShellExecuteA Shell_NotifyIconA SHGetMalloc

ole32

DoDragDrop OleGetClipboard OleIsCurrentClipboard OleFlushClipboard OleSetClipboard ReleaseStgMedium CoLockObjectExternal CoTaskMemFree CoUninitialize OleInitialize CreateStreamOnHGlobal CoCreateInstance OleUninitialize CLSIDFromString RevokeDragDrop OleDuplicateData CoTaskMemAlloc

oleaut32

UnRegisterTypeLi RegisterTypeLi LoadTypeLi VarDateFromStr VariantClear

comctl32

ImageList_AddMasked ImageList_Draw ImageList_GetImageInfo _TrackMouseEvent ord17 ImageList_Destroy ImageList_Create

wininet

InternetCloseHandle

generic

count=1, id=28, version=9178,

count=3, id=11, version=8798,

count=5, id=12, version=7291,

count=9, id=11, version=8047,

count=6, id=10, version=8047,

count=47, id=19, version=8022,

count=2, id=93, version=2179,

count=44, id=14, version=7299,

count=759, id=1, productName=Unmarked objects,

count=31, id=19, version=8034,

count=9, id=18, version=8444,

count=1, id=149, productName=VS2008 SP1 build 30729, version=30729,

count=255, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=124, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=154, id=11, productName=VS98 (6.0) build 8168, version=8168,

count=146, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=100, productName=Unmarked objects (old),

count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,