vivo 2024 - Материалы[.]rar

Sharing

Copy URL Twitter E-mail

General

Target
vivo 2024 - Материалы.rar
Size 58.5MB
Sample240630-vpgccs1dkb
SHA256 2f1caea4b57ec875eeabcf3d25c32a559564be15147b1b5ce85522b1fb6c78f0
MD5 7adcf82dde9e8c8b49b7a3e9f0f70954
SHA1 c6b7b816ff0728dbb1207fa6504961082a52eb1b
SHA512 38471fc477b0c4464e680c9d9ba5c6ba654f4b1d1a55c29e58301d295c9e962dae822add4795f18309ba80cccb95bf11c8013b0ebceee34bea183f9e25ad2cf4
SSDEEP 1572864:vYrZeq4w4pdErotxYu0ORdww+jQnT44dFar:vuEK4p0qEOowpnT43r
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/vivo Договор на оказание рекламных услуг.scr

File Explorer

vivo 2024 - Материалы.rar

.rar 58.5MB
vivo Договор на оказание рекламных услуг.scr

.exe 55.0MB
vivo Промо-Ролик.mp4

3.2MB
vivo Техническое Задание.pdf

.pdf 245KB

vivo 2024 - Материалы.rar

SHA256 2f1caea4b57ec875eeabcf3d25c32a559564be15147b1b5ce85522b1fb6c78f0
MD5 7adcf82dde9e8c8b49b7a3e9f0f70954
SHA1 c6b7b816ff0728dbb1207fa6504961082a52eb1b
SHA512 38471fc477b0c4464e680c9d9ba5c6ba654f4b1d1a55c29e58301d295c9e962dae822add4795f18309ba80cccb95bf11c8013b0ebceee34bea183f9e25ad2cf4
SSDEEP 1572864:vYrZeq4w4pdErotxYu0ORdww+jQnT44dFar:vuEK4p0qEOowpnT43r
MD5 SHA1 SHA512 SSDEEP

Password

2024

vivo Договор на оказание рекламных услуг.scr

IMPHASH b5504d340681f80a29e585410bb19fbb
SHA256 b563a0d625aa148c992413947b2d3ceae678c27fd6d1eadf8e9eb3e10d5206f5
MD5 70eac30776d13a02e4b6a5e6963c52b9
SHA1 b7deafce3ff7d7252ed29d6f508a49a6d1b63504
SHA512 fab91b7ba11ff12d2bfa2f2d2c260fa15a8b1543c108c3d81337a74d3933b7c9dc73b866ce3f294414aab031d646c52ea86251fe020501c11ff50ae2cc78a391
SSDEEP 196608:8xGxCrar4+WnAL3fljyBTEbAdoaU7wtq9oaqN:VxCGUnAL3OEEdou20N
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

2024

Minor OS version

Major OS version

Entry point

6805713

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\BuildAgent\work\Buckeye\Perforce\BioShock1\master\Output_Win32\Final\BioshockHD.pdb

kernel32

GetWindowsDirectoryA GetWindowsDirectoryW FreeLibrary GetModuleFileNameA GetModuleFileNameW GetProcAddress LoadLibraryW CopyFileA CopyFileW MoveFileA MoveFileW SetUnhandledExceptionFilter GetCurrentProcess GetCurrentProcessId GetLocalTime TlsGetValue InitializeCriticalSectionAndSpinCount TlsAlloc TlsSetValue TlsFree RaiseException WaitForSingleObject CreateThread GetExitCodeThread OutputDebugStringA LoadLibraryA GetSystemInfo InterlockedExchangeAdd FlushFileBuffers ReleaseSemaphore ExitProcess GetComputerNameA GlobalMemoryStatus CreateProcessW SystemTimeToFileTime GlobalLock GetComputerNameW GetFileAttributesExA GetSystemDirectoryW GetSystemDirectoryA SetThreadPriority GetCurrentThread OutputDebugStringW TerminateProcess GetSystemTimeAsFileTime Sleep CreateMutexW CreateMutexA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection QueryPerformanceFrequency GetLastError CloseHandle WriteFile SetFilePointer SetFileAttributesW SetFileAttributesA RemoveDirectoryW RemoveDirectoryA ReadFile GetFullPathNameA GetFileSize GetFileAttributesExW GetFileAttributesW GetFileAttributesA GetDiskFreeSpaceExW FindNextFileA FindFirstFileA DeleteFileW DeleteFileA CreateFileW CreateFileA CreateDirectoryW CreateDirectoryA GetCurrentDirectoryW GetCurrentDirectoryA WideCharToMultiByte MultiByteToWideChar lstrlenW VerSetConditionMask VerifyVersionInfoW GetFullPathNameW lstrcmpW LoadLibraryExW GetModuleHandleA SetLastError lstrcmpA LocalAlloc IsProcessorFeaturePresent DecodePointer EncodePointer GetLocaleInfoA GetLocaleInfoW GetSystemDefaultLangID GlobalDeleteAtom LockResource LoadResource FindResourceA MulDiv GlobalAddAtomW GetModuleHandleW LocalFree InterlockedDecrement InterlockedIncrement SetFilePointerEx SetThreadIdealProcessor ResumeThread SuspendThread TerminateThread SetThreadAffinityMask CreateSemaphoreW ResetEvent SetEvent CreateEventA PulseEvent TryEnterCriticalSection ExpandEnvironmentStringsW DebugBreak GetVersionExA IsDebuggerPresent lstrlenA GetCurrentThreadId InitializeCriticalSectionEx SetCurrentDirectoryW SetConsoleCtrlHandler GlobalUnlock CreateProcessA GetExitCodeProcess GetVersionExW FormatMessageW GlobalAlloc GetCommandLineA FormatMessageA QueryPerformanceCounter FindNextFileW FindFirstFileW FindClose InterlockedCompareExchange InterlockedExchange GetTickCount

user32

PeekMessageW MessageBoxW RegisterWindowMessageA RegisterWindowMessageW DispatchMessageA PeekMessageA SendMessageA SendMessageW SendMessageTimeoutW DestroyWindow ShowWindow SetWindowPos CreateDialogParamA CreateDialogParamW AdjustWindowRect SetCursorPos DispatchMessageW TranslateMessage SetActiveWindow GetMenu GetMenuState GetKeyNameTextW GetDlgItem SetFocus keybd_event MapVirtualKeyW GetSystemMetrics UpdateWindow GetForegroundWindow SetForegroundWindow SetPropA SetPropW GetPropA GetPropW RemovePropA RemovePropW GetDesktopWindow FindWindowExA FindWindowExW GetWindowThreadProcessId UnhookWindowsHookEx CallNextHookEx SystemParametersInfoW GetFocus GetSysColor EnableWindow ShowCursor SystemParametersInfoA AdjustWindowRectEx GetUpdateRect DrawTextExA DrawTextExW MessageBeep CheckMenuItem AppendMenuW DrawFocusRect DrawIcon GetIconInfo SetTimer KillTimer SetClassLongA GetClassLongA GetClassLongW SetClassLongW GetParent FrameRect DrawTextA DrawTextW GetDlgCtrlID GetWindow GetWindowTextA CreateDialogIndirectParamA EndDeferWindowPos BeginDeferWindowPos EndPaint ClientToScreen SetCursor ScreenToClient GetWindowRect InsertMenuItemA RegisterClassExA TrackPopupMenu IsIconic FillRect GetClassInfoExA SetCapture PostMessageW IsZoomed GetSubMenu DialogBoxParamW LoadMenuA LoadIconA LoadCursorW IsWindowEnabled SetMenu UnregisterHotKey GetAsyncKeyState GetMessageTime ValidateRect SetParent SetKeyboardState SetRect AttachThreadInput WindowFromPoint DrawEdge MapWindowPoints GetMenuItemInfoW BeginPaint GetClassInfoExW GetCapture GetKeyState SetClipboardData OpenClipboard GetActiveWindow EmptyClipboard GetClipboardData PostQuitMessage CloseClipboard ReleaseDC GetDC GetClientRect MessageBoxA MoveWindow DefWindowProcW CallWindowProcW SetMenuItemInfoW DialogBoxParamA LoadCursorA SetMenuItemInfoA DestroyMenu CallWindowProcA ReleaseCapture DefMDIChildProcA CreateWindowExW ClipCursor PostMessageA IsWindow GetMenuItemCount DefMDIChildProcW GetSysColorBrush CreatePopupMenu EnumChildWindows GetMenuItemInfoA GetCursorPos RegisterClassExW DefWindowProcA EndDialog SetWindowLongW CreateWindowExA GetWindowLongA GetWindowLongW BringWindowToTop LoadMenuW InvalidateRect SetWindowLongA LoadIconW

gdi32

GetObjectA CreateCompatibleDC SetBkMode DeleteObject PatBlt DeleteDC BitBlt CreatePen MoveToEx LineTo Rectangle SetTextColor SetBkColor ExtTextOutA GetTextExtentPoint32W GetTextExtentPoint32A TextOutW SelectObject CreateFontW CreateDIBitmap GetStockObject CreateSolidBrush GetDeviceCaps GetPixel

comdlg32

GetSaveFileNameA ChooseColorA

shell32

ShellExecuteW ShellExecuteA SHGetFolderPathW Shell_NotifyIconA

wsock32

WSAStartup WSAGetLastError gethostname __WSAFDIsSet accept bind closesocket connect inet_ntoa htons ioctlsocket inet_addr listen ntohs recv select send setsockopt socket gethostbyname WSAAsyncSelect

winmm

timeBeginPeriod timeEndPeriod

advapi32

RegQueryValueExA RegOpenKeyExA GetUserNameW GetUserNameA RegCloseKey RegSetValueExA RegCreateKeyExA

ole32

CoUninitialize CoSetProxyBlanket CoCreateInstance CoInitialize CoCreateGuid

oleaut32

SysFreeString SysAllocString

generic

count=7, id=199, version=41118,

count=10, id=205, version=50929,

count=21, id=206, version=50929,

count=4, id=203, version=50929,

count=6, id=207, version=50929,

count=2, id=221, productName=VS2013 UPD4 build 31101, version=31101,

count=702, id=211, version=61219,

count=4, id=156, version=21202,

count=2, id=123, productName=VS2005 build 50727, version=50727,

count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,

count=2, id=156, productName=VS2010 build 30319, version=30319,

count=1012, id=207, productName=VS2012 build 50727, version=50727,

count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=171, productName=VS2010 build 30319, version=30319,

count=29, id=185, version=30716,

count=58, id=96, productName=VS2003 (.NET) build 3077, version=3077,

count=43, id=95, productName=VS2003 (.NET) build 3077, version=3077,

count=2, id=221, productName=VS2013 UPD5 build 40629, version=40629,

count=761, id=1, productName=Unmarked objects,

count=6, id=207, version=61219,

count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,

count=3, id=151,

count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,