19444c2a8c5936f16ca0c2823faa9b91e8538678aa4a2003fe49c6d03e12046b

Sharing

Copy URL Twitter E-mail

General

Target
19444c2a8c5936f16ca0c2823faa9b91e8538678aa4a2003fe49c6d03e12046b
Size 1.6MB
Sample240707-jy3feaxdpr
SHA256 19444c2a8c5936f16ca0c2823faa9b91e8538678aa4a2003fe49c6d03e12046b
MD5 212d967ed570fa020ea37ea56ca07ab0
SHA1 86d951be1166620a1300bcc6bae93c1b955113be
SHA512 c66a4234499f7c2ba334daa449a37e06714896ff4effc587bdec6bdd6cfc08223140010e126f30c28bc9f3185660e965b93a6973e233c4b1aac925978826c6a4
SSDEEP 24576:XYuyF0jY+ScvloS8d8kJt6EK2tbI6k52vqLR+JogynkKXJ:YUTdmTG2CLeyF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19444c2a8c5936f16ca0c2823faa9b91e8538678aa4a2003fe49c6d03e12046b

File Explorer

19444c2a8c5936f16ca0c2823faa9b91e8538678aa4a2003fe49c6d03e12046b

.exe 1.6MB

19444c2a8c5936f16ca0c2823faa9b91e8538678aa4a2003fe49c6d03e12046b

IMPHASH b9cdfb234c2515c0f10a4a982a97e914
SHA256 19444c2a8c5936f16ca0c2823faa9b91e8538678aa4a2003fe49c6d03e12046b
MD5 212d967ed570fa020ea37ea56ca07ab0
SHA1 86d951be1166620a1300bcc6bae93c1b955113be
SHA512 c66a4234499f7c2ba334daa449a37e06714896ff4effc587bdec6bdd6cfc08223140010e126f30c28bc9f3185660e965b93a6973e233c4b1aac925978826c6a4
SSDEEP 24576:XYuyF0jY+ScvloS8d8kJt6EK2tbI6k52vqLR+JogynkKXJ:YUTdmTG2CLeyF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

451296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_AGGRESIVE_WS_TRIM IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp _except_handler3

comctl32

ImageList_EndDrag ord17 ImageList_Write ImageList_Add ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_DrawEx ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIconSize ImageList_GetImageCount ImageList_Read ImageList_Remove ImageList_Replace ImageList_SetBkColor ImageList_SetIconSize

version

VerQueryValueA GetFileVersionInfoSizeA

kernel32

InterlockedExchange InterlockedDecrement IsBadReadPtr IsValidLocale LoadLibraryExA LoadResource LocalAlloc LocalFileTimeToFileTime LockResource lstrcmpA lstrcpyA lstrcpynA lstrlenA lstrlenW MulDiv MultiByteToWideChar QueryPerformanceFrequency RaiseException ReadFile ResetEvent SetComputerNameA SetCurrentDirectoryA SetEndOfFile SetErrorMode SetEvent SetFilePointer SetFileTime SetThreadLocale SetThreadPriority SizeofResource Sleep SystemTimeToFileTime TlsGetValue TlsSetValue UnmapViewOfFile VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WinExec WriteFile GetStartupInfoW GlobalUnlock GlobalMemoryStatus GlobalLock GlobalFree GlobalFindAtomA GlobalDeleteAtom GlobalAlloc GlobalAddAtomA GetWindowsDirectoryA GetVersionExA GetUserDefaultLCID GetThreadPriority GetThreadLocale GetTempPathA GetSystemInfo GetSystemDirectoryA GetStringTypeExA GetStdHandle GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLogicalDriveStringsA GetLocalTime GetLocaleInfoA GetLastError GetFullPathNameA GetFileSize GetFileAttributesA GetEnvironmentVariableA GetDriveTypeA GetDiskFreeSpaceA GetDateFormatA GetCurrentDirectoryA GetCPInfo GetComputerNameA GetACP FreeResource FreeLibrary FormatMessageA FindResourceA FindFirstFileA FindClose FileTimeToSystemTime FileTimeToLocalFileTime FileTimeToDosDateTime ExpandEnvironmentStringsA EnumCalendarInfoA DeviceIoControl DeleteCriticalSection CreateThread CreateFileA CreateEventA CreateDirectoryA CompareStringA GetSystemPowerStatus GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter IsValidCodePage GetCommandLineA InitializeCriticalSection EnterCriticalSection GetTickCount ExitProcess LeaveCriticalSection LoadLibraryA InterlockedIncrement

user32

IsChild IsDialogMessageA IsDialogMessageW IsIconic IsRectEmpty IsWindowEnabled IsWindowUnicode IsWindowVisible IsZoomed KillTimer LoadBitmapA LoadCursorA LoadIconA LoadKeyboardLayoutA LoadStringA LockWindowUpdate MapVirtualKeyA MapWindowPoints MessageBeep MessageBoxA OemToCharA OffsetRect OpenClipboard PeekMessageA PeekMessageW PostMessageA PostQuitMessage PtInRect RedrawWindow RegisterClassA RegisterClipboardFormatA RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollWindow SendMessageA SendMessageW SetActiveWindow SetCapture SetCaretBlinkTime SetCaretPos SetClassLongA SetClipboardData SetCursorPos SetDlgItemTextA SetFocus SetForegroundWindow SetKeyboardState SetMenuItemInfoA SetParent SetPropA SetRect SetScrollInfo SetScrollPos SetScrollRange SetSysColors SetTimer SetWindowLongA SetWindowLongW SetWindowPlacement SetWindowPos SetWindowsHookExA SetWindowTextA ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoA TabbedTextOutA TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnregisterClassA UpdateWindow WaitMessage WindowFromPoint InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId InvalidateRect GetWindowRect GetWindowPlacement GetWindowLongW GetWindowLongA GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropA GetParent GetMessagePos GetMenuStringA GetMenuState GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetLastActivePopup GetKeyState GetKeyNameTextA GetKeyboardType GetKeyboardState GetKeyboardLayoutNameA GetKeyboardLayoutList GetIconInfo GetFocus GetDoubleClickTime GetDlgItemTextA GetDialogBaseUnits GetDesktopWindow GetDCEx GetCursorPos GetClipboardData GetClientRect GetClassNameA GetClassLongA GetClassInfoA GetCaretPos GetCaretBlinkTime GetCapture GetActiveWindow FrameRect FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EnumDisplaySettingsA EnumChildWindows EndPaint EndDialog EndDeferWindowPos EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextA DrawMenuBar DrawIconEx DrawFrameControl DrawFocusRect DrawEdge DispatchMessageW DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcA DefMDIChildProcA DefFrameProcA CreateWindowExA CreatePopupMenu CreateMenu CreateIcon CloseClipboard ClientToScreen ChildWindowFromPoint CheckMenuItem CharUpperBuffA GetWindowTextA IntersectRect CharToOemA CharNextA CharLowerBuffA CharLowerA ChangeDisplaySettingsA CallWindowProcA CallNextHookEx BeginPaint BeginDeferWindowPos AdjustWindowRectEx GetForegroundWindow

gdi32

CreateRectRgn CreatePenIndirect CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject GetObjectA GetEnhMetaFileHeader GetPaletteEntries GetPixel GetRgnBox GetStockObject GetSystemPaletteEntries GetTextExtentPoint32A CreatePalette GetTextMetricsA GetWindowOrgEx GetWinMetaFileBits IntersectClipRect LineTo MaskBlt MoveToEx PatBlt PlayEnhMetaFile Polygon Polyline RealizePalette Rectangle RectVisible RestoreDC SaveDC SelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetEnhMetaFileBits SetPixelFormat SetROP2 SetStretchBltMode SetTextColor SetViewportOrgEx SetWindowOrgEx SetWinMetaFileBits StretchBlt UnrealizeObject GetEnhMetaFileBits GetDIBits CreateHalftonePalette CreateFontIndirectA CreateDIBSection CreateDIBitmap CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileA CombineRgn ChoosePixelFormat GetTextExtentPointA SetMapMode GetDIBColorTable GetDeviceCaps GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits GdiFlush ExtTextOutA ExcludeClipRect GetEnhMetaFilePaletteEntries

comdlg32

GetSaveFileNameA

advapi32

RegQueryValueExW RegQueryInfoKeyA RegOpenKeyExW RegFlushKey RegEnumValueA RegCreateKeyExA RegCreateKeyA LookupAccountNameA RegOpenKeyExA RegQueryValueExA RegCloseKey RegSetValueExA

shell32

ShellExecuteA

ole32

CoInitialize CoTaskMemAlloc CoTaskMemFree CoUninitialize ProgIDFromCLSID StringFromCLSID CoCreateInstance

oleaut32

VariantInit VariantCopyInd GetErrorInfo GetActiveObject SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SetErrorInfo SysAllocStringLen SysFreeString SysReAllocStringLen VariantChangeType VariantClear SafeArrayCreate

ws2_32

gethostname inet_ntoa WSACleanup WSAStartup

Name

.text

Size

440KB

Virtual Size

437KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

14.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

620KB

Virtual Size

620KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.avr12

Size

599KB

Virtual Size

599KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

19444c2a8c5936f16ca0c2823faa9b91e8538678aa4a2003fe49c6d03e12046b

msvcrt

comctl32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

ws2_32

generic