1dbc32909a3c7c47e4aebcabdd90654f058e687f1a2e066b0f947e3dd8a6d54a

Sharing

Copy URL Twitter E-mail

General

Target
1dbc32909a3c7c47e4aebcabdd90654f058e687f1a2e066b0f947e3dd8a6d54a
Size 1.9MB
Sample240713-t384vs1apc
SHA256 1dbc32909a3c7c47e4aebcabdd90654f058e687f1a2e066b0f947e3dd8a6d54a
MD5 69521a127073367c77ab5d875c7c6b80
SHA1 2820ee226f042e274ac87ec9d0d2af94c3fd8f2c
SHA512 d4f65a854674c8010ccd65637eb235ee91424f5dd14d396c16ed62290e88786059e6739ef76415e88fc90ed003554de7a6bcf4277df8dcc4d7238673944f95f8
SSDEEP 24576:lDaObOjx71gWufN62I520/hjlB6iTzKFjiZpWFsZrKp0HqGmyejFyJigEGTiZ8ZK:lDsxSNudSOZpW+wG8gi7WMN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dbc32909a3c7c47e4aebcabdd90654f058e687f1a2e066b0f947e3dd8a6d54a

File Explorer

1dbc32909a3c7c47e4aebcabdd90654f058e687f1a2e066b0f947e3dd8a6d54a

.exe 1.9MB

1dbc32909a3c7c47e4aebcabdd90654f058e687f1a2e066b0f947e3dd8a6d54a

IMPHASH f7da029034c60bf8e581bd25aede6122
SHA256 1dbc32909a3c7c47e4aebcabdd90654f058e687f1a2e066b0f947e3dd8a6d54a
MD5 69521a127073367c77ab5d875c7c6b80
SHA1 2820ee226f042e274ac87ec9d0d2af94c3fd8f2c
SHA512 d4f65a854674c8010ccd65637eb235ee91424f5dd14d396c16ed62290e88786059e6739ef76415e88fc90ed003554de7a6bcf4277df8dcc4d7238673944f95f8
SSDEEP 24576:lDaObOjx71gWufN62I520/hjlB6iTzKFjiZpWFsZrKp0HqGmyejFyJigEGTiZ8ZK:lDsxSNudSOZpW+wG8gi7WMN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

982560

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\winapps\5.0\Build\QuickSearch\Release\QuickSearch.pdb

kernel32

GetEnvironmentVariableA SetUnhandledExceptionFilter GetCommandLineW LocalFree CreateFileMappingW MapViewOfFile UnmapViewOfFile GetComputerNameW SetFilePointer ReadFile GetCurrentProcessId FreeLibrary GetVersionExW GetDiskFreeSpaceExW GetVolumeInformationW VerifyVersionInfoW VerSetConditionMask LocalFileTimeToFileTime FindNextFileW FindClose FindFirstFileW GetOverlappedResult ReadDirectoryChangesW FileTimeToLocalFileTime CompareFileTime FileTimeToSystemTime CreateFileW WriteFile OutputDebugStringW SetEvent GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime GlobalFree ResumeThread DuplicateHandle QueryPerformanceCounter QueryPerformanceFrequency lstrcpyW GlobalUnlock GlobalLock GlobalAlloc CreateMutexW GetPrivateProfileStringW GetLogicalDrives CloseHandle GetLongPathNameW WideCharToMultiByte lstrlenA InterlockedExchange lstrlenW GetTickCount TerminateThread WaitForSingleObject MultiByteToWideChar LoadLibraryW GetFullPathNameA GetLastError SetLastError GetVersion GetModuleFileNameW Sleep GetFileAttributesW GetCurrentThreadId GetCurrentProcess GetModuleHandleW GetProcAddress LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection IsDebuggerPresent UnhandledExceptionFilter TerminateProcess GetStartupInfoW DeleteFileA AreFileApisANSI GetTempPathA DeleteFileW GetVersionExA OutputDebugStringA GetFileAttributesExW GetSystemInfo GetDiskFreeSpaceA CreateFileMappingA LoadLibraryA GetDiskFreeSpaceW LockFileEx HeapSize GetTempPathW FlushFileBuffers HeapValidate HeapCreate GetFileAttributesA HeapDestroy FormatMessageW FormatMessageA GetProcessHeap UnlockFileEx WaitForSingleObjectEx LockFile FlushViewOfFile UnlockFile InterlockedCompareExchange HeapFree HeapAlloc SetEndOfFile TryEnterCriticalSection HeapCompact GetFileSize CreateFileA HeapReAlloc GetFullPathNameW ExpandEnvironmentStringsW

user32

InvalidateRect GetFocus IsWindowVisible GetWindowRect IsWindow SendMessageW GetWindowRgnBox EnumChildWindows GetSysColorBrush TrackPopupMenu CallWindowProcW DestroyMenu DispatchMessageW TranslateMessage PeekMessageW MsgWaitForMultipleObjects MessageBoxW InsertMenuW CreateMenu GetMenuItemInfoW UnionRect GetMenuBarInfo CheckMenuItem EnableMenuItem ModifyMenuW GetMenuState SetWindowTextW InsertMenuItemW DrawIconEx GetSysColor GetCursor EnableWindow SetWindowPos SetActiveWindow LoadAcceleratorsW SetCapture ReleaseCapture ClientToScreen FillRect SetMenuDefaultItem GetDlgCtrlID TranslateAcceleratorW GetMenuItemID GetMenuItemCount GetKeyState IsZoomed GetWindow IsIconic GetSystemMetrics GetSubMenu LoadMenuW LoadIconW RegisterClipboardFormatW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard UnregisterHotKey RegisterHotKey SetPropW EnumWindows PostMessageW GetPropW wsprintfW LoadImageW DestroyIcon DrawIcon GetIconInfo GrayStringW DrawTextExW TabbedTextOutW MonitorFromPoint GetMonitorInfoW MonitorFromRect SetForegroundWindow GetLayeredWindowAttributes PtInRect GetForegroundWindow SetRectEmpty IsRectEmpty OffsetRect GetActiveWindow FrameRect GetWindowRgn SetWindowRgn SetLayeredWindowAttributes SystemParametersInfoW TrackMouseEvent EqualRect DrawTextW LoadCursorW SetCursor GetParent CopyRect SetRect ReleaseDC GetDC RedrawWindow LoadBitmapW AppendMenuW CreatePopupMenu ScreenToClient GetCursorPos GetClientRect SetTimer KillTimer SetWindowLongW GetWindowLongW

gdi32

GetBitmapDimensionEx GetMapMode LPtoDP SetBitmapDimensionEx GetBkMode CreateFontIndirectW CreateSolidBrush Escape ExtTextOutW FillRgn DPtoLP SetBrushOrgEx CreatePatternBrush CreatePen GetCurrentObject CreateFontW GetDeviceCaps FillPath EndPath BeginPath GetBkColor RectVisible FrameRgn CreateRoundRectRgn TextOutW GetDIBColorTable StretchBlt GetObjectW SetDIBColorTable DeleteObject CreateDIBSection DeleteDC GetTextExtentPoint32W CreateCompatibleBitmap SelectObject BitBlt PtVisible CreateCompatibleDC

shell32

ord43 ShellExecuteW SHGetSpecialFolderPathW SHGetFileInfoW SHBrowseForFolderW SHGetPathFromIDListW Shell_NotifyIconW ord165 SHGetSpecialFolderLocation CommandLineToArgvW ord701 SHGetDesktopFolder ord716 SHFileOperationW

shlwapi

PathIsDirectoryW StrFormatByteSizeW SHGetValueW SHSetValueW PathIsNetworkPathW PathFindExtensionW StrFormatKBSizeW ord354 PathFileExistsW

ole32

CoTaskMemAlloc CLSIDFromString CoTaskMemFree CoInitializeEx CoCreateInstance CoUninitialize CoInitialize

oleaut32

SysFreeString SysAllocString VariantInit VariantClear

Sharing

General

Malware Config

Signatures

File Explorer

1dbc32909a3c7c47e4aebcabdd90654f058e687f1a2e066b0f947e3dd8a6d54a

kernel32

user32

gdi32

shell32

shlwapi

ole32

oleaut32

generic