cf76f0dfc6fecaee5422a7e0281acc7a9f55c7c52716dba92d6f10622ed275d1

Sharing

Copy URL Twitter E-mail

General

Target
cf76f0dfc6fecaee5422a7e0281acc7a9f55c7c52716dba92d6f10622ed275d1
Size 2.1MB
Sample240714-v6jttashqd
SHA256 cf76f0dfc6fecaee5422a7e0281acc7a9f55c7c52716dba92d6f10622ed275d1
MD5 bc82dc20d75a4b0d96289afc97643a9b
SHA1 7ff80bafa090fcc70c80161823e8becd912997d1
SHA512 cc258bae0d0241f54549c3600649ab4fc89909e2287aecb2ba53689bc632dd2ee1ce3aa89c4ca6582be13674e5ab46d0d6f9256df5e63d25669e74448a66bd4f
SSDEEP 24576:JyfGDkkjx71gWufN62I520/hjlB6iTzKFriZpWGt5YY7tOvkIOTARN1YXCmgAwWf:osxSNudSGZpW6d7tOvJO+iquMToL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf76f0dfc6fecaee5422a7e0281acc7a9f55c7c52716dba92d6f10622ed275d1

File Explorer

cf76f0dfc6fecaee5422a7e0281acc7a9f55c7c52716dba92d6f10622ed275d1

.exe 2.1MB

cf76f0dfc6fecaee5422a7e0281acc7a9f55c7c52716dba92d6f10622ed275d1

IMPHASH fe039cb181ab00f3549b96f5683c564c
SHA256 cf76f0dfc6fecaee5422a7e0281acc7a9f55c7c52716dba92d6f10622ed275d1
MD5 bc82dc20d75a4b0d96289afc97643a9b
SHA1 7ff80bafa090fcc70c80161823e8becd912997d1
SHA512 cc258bae0d0241f54549c3600649ab4fc89909e2287aecb2ba53689bc632dd2ee1ce3aa89c4ca6582be13674e5ab46d0d6f9256df5e63d25669e74448a66bd4f
SSDEEP 24576:JyfGDkkjx71gWufN62I520/hjlB6iTzKFriZpWGt5YY7tOvkIOTARN1YXCmgAwWf:osxSNudSGZpW6d7tOvJO+iquMToL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

982560

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\winapps\5.0\Build\QuickSearch\Release\QuickSearch.pdb

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

kernel32

GetEnvironmentVariableA SetUnhandledExceptionFilter GetCommandLineW LocalFree CreateFileMappingW MapViewOfFile UnmapViewOfFile GetComputerNameW SetFilePointer ReadFile GetCurrentProcessId FreeLibrary GetVersionExW GetDiskFreeSpaceExW GetVolumeInformationW VerifyVersionInfoW VerSetConditionMask LocalFileTimeToFileTime FindNextFileW FindClose FindFirstFileW GetOverlappedResult ReadDirectoryChangesW FileTimeToLocalFileTime CompareFileTime FileTimeToSystemTime CreateFileW WriteFile OutputDebugStringW SetEvent GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime GlobalFree ResumeThread DuplicateHandle QueryPerformanceCounter QueryPerformanceFrequency lstrcpyW GlobalUnlock GlobalLock GlobalAlloc CreateMutexW GetPrivateProfileStringW GetLogicalDrives CloseHandle GetLongPathNameW WideCharToMultiByte lstrlenA InterlockedExchange lstrlenW GetTickCount TerminateThread WaitForSingleObject MultiByteToWideChar LoadLibraryW GetFullPathNameA GetLastError SetLastError GetVersion GetModuleFileNameW Sleep GetFileAttributesW GetCurrentThreadId GetCurrentProcess GetModuleHandleW GetProcAddress LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection IsDebuggerPresent UnhandledExceptionFilter TerminateProcess GetStartupInfoW DeleteFileA AreFileApisANSI GetTempPathA DeleteFileW GetVersionExA OutputDebugStringA GetFileAttributesExW GetSystemInfo GetDiskFreeSpaceA CreateFileMappingA LoadLibraryA GetDiskFreeSpaceW LockFileEx HeapSize GetTempPathW FlushFileBuffers HeapValidate HeapCreate GetFileAttributesA HeapDestroy FormatMessageW FormatMessageA GetProcessHeap UnlockFileEx WaitForSingleObjectEx LockFile FlushViewOfFile UnlockFile InterlockedCompareExchange HeapFree HeapAlloc SetEndOfFile TryEnterCriticalSection HeapCompact GetFileSize CreateFileA HeapReAlloc GetFullPathNameW ExpandEnvironmentStringsW

user32

InvalidateRect GetFocus IsWindowVisible GetWindowRect IsWindow SendMessageW GetWindowRgnBox EnumChildWindows GetSysColorBrush TrackPopupMenu CallWindowProcW DestroyMenu DispatchMessageW TranslateMessage PeekMessageW MsgWaitForMultipleObjects MessageBoxW InsertMenuW CreateMenu GetMenuItemInfoW UnionRect GetMenuBarInfo CheckMenuItem EnableMenuItem ModifyMenuW GetMenuState SetWindowTextW InsertMenuItemW DrawIconEx GetSysColor GetCursor EnableWindow SetWindowPos SetActiveWindow LoadAcceleratorsW SetCapture ReleaseCapture ClientToScreen FillRect SetMenuDefaultItem GetDlgCtrlID TranslateAcceleratorW GetMenuItemID GetMenuItemCount GetKeyState IsZoomed GetWindow IsIconic GetSystemMetrics GetSubMenu LoadMenuW LoadIconW RegisterClipboardFormatW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard UnregisterHotKey RegisterHotKey SetPropW EnumWindows PostMessageW GetPropW wsprintfW LoadImageW DestroyIcon DrawIcon GetIconInfo GrayStringW DrawTextExW TabbedTextOutW MonitorFromPoint GetMonitorInfoW MonitorFromRect SetForegroundWindow GetLayeredWindowAttributes PtInRect GetForegroundWindow SetRectEmpty IsRectEmpty OffsetRect GetActiveWindow FrameRect GetWindowRgn SetWindowRgn SetLayeredWindowAttributes SystemParametersInfoW TrackMouseEvent EqualRect DrawTextW LoadCursorW SetCursor GetParent CopyRect SetRect ReleaseDC GetDC RedrawWindow LoadBitmapW AppendMenuW CreatePopupMenu ScreenToClient GetCursorPos GetClientRect SetTimer KillTimer SetWindowLongW GetWindowLongW

gdi32

GetBitmapDimensionEx GetMapMode LPtoDP SetBitmapDimensionEx GetBkMode CreateFontIndirectW CreateSolidBrush Escape ExtTextOutW FillRgn DPtoLP SetBrushOrgEx CreatePatternBrush CreatePen GetCurrentObject CreateFontW GetDeviceCaps FillPath EndPath BeginPath GetBkColor RectVisible FrameRgn CreateRoundRectRgn TextOutW GetDIBColorTable StretchBlt GetObjectW SetDIBColorTable DeleteObject CreateDIBSection DeleteDC GetTextExtentPoint32W CreateCompatibleBitmap SelectObject BitBlt PtVisible CreateCompatibleDC

shell32

ord43 ShellExecuteW SHGetSpecialFolderPathW SHGetFileInfoW SHBrowseForFolderW SHGetPathFromIDListW Shell_NotifyIconW ord165 SHGetSpecialFolderLocation CommandLineToArgvW ord701 SHGetDesktopFolder ord716 SHFileOperationW

comctl32

InitCommonControlsEx FlatSB_EnableScrollBar _TrackMouseEvent

shlwapi

PathIsDirectoryW StrFormatByteSizeW SHGetValueW SHSetValueW PathIsNetworkPathW PathFindExtensionW StrFormatKBSizeW ord354 PathFileExistsW

ole32

CoTaskMemAlloc CLSIDFromString CoTaskMemFree CoInitializeEx CoCreateInstance CoUninitialize CoInitialize

oleaut32

SysFreeString SysAllocString VariantInit VariantClear

gdiplus

GdipCreateFromHDC GdipCreateSolidFill GdipCloneBrush GdipDeleteBrush GdiplusShutdown GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromFile GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCloneImage GdipDrawImageI GdipDeleteGraphics GdipGetImageGraphicsContext GdipDisposeImage GdipAlloc GdipFree GdipFillRectangleI

Sharing

General

Malware Config

Signatures

File Explorer

cf76f0dfc6fecaee5422a7e0281acc7a9f55c7c52716dba92d6f10622ed275d1

version

kernel32

user32

gdi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

generic