50b9443ba229545f4876815569422829ec0ea6123c02d67152e1858166c8dbf0

Sharing

Copy URL Twitter E-mail

General

Target
50b9443ba229545f4876815569422829ec0ea6123c02d67152e1858166c8dbf0
Size 2.2MB
Sample240714-v6jttazhmk
SHA256 50b9443ba229545f4876815569422829ec0ea6123c02d67152e1858166c8dbf0
MD5 7260296242b0b5447b0b90f07d9bc1ea
SHA1 0ca7c8abb0f5134eed3ba3b349c7b49a5412750f
SHA512 4e3dff05a1b43ba770a04b796deaada3521b6e95146d59f2d8eb838fd78dcbf1262ae7692020481906e897e773657a2f6a79995616b99bcd927f9d6c4e992310
SSDEEP 24576:oyfGDkkjx71gWufN62I520/hjlB6iTzKFriZpWIt5YY7tOvkIOTlRN1YXCmgAwWS:BsxSNudSGZpWwd7tOvJO9iq3MToL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50b9443ba229545f4876815569422829ec0ea6123c02d67152e1858166c8dbf0

File Explorer

50b9443ba229545f4876815569422829ec0ea6123c02d67152e1858166c8dbf0

.exe 2.2MB

50b9443ba229545f4876815569422829ec0ea6123c02d67152e1858166c8dbf0

IMPHASH fe039cb181ab00f3549b96f5683c564c
SHA256 50b9443ba229545f4876815569422829ec0ea6123c02d67152e1858166c8dbf0
MD5 7260296242b0b5447b0b90f07d9bc1ea
SHA1 0ca7c8abb0f5134eed3ba3b349c7b49a5412750f
SHA512 4e3dff05a1b43ba770a04b796deaada3521b6e95146d59f2d8eb838fd78dcbf1262ae7692020481906e897e773657a2f6a79995616b99bcd927f9d6c4e992310
SSDEEP 24576:oyfGDkkjx71gWufN62I520/hjlB6iTzKFriZpWIt5YY7tOvkIOTlRN1YXCmgAwWS:BsxSNudSGZpWwd7tOvJO9iq3MToL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

982560

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\winapps\5.0\Build\QuickSearch\Release\QuickSearch.pdb

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

kernel32

GetEnvironmentVariableA SetUnhandledExceptionFilter GetCommandLineW LocalFree CreateFileMappingW MapViewOfFile UnmapViewOfFile GetComputerNameW SetFilePointer ReadFile GetCurrentProcessId FreeLibrary GetVersionExW GetDiskFreeSpaceExW GetVolumeInformationW VerifyVersionInfoW VerSetConditionMask LocalFileTimeToFileTime FindNextFileW FindClose FindFirstFileW GetOverlappedResult ReadDirectoryChangesW FileTimeToLocalFileTime CompareFileTime FileTimeToSystemTime CreateFileW WriteFile OutputDebugStringW SetEvent GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime GlobalFree ResumeThread DuplicateHandle QueryPerformanceCounter QueryPerformanceFrequency lstrcpyW GlobalUnlock GlobalLock GlobalAlloc CreateMutexW GetPrivateProfileStringW GetLogicalDrives CloseHandle GetLongPathNameW WideCharToMultiByte lstrlenA InterlockedExchange lstrlenW GetTickCount TerminateThread WaitForSingleObject MultiByteToWideChar LoadLibraryW GetFullPathNameA GetLastError SetLastError GetVersion GetModuleFileNameW Sleep GetFileAttributesW GetCurrentThreadId GetCurrentProcess GetModuleHandleW GetProcAddress LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection IsDebuggerPresent UnhandledExceptionFilter TerminateProcess GetStartupInfoW DeleteFileA AreFileApisANSI GetTempPathA DeleteFileW GetVersionExA OutputDebugStringA GetFileAttributesExW GetSystemInfo GetDiskFreeSpaceA CreateFileMappingA LoadLibraryA GetDiskFreeSpaceW LockFileEx HeapSize GetTempPathW FlushFileBuffers HeapValidate HeapCreate GetFileAttributesA HeapDestroy FormatMessageW FormatMessageA GetProcessHeap UnlockFileEx WaitForSingleObjectEx LockFile FlushViewOfFile UnlockFile InterlockedCompareExchange HeapFree HeapAlloc SetEndOfFile TryEnterCriticalSection HeapCompact GetFileSize CreateFileA HeapReAlloc GetFullPathNameW ExpandEnvironmentStringsW

user32

InvalidateRect GetFocus IsWindowVisible GetWindowRect IsWindow SendMessageW GetWindowRgnBox EnumChildWindows GetSysColorBrush TrackPopupMenu CallWindowProcW DestroyMenu DispatchMessageW TranslateMessage PeekMessageW MsgWaitForMultipleObjects MessageBoxW InsertMenuW CreateMenu GetMenuItemInfoW UnionRect GetMenuBarInfo CheckMenuItem EnableMenuItem ModifyMenuW GetMenuState SetWindowTextW InsertMenuItemW DrawIconEx GetSysColor GetCursor EnableWindow SetWindowPos SetActiveWindow LoadAcceleratorsW SetCapture ReleaseCapture ClientToScreen FillRect SetMenuDefaultItem GetDlgCtrlID TranslateAcceleratorW GetMenuItemID GetMenuItemCount GetKeyState IsZoomed GetWindow IsIconic GetSystemMetrics GetSubMenu LoadMenuW LoadIconW RegisterClipboardFormatW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard UnregisterHotKey RegisterHotKey SetPropW EnumWindows PostMessageW GetPropW wsprintfW LoadImageW DestroyIcon DrawIcon GetIconInfo GrayStringW DrawTextExW TabbedTextOutW MonitorFromPoint GetMonitorInfoW MonitorFromRect SetForegroundWindow GetLayeredWindowAttributes PtInRect GetForegroundWindow SetRectEmpty IsRectEmpty OffsetRect GetActiveWindow FrameRect GetWindowRgn SetWindowRgn SetLayeredWindowAttributes SystemParametersInfoW TrackMouseEvent EqualRect DrawTextW LoadCursorW SetCursor GetParent CopyRect SetRect ReleaseDC GetDC RedrawWindow LoadBitmapW AppendMenuW CreatePopupMenu ScreenToClient GetCursorPos GetClientRect SetTimer KillTimer SetWindowLongW GetWindowLongW

gdi32

GetBitmapDimensionEx GetMapMode LPtoDP SetBitmapDimensionEx GetBkMode CreateFontIndirectW CreateSolidBrush Escape ExtTextOutW FillRgn DPtoLP SetBrushOrgEx CreatePatternBrush CreatePen GetCurrentObject CreateFontW GetDeviceCaps FillPath EndPath BeginPath GetBkColor RectVisible FrameRgn CreateRoundRectRgn TextOutW GetDIBColorTable StretchBlt GetObjectW SetDIBColorTable DeleteObject CreateDIBSection DeleteDC GetTextExtentPoint32W CreateCompatibleBitmap SelectObject BitBlt PtVisible CreateCompatibleDC

shell32

ord43 ShellExecuteW SHGetSpecialFolderPathW SHGetFileInfoW SHBrowseForFolderW SHGetPathFromIDListW Shell_NotifyIconW ord165 SHGetSpecialFolderLocation CommandLineToArgvW ord701 SHGetDesktopFolder ord716 SHFileOperationW

comctl32

InitCommonControlsEx FlatSB_EnableScrollBar _TrackMouseEvent

shlwapi

PathIsDirectoryW StrFormatByteSizeW SHGetValueW SHSetValueW PathIsNetworkPathW PathFindExtensionW StrFormatKBSizeW ord354 PathFileExistsW

ole32

CoTaskMemAlloc CLSIDFromString CoTaskMemFree CoInitializeEx CoCreateInstance CoUninitialize CoInitialize

oleaut32

SysFreeString SysAllocString VariantInit VariantClear

gdiplus

GdipCreateFromHDC GdipCreateSolidFill GdipCloneBrush GdipDeleteBrush GdiplusShutdown GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromFile GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCloneImage GdipDrawImageI GdipDeleteGraphics GdipGetImageGraphicsContext GdipDisposeImage GdipAlloc GdipFree GdipFillRectangleI

Sharing

General

Malware Config

Signatures

File Explorer

50b9443ba229545f4876815569422829ec0ea6123c02d67152e1858166c8dbf0

version

kernel32

user32

gdi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

generic