6debf664bc44f4cc5cb7fa1dce34422fbb7f38df464651a550c723e2beef3515

Sharing

Copy URL Twitter E-mail

General

Target

6debf664bc44f4cc5cb7fa1dce34422fbb7f38df464651a550c723e2beef3515
Size

272KB
MD5

7fb9faf048cd82d8ab4f141fddeca015
SHA1

319c7ad1b7e72bfbbddbc9dde47fc35d16d895c5
SHA256

6debf664bc44f4cc5cb7fa1dce34422fbb7f38df464651a550c723e2beef3515
SHA512

8ec67039c4523bf758f2e5850432a761114c0058245cf0ef19b617063d8783bb55225199b24585e05f1df259f5a052ae2b38de56bed82f193fb62efdf3b1828c
SSDEEP

3072:rnXpxJrepQr2bmT7uSfEHOTBfxq+Aw/srMN62mdaa:zXpxJrJ2bmToOTBpqZgpa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6debf664bc44f4cc5cb7fa1dce34422fbb7f38df464651a550c723e2beef3515

Files

6debf664bc44f4cc5cb7fa1dce34422fbb7f38df464651a550c723e2beef3515
.exe windows:6 windows x86 arch:x86

da4f58e9b32a7be404bb6f03f983cd2e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\2022--------RemotePC-----PrintScreenCopyPaste\rpcutility\Release\RPCClipboard.pdb

Imports

kernel32

WaitForSingleObject
SetLastError
GetModuleFileNameA
GetPrivateProfileStringA
CreateMutexW
LoadLibraryW
GetCommandLineW
ReleaseMutex
Sleep
ResetEvent
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GlobalLock
GlobalUnlock
FindFirstFileA
FindNextFileA
FindClose
WideCharToMultiByte
CreateEventW
GetModuleFileNameW
CreateFileW
SetFilePointer
WriteFile
SetEndOfFile
WriteConsoleW
SetStdHandle
ReadConsoleW
OutputDebugStringW
EnumSystemLocalesEx
IsValidLocaleName
SetEvent
GetUserDefaultLocaleName
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
GetSystemTimeAsFileTime
QueryPerformanceCounter
FlushFileBuffers
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
InitOnceExecuteOnce
GetFileType
GetCurrentThreadId
HeapSize
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
GetModuleHandleW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetUnhandledExceptionFilter
CreateThread
CloseHandle
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
GetLastError
MultiByteToWideChar
InterlockedExchange
GlobalAlloc
LCMapStringEx
LocalFree
UnhandledExceptionFilter
GetStdHandle
GetProcessHeap
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
RaiseException
GetLocalTime
GetCPInfo
GetModuleHandleExW
ExitProcess
VirtualQuery
VirtualProtect
VirtualAlloc
GetSystemInfo
SetThreadStackGuarantee
HeapAlloc
HeapReAlloc
HeapFree
GetLocaleInfoEx
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

CloseClipboard
GetDC
ReleaseDC
SetClipboardData
RegisterClipboardFormatA
RemoveClipboardFormatListener
EnumClipboardFormats
GetClipboardFormatNameA
GetWindowLongW
IsClipboardFormatAvailable
GetClipboardData
DestroyWindow
PostQuitMessage
DefWindowProcW
CallNextHookEx
SetClipboardViewer
SendMessageW
EmptyClipboard
OpenClipboard
PostMessageW
SetWindowLongW
MessageBoxW
ChangeClipboardChain
LoadStringW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadIconW
LoadCursorW
RegisterClassExW
UpdateWindow
DialogBoxParamW
BeginPaint
EndPaint
EndDialog
RegisterClassW
AddClipboardFormatListener
CreateWindowExW
SetWindowsHookExW

gdi32

CreateDIBitmap
SetDIBits
GetObjectW
SetDIBColorTable
SelectObject
DeleteObject
CreateDIBSection
CreateCompatibleDC
DeleteDC

shell32

DragQueryFileA
CommandLineToArgvW

ole32

CreateStreamOnHGlobal

ws2_32

recv
WSAStartup
shutdown
closesocket
WSACleanup
htonl
htons
accept
WSAGetLastError
inet_addr
listen
socket
setsockopt
bind
send
connect

shlwapi

ord12
ord214
ord213
ord184

gdiplus

GdipFree
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToStream
GdipCloneImage
GdipDrawImageI
GdipDeleteGraphics

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da4f58e9b32a7be404bb6f03f983cd2e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

shell32

ole32

ws2_32

shlwapi

gdiplus

Sections

.text Size: 169KB - Virtual size: 168KB

.rdata Size: 53KB - Virtual size: 52KB

.data Size: 7KB - Virtual size: 15KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 34KB - Virtual size: 34KB

.text
Size: 169KB - Virtual size: 168KB

.rdata
Size: 53KB - Virtual size: 52KB

.data
Size: 7KB - Virtual size: 15KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 34KB - Virtual size: 34KB