37467684aba8ed6d8f10cd2c7527d6bcb3b7e953919d41a158ff4b26c6ffbf30

Sharing

Copy URL Twitter E-mail

General

Target

37467684aba8ed6d8f10cd2c7527d6bcb3b7e953919d41a158ff4b26c6ffbf30
Size

1004KB
MD5

cb997f68206fe0ddc64af534e8b1dcf3
SHA1

95430613ea2bb184db3bb279b67ca8519dacd680
SHA256

37467684aba8ed6d8f10cd2c7527d6bcb3b7e953919d41a158ff4b26c6ffbf30
SHA512

e6e805ccfb825dc5b7cd1fcf2696046591b3f5e8edaf550d8e94df70f73134ee16cfec626580c94b5dbca9485a2a43907d268bc5abfa47de66390e019713c77d
SSDEEP

24576:PYsLwy7CVCRetB7TJclrK4S8P9KHsaeIbvtdmDDMS6IcsVGMh/:PRdcN7GIb1dm/MS6dsVGi

Score

1^/10

Malware Config

Signatures

Files

37467684aba8ed6d8f10cd2c7527d6bcb3b7e953919d41a158ff4b26c6ffbf30
.exe windows:5 windows x86 arch:x86

7b062179b1d8d449c4a09411c070662c

Code Sign

21:13:67:0f:3b:6c:60:af:42:50:7f:07:d3:97:bc:d6
Certificate

Issuer

CN=L.Mint. LCX

Not Before

31/12/2019, 16:00

Not After

31/12/2029, 16:00

Subject

CN=lmintlcx

27:c3:d6:3c:60:6f:36:ef:08:a7:66:a8:59:f4:7b:ee:cd:43:f1:9f
Signer

Actual PE Digest

27:c3:d6:3c:60:6f:36:ef:08:a7:66:a8:59:f4:7b:ee:cd:43:f1:9f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsIconic
GetCursorPos
SendMessageW
LoadIconW
SetForegroundWindow
PostMessageW
GetDC
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
ReleaseDC
InvalidateRect
ReleaseCapture
RegisterWindowMessageW
IsClipboardFormatAvailable
PeekMessageA
FillRect
GetKeyboardState
GetWindowThreadProcessId
GetWindow
SetWindowRgn
PostMessageA
SetWindowTextW
SetWindowLongA
GetForegroundWindow
SetRect
GetParent
SetActiveWindow
MessageBeep
GetSysColor
PostThreadMessageA
MessageBoxA
WindowFromPoint
DefWindowProcW
AdjustWindowRectEx
GetKeyState
GetUpdateRgn
OpenIcon
GetWindowRect
LoadCursorA
DestroyWindow
SetWindowPos
SetClipboardViewer
GetClipboardOwner
ValidateRgn
CreateWindowExW
GetSystemMetrics
MsgWaitForMultipleObjects
RegisterClassExW
GetWindowPlacement
ShowWindow
IsWindow
GetAsyncKeyState
DispatchMessageW
DestroyIcon
ChangeClipboardChain
CreateIconIndirect
ClientToScreen
PeekMessageW
MapWindowPoints
GetWindowLongA
GetKeyboardLayout
CreateWindowExA
SetFocus
BringWindowToTop
TranslateMessage
GetClipboardData
SendMessageA
SetCapture
SetCursor
LoadIconA
SystemParametersInfoA
GetClientRect
FindWindowW

gdi32

GetObjectA
StretchBlt
StretchDIBits
SetStretchBltMode
Polyline
PolyPolygon
Pie
Arc
EqualRgn
LineTo
SelectClipRgn
Polygon
RectInRegion
MoveToEx
SetDIBits
SetPixel
SetWindowOrgEx
CreatePolygonRgn
GetWindowOrgEx
GetRegionData
LPtoDP
GetDCOrgEx
ExtCreateRegion
OffsetRgn
GdiFlush
GetDIBits
DeleteDC
CreateFontW
RealizePalette
GetStockObject
SelectPalette
CreatePen
ExtCreatePen
CreatePalette
CreateSolidBrush
GetCharacterPlacementW
EnumFontFamiliesW
DeleteObject
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
GetDeviceCaps
GetRgnBox
CombineRgn
SetTextAlign
CreateBitmap
RestoreDC
SetDIBitsToDevice
SetBkMode
CreateRectRgn
GetEnhMetaFileHeader
UpdateColors
PlayEnhMetaFile
CreateDIBSection
SaveDC
DPtoLP
GetTextMetricsA
GetGlyphOutlineW
SetTextColor
GetTextExtentPoint32W
TextOutW

shell32

ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW
ShellExecuteA
SHGetSpecialFolderPathW
DragQueryFileW
CommandLineToArgvW

ole32

RegisterDragDrop
OleInitialize
OleUninitialize
DoDragDrop
RevokeDragDrop
CoTaskMemFree
ReleaseStgMedium

comdlg32

GetOpenFileNameW

ws2_32

select
__WSAFDIsSet

comctl32

_TrackMouseEvent

crypt32

CryptMsgClose
CertFindCertificateInStore
CryptMsgGetParam
CertCloseStore
CryptQueryObject
CertFreeCertificateContext

advapi32

CryptCreateHash
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
CryptAcquireContextW
CryptGetHashParam
CryptHashData
CryptDestroyHash
CryptReleaseContext

wintrust

WinVerifyTrust

shlwapi

PathFileExistsW

kernel32

AreFileApisANSI
SetLastError
GetModuleHandleW
MoveFileExW
DeleteCriticalSection
GetCPInfo
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
SetEvent
ResetEvent
WaitForSingleObjectEx
GetCurrentProcessId
GetStartupInfoW
RtlUnwind
RaiseException
FreeLibrary
LoadLibraryExW
ExitProcess
GetTimeZoneInformation
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetEnvironmentVariableW
GetStdHandle
SetFileAttributesW
RemoveDirectoryW
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
DeleteFileW
SetCurrentDirectoryW
QueryPerformanceFrequency
QueryPerformanceCounter
FormatMessageW
GetComputerNameA
LoadLibraryW
GetACP
GetCurrentThreadId
InitializeCriticalSection
LeaveCriticalSection
GetCommandLineW
EnterCriticalSection
WriteConsoleW
IsValidLocale
GetUserDefaultLCID
GetLogicalDrives
MulDiv
GlobalUnlock
EnumSystemLocalesW
ReadConsoleW
HeapReAlloc
HeapFree
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CreateProcessW
SetStdHandle
SetEndOfFile
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
HeapSize
HeapAlloc
GlobalLock
GetProcAddress
GlobalAlloc
LoadLibraryA
ReadFile
LocalAlloc
CreateFileW
MultiByteToWideChar
CloseHandle
LocalFree
WideCharToMultiByte
CreateDirectoryW
FindFirstFileW
FindNextFileW
WriteFile
FindClose
GetFileAttributesW
GetFileSize
OpenProcess
GetExitCodeProcess
WriteProcessMemory
WaitForSingleObject
VirtualAllocEx
CreateRemoteThread
VirtualFreeEx
Sleep
ReadProcessMemory
GetModuleFileNameW
GetVersion
GetCurrentDirectoryW
GetExitCodeThread
GetFileAttributesA
CreateThread
GetLocalTime
CreateMutexW
ReleaseMutex
GetLastError
VerSetConditionMask
VerifyVersionInfoW
IsDebuggerPresent
GetModuleHandleA
GetLocaleInfoA

Sections

.text
Size: 771KB - Virtual size: 770KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b062179b1d8d449c4a09411c070662c

Code Sign

21:13:67:0f:3b:6c:60:af:42:50:7f:07:d3:97:bc:d6Certificate

27:c3:d6:3c:60:6f:36:ef:08:a7:66:a8:59:f4:7b:ee:cd:43:f1:9fSigner

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

shell32

ole32

comdlg32

ws2_32

comctl32

crypt32

advapi32

wintrust

shlwapi

kernel32

Sections

.text Size: 771KB - Virtual size: 770KB

.rdata Size: 155KB - Virtual size: 155KB

.data Size: 12KB - Virtual size: 29KB

.rsrc Size: 62KB - Virtual size: 62KB

21:13:67:0f:3b:6c:60:af:42:50:7f:07:d3:97:bc:d6
Certificate

27:c3:d6:3c:60:6f:36:ef:08:a7:66:a8:59:f4:7b:ee:cd:43:f1:9f
Signer

.text
Size: 771KB - Virtual size: 770KB

.rdata
Size: 155KB - Virtual size: 155KB

.data
Size: 12KB - Virtual size: 29KB

.rsrc
Size: 62KB - Virtual size: 62KB