0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8

Resubmissions

11-10-2024 07:00

241011-hsnvds1aqa 10

07-08-2024 08:37

240807-kja82syfka 10

07-08-2024 08:30

240807-kd6g1ayemg 10

Sharing

Copy URL

Twitter E-mail

General

Target

0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8
Size

1.1MB
MD5

a765bc1136f4df890414e5bb6d916b29
SHA1

dae9c28c1faec5a8c05747fb3586e546a6c5c036
SHA256

0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8
SHA512

85a22d83e606bb3fa73bdb2e59eee7d6d0bf71758cec4dc050e5dab06999a59afdfd2402f127c23c0a8a24168f7b4d7ae9806e10d1f01b092e6d67b8d0f9ca64
SSDEEP

24576:2Sh4+aXWFagPVqs0SkOgsicIHG9Zsef9koA25CIelHPb:3hluLmq3cI0ZZfOot5F0z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/643dde3f461907a94f145b3cd8fe37dbad63aec85a4e5ed759fe843b9214a8d2

Files

0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8
.zip

Password: infected
643dde3f461907a94f145b3cd8fe37dbad63aec85a4e5ed759fe843b9214a8d2
.exe windows:6 windows x64 arch:x64

f17865074bdf68334aac0395602ab098

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

RtlPcToFileHeader
RaiseException
EncodePointer
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStdHandle
EnterCriticalSection
SetLastError
GetLastError
RtlUnwindEx
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
GetModuleHandleA
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
HeapCreate
GetProcAddress
LoadLibraryA
LeaveCriticalSection
IsDebuggerPresent
RtlVirtualUnwind
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry

user32

GetKeyboardLayoutList
GetWindowInfo
EnumDisplaySettingsExW
EnumDisplaySettingsW
ChangeDisplaySettingsW
WinHelpW
MapDialogRect
LookupIconIdFromDirectoryEx
DeregisterShellHookWindow
GetDesktopWindow
GetClassLongW
SetClassWord
EqualRect
UnionRect
IntersectRect
ChildWindowFromPoint
ShowCaret
SetCaretBlinkTime
GetCursor
SetCursorPos
MessageBoxExW
GetWindowContextHelpId
AdjustWindowRect
GetClientRect
GetWindowTextLengthW
SetWindowTextW
EnumPropsW
SetPropW
EnableScrollBar
ShowScrollBar
SetScrollRange
ScrollDC
InvalidateRgn
GetWindowRgn
SetWindowRgn
WindowFromDC
GetTabbedTextExtentW
GrayStringW
GetMenuItemRect
SetMenuInfo
AppendMenuW
GetMenuItemCount
GetSubMenu
CheckMenuItem
DrawMenuBar
HiliteMenuItem
IsWindowEnabled
KillTimer
SetTimer
GetLastInputInfo
SetKeyboardState
GetKeyState
GetActiveWindow
IsCharAlphaW
CharNextExA
CharPrevW
CharNextW
CharLowerBuffW
CharUpperBuffW
CharToOemW
CountClipboardFormats
ChangeClipboardChain
GetDlgCtrlID
GetNextDlgGroupItem
IsDlgButtonChecked
SetDlgItemTextW
AnyPopup
DeferWindowPos
BeginDeferWindowPos
GetWindowPlacement
MoveWindow
SetLayeredWindowAttributes
UpdateLayeredWindow
DrawAnimatedRects
DrawCaption
IsHungAppWindow

gdi32

SetMetaRgn
GdiGetBatchLimit
GdiSetBatchLimit
UnrealizeObject
SetWindowOrgEx
SetViewportExtEx
LPtoDP
GetObjectW
SetMiterLimit
SelectClipPath
PathToRegion
ArcTo
AbortPath
SetColorAdjustment
ModifyWorldTransform
SetWorldTransform
GetTextMetricsW
EnumEnhMetaFile
SetPixel
SetMetaFileBitsEx
SetLayout
SetMapperFlags
SetDIBits
SetBoundsRect
SetDCPenColor
SaveDC
ResizePalette
RestoreDC
Rectangle
PolyPolygon
PaintRgn
PlayMetaFile
Pie
PatBlt
OffsetClipRgn
PlgBlt
GetWindowOrgEx
GetCharABCWidthsI
GetCharacterPlacementW
GetTextExtentPointW
GetTextColor
GetSystemPaletteUse
GetSystemPaletteEntries
GetRgnBox
GetRegionData
GetRasterizerCaps
GetPaletteEntries
GetFontData
GetClipRgn
GetCharABCWidthsW
GetBitmapBits
EqualRgn
EnumFontFamiliesW
EnumFontFamiliesExW
DrawEscape
CreateHatchBrush
CombineRgn
AnimatePalette

userenv

GetUserProfileDirectoryW

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

f17865074bdf68334aac0395602ab098

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

userenv

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 5KB - Virtual size: 22KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 5KB - Virtual size: 22KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB