356204c704b0d989d73855b9125673895fc06158a54b2fa2dd0a751b0c5101d6

Sharing

Copy URL Twitter E-mail

General

Target
356204c704b0d989d73855b9125673895fc06158a54b2fa2dd0a751b0c5101d6
Size 1.3MB
Sample240902-y8m6ssweql
SHA256 356204c704b0d989d73855b9125673895fc06158a54b2fa2dd0a751b0c5101d6
MD5 bd674dc51eacbb32b20a06a763173d96
SHA1 a6968dc5a752a0330ab7fd563788ab0e96a4500d
SHA512 58f568fbcfea590ca9450efd544d1e26ffcc5e3fd20814130c1a4afd171429a62d7bfdc8b55599115ff00ecc60ad6a686b43e209b298b128924b65eb7b9b125f
SSDEEP 24576:corhrGbk0PpCcnCKZrhzuSWTAEn/Rg7T2NX8nYRZR21omrEH7o:bcbwKrjWTAD7OKYRZQZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
356204c704b0d989d73855b9125673895fc06158a54b2fa2dd0a751b0c5101d6

File Explorer

356204c704b0d989d73855b9125673895fc06158a54b2fa2dd0a751b0c5101d6

.dll 1.3MB

356204c704b0d989d73855b9125673895fc06158a54b2fa2dd0a751b0c5101d6

IMPHASH 483e2bdcca8dbeedb089386331a9a970
SHA256 356204c704b0d989d73855b9125673895fc06158a54b2fa2dd0a751b0c5101d6
MD5 bd674dc51eacbb32b20a06a763173d96
SHA1 a6968dc5a752a0330ab7fd563788ab0e96a4500d
SHA512 58f568fbcfea590ca9450efd544d1e26ffcc5e3fd20814130c1a4afd171429a62d7bfdc8b55599115ff00ecc60ad6a686b43e209b298b128924b65eb7b9b125f
SSDEEP 24576:corhrGbk0PpCcnCKZrhzuSWTAEn/Rg7T2NX8nYRZR21omrEH7o:bcbwKrjWTAD7OKYRZQZ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5471

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

Sleep InterlockedCompareExchange TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA IsDBCSLeadByte LoadLibraryW GetModuleHandleA LoadLibraryA GetProcAddress FreeLibrary InterlockedDecrement InterlockedExchange LocalFree GetLastError FormatMessageA GetVersionExW MultiByteToWideChar MulDiv GetCurrentThreadId SetCurrentDirectoryW GetCurrentDirectoryW GetTickCount GetFullPathNameW GetVersion GetCommState OutputDebugStringA GlobalUnlock GlobalAlloc GlobalLock GetLocaleInfoA LockResource LoadResource FindResourceA DisableThreadLibraryCalls GetFileType GetStdHandle GetConsoleMode InterlockedIncrement

user32

ToAscii GetKeyState MapVirtualKeyA VkKeyScanA SystemParametersInfoA SetFocus SendMessageA MessageBoxA InvalidateRect IsWindow FillRect ScrollWindowEx GetParent CallNextHookEx wsprintfW GetWindowLongW PeekMessageA SetWindowLongW GetClientRect LoadBitmapA TrackPopupMenu GetSystemMenu DestroyWindow ReleaseCapture SetCursorPos WindowFromPoint GetFocus SetCapture GetWindowRect ClientToScreen SetScrollInfo SetParent wsprintfA MoveWindow ShowWindow GetClassLongA GetWindow DestroyIcon IsWindowVisible RegisterClassA SetMenu CreateIconFromResource GetMenuItemCount SetClassLongA GetWindowLongA GetWindowPlacement GetForegroundWindow CreateIconIndirect EnumWindows LoadIconA SetForegroundWindow IsZoomed IsIconic SetActiveWindow DefWindowProcW CallWindowProcW SetWindowTextA InsertMenuA SetCaretPos RegisterClassW DrawEdge GetSysColorBrush DrawFrameControl RegisterClassExA GetMessageA ScreenToClient SendInput MessageBeep GetWindowTextA GetKeyboardLayout GetWindowTextW DestroyCaret CreateCaret SetWindowsHookExW UnhookWindowsHookEx MessageBoxW SendMessageW UpdateWindow GetMessagePos DestroyMenu CallWindowProcA AdjustWindowRectEx RemoveMenu CreateWindowExW GetSystemMetrics SetWindowPos GetSysColor DefWindowProcA CreateWindowExA DrawMenuBar CreatePopupMenu GetCursorPos UnregisterClassA GetAsyncKeyState GetCapture GetMenuCheckMarkDimensions GetDesktopWindow CreateMenu EnableWindow SetWindowTextW SetCursor LoadCursorA LoadCursorFromFileA GetDC ReleaseDC CloseClipboard IsClipboardFormatAvailable GetClipboardData EmptyClipboard OpenClipboard SetClipboardData GetClipboardOwner EndPaint BeginPaint DrawFocusRect SetWindowLongA InsertMenuW

gdi32

DeleteObject CreatePalette CreateSolidBrush ExtTextOutA CreateDIBitmap SetROP2 Chord CreatePen Polyline CreatePatternBrush SetPolyFillMode OffsetClipRgn Rectangle CreateCompatibleBitmap CreateCompatibleDC SelectClipRgn SelectObject SetBkMode CreateBitmap SetBrushOrgEx GetPaletteEntries DeleteDC GetBkMode Pie Arc BitBlt ExtCreatePen TextOutA GetTextCharset TextOutW GetFontData SetTextAlign GetTextMetricsA GetTextExtentPointA GetTextFaceW EnumFontFamiliesA GetCharWidthA GetTextFaceA CreateFontIndirectA CreateFontIndirectW GetCharWidthW RealizePalette SelectPalette SetPaletteEntries GetNearestPaletteIndex GetNearestColor ResizePalette GetStockObject SetTextColor SetBkColor Polygon GetDeviceCaps TranslateCharsetInfo GetRgnBox SetRectRgn CreateRectRgnIndirect CombineRgn RectInRegion CreateRectRgn CreateDIBSection CreateDCA DPtoLP SetMapMode GetMapMode GetObjectA GetDIBits GetPixel UpdateColors EnumFontFamiliesW GetTextExtentPoint32W PatBlt GetTextExtentPoint32A StretchDIBits

msvcr90

_wcsicmp memset _except_handler4_common _onexit _lock __dllonexit _unlock __clean_type_info_names_internal _crt_debugger_hook __CppXcptFilter _adjust_fdiv _amsg_exit _initterm_e _initterm _decode_pointer _encoded_null _malloc_crt _encode_pointer fmod isalnum strstr qsort free abort isxdigit isupper pow memmove atoi printf log10 sscanf strncpy _time64 floor _ctime64 _hypot sqrt atan2 isprint strchr isspace strtod atan strtoul isdigit strtol strncmp memcpy strrchr sin cos wcsncpy _strnicmp _stricmp fabs sprintf

comdlg32

CommDlgExtendedError ChooseColorW GetOpenFileNameW GetSaveFileNameW

shell32

SHGetMalloc SHBrowseForFolderW SHGetDesktopFolder SHGetPathFromIDListW

ole32

CoTaskMemFree

oleaut32

CreateErrorInfo SetErrorInfo VariantChangeType VariantInit VariantClear SysAllocString SysStringLen

comctl32

InitCommonControlsEx

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA

imm32

ImmReleaseContext ImmGetCompositionStringA ImmGetCompositionStringW ImmSetCompositionWindow ImmGetContext

TkAllocWindow TkBezierPoints TkBezierScreenPoints TkBindDeadWindow TkBindEventProc TkBindFree TkBindInit TkCanvasDashParseProc TkCanvasDashPrintProc TkChangeEventWindow TkClipBox TkClipCleanup TkClipInit TkComputeAnchor TkCopyAndGlobalEval TkCreateBindingProcedure TkCreateCursorFromData TkCreateFrame TkCreateMainWindow TkCreateRegion TkCreateThreadExitHandler TkCurrentTime TkDebugBitmap TkDebugBorder TkDebugColor TkDebugConfig TkDebugCursor TkDebugFont TkDeleteAllImages TkDeleteThreadExitHandler TkDestroyRegion TkDoConfigureNotify TkDrawInsetFocusHighlight TkEventDeadWindow TkFillPolygon TkFindStateNum TkFindStateNumObj TkFindStateString TkFocusDeadWindow TkFocusFilterEvent TkFocusFree TkFocusKeyEvent TkFontPkgFree TkFontPkgInit TkFreeBindingTags TkGCCleanup TkGenerateActivateEvents TkGetBitmapData TkGetBitmapPredefTable TkGetButtPoints TkGetCursorByName TkGetDefaultScreenName TkGetDisplay TkGetDisplayList TkGetDisplayOf TkGetFocusWin TkGetInterpNames TkGetMainInfoList TkGetMiterPoints TkGetOptionSpec TkGetPointerCoords TkGetServerInfo TkGetWindowFromObj TkGrabDeadWindow TkGrabState TkInOutEvents TkIncludePoint TkInstallFrameMenu TkIntersectRegion TkKeysymToString TkLineToArea TkLineToPoint TkMakeBezierCurve TkMakeBezierPostscript TkMakeRawCurve TkMakeRawCurvePostscript TkOffsetParseProc TkOffsetPrintProc TkOptionClassChanged TkOptionDeadWindow TkOrientParseProc TkOrientPrintProc TkOvalToArea TkOvalToPoint TkPhotoGetValidRegion TkPixelParseProc TkPixelPrintProc TkPointerDeadWindow TkPointerEvent TkPolygonToArea TkPolygonToPoint TkPositionInTree TkPutImage TkQueueEventForAllChildren TkReadBitmapFile TkRectInRegion TkScrollWindow TkSelDeadWindow TkSelEventProc TkSelInit TkSelPropProc TkSetFocusWin TkSetPixmapColormap TkSetRegion TkSetWindowMenuBar TkSmoothParseProc TkSmoothPrintProc TkStateParseProc TkStatePrintProc TkStringToKeysym TkStylePkgFree TkStylePkgInit TkSubtractRegion TkThickPolyLineToArea TkToplevelWindowForCommand TkUnionRectWithRegion TkWinCancelMouseTimer TkWinClipboardRender TkWinDialogDebug TkWinDisplayChanged TkWinEmbeddedEventProc TkWinFillRect TkWinGetBorderPixels TkWinGetDrawableDC TkWinGetIcon TkWinGetMenuSystemDefault TkWinGetModifierState TkWinGetPlatformId TkWinGetPlatformTheme TkWinGetSystemPalette TkWinGetWrapperWindow TkWinHandleMenuEvent TkWinIndexOfColor TkWinReleaseDrawableDC TkWinResendEvent TkWinSelectPalette TkWinSetForegroundWindow TkWinSetHINSTANCE TkWinSetMenu TkWinSetWindowPos TkWinUpdatingClipboard TkWinWmCleanup TkWinXCleanup TkWinXInit TkWmAddToColormapWindows TkWmDeadWindow TkWmFocusToplevel TkWmMapWindow TkWmNewWindow TkWmProtocolEventProc TkWmRemoveFromColormapWindows TkWmRestackToplevel TkWmSetClass TkWmStackorderToplevel TkWmUnmapWindow Tk_3DBorderColor Tk_3DBorderGC Tk_3DHorizontalBevel Tk_3DVerticalBevel Tk_AddOption Tk_Alloc3DBorderFromObj Tk_AllocBitmapFromObj Tk_AllocColorFromObj Tk_AllocCursorFromObj Tk_AllocFontFromObj Tk_AllocStyleFromObj Tk_AttachHWND Tk_BindEvent Tk_CanvasDrawableCoords Tk_CanvasEventuallyRedraw Tk_CanvasGetCoord Tk_CanvasGetCoordFromObj Tk_CanvasGetTextInfo Tk_CanvasPsBitmap Tk_CanvasPsColor Tk_CanvasPsFont Tk_CanvasPsOutline Tk_CanvasPsPath Tk_CanvasPsStipple Tk_CanvasPsY Tk_CanvasSetOffset Tk_CanvasSetStippleOrigin Tk_CanvasTagsParseProc Tk_CanvasTagsPrintProc Tk_CanvasTkwin Tk_CanvasWindowCoords Tk_ChangeOutlineGC Tk_ChangeWindowAttributes Tk_CharBbox Tk_ClearSelection Tk_ClipboardAppend Tk_ClipboardClear Tk_CollapseMotionEvents Tk_ComputeTextLayout Tk_ConfigOutlineGC Tk_ConfigureInfo Tk_ConfigureValue Tk_ConfigureWidget Tk_ConfigureWindow Tk_CoordsToWindow Tk_CreateAnonymousWindow Tk_CreateBinding Tk_CreateBindingTable Tk_CreateClientMessageHandler Tk_CreateConsoleWindow Tk_CreateErrorHandler Tk_CreateEventHandler Tk_CreateGenericHandler Tk_CreateImageType Tk_CreateItemType Tk_CreateOldImageType Tk_CreateOldPhotoImageFormat Tk_CreateOptionTable Tk_CreateOutline Tk_CreatePhotoImageFormat Tk_CreateSelHandler Tk_CreateSmoothMethod Tk_CreateStyle Tk_CreateWindow Tk_CreateWindowFromPath Tk_DefineBitmap Tk_DefineCursor Tk_DeleteAllBindings Tk_DeleteBinding Tk_DeleteBindingTable Tk_DeleteClientMessageHandler Tk_DeleteErrorHandler Tk_DeleteEventHandler Tk_DeleteGenericHandler Tk_DeleteImage Tk_DeleteOptionTable Tk_DeleteOutline Tk_DeleteSelHandler Tk_DestroyWindow Tk_DisplayName Tk_DistanceToTextLayout Tk_DitherPhoto Tk_Draw3DPolygon Tk_Draw3DRectangle Tk_DrawChars Tk_DrawElement Tk_DrawFocusHighlight Tk_DrawTextLayout Tk_Fill3DPolygon Tk_Fill3DRectangle Tk_FindPhoto Tk_FontId Tk_Free3DBorder Tk_Free3DBorderFromObj Tk_FreeBitmap Tk_FreeBitmapFromObj Tk_FreeColor Tk_FreeColorFromObj Tk_FreeColormap Tk_FreeConfigOptions Tk_FreeCursor Tk_FreeCursorFromObj Tk_FreeFont Tk_FreeFontFromObj Tk_FreeGC Tk_FreeImage Tk_FreeOptions Tk_FreePixmap Tk_FreeSavedOptions Tk_FreeStyle Tk_FreeStyleFromObj Tk_FreeTextLayout Tk_FreeXId Tk_GCForColor Tk_GeometryRequest Tk_Get3DBorder Tk_Get3DBorderFromObj Tk_GetAllBindings Tk_GetAnchor Tk_GetAnchorFromObj Tk_GetAtomName Tk_GetBinding Tk_GetBitmap Tk_GetBitmapFromData Tk_GetBitmapFromObj Tk_GetCapStyle Tk_GetColor Tk_GetColorByValue Tk_GetColorFromObj Tk_GetColormap Tk_GetCursor Tk_GetCursorFromData Tk_GetCursorFromObj Tk_GetDash Tk_GetElementBorderWidth Tk_GetElementBox Tk_GetElementId Tk_GetElementSize Tk_GetEmbeddedMenuHWND Tk_GetFont Tk_GetFontFromObj Tk_GetFontMetrics Tk_GetGC Tk_GetHINSTANCE Tk_GetHWND Tk_GetImage Tk_GetImageMasterData Tk_GetItemTypes Tk_GetJoinStyle Tk_GetJustify Tk_GetJustifyFromObj Tk_GetMMFromObj Tk_GetMenuHWND Tk_GetNumMainWindows Tk_GetOption Tk_GetOptionInfo Tk_GetOptionValue Tk_GetPixels Tk_GetPixelsFromObj Tk_GetPixmap Tk_GetRelief Tk_GetReliefFromObj Tk_GetRootCoords Tk_GetScreenMM Tk_GetScrollInfo Tk_GetScrollInfoObj Tk_GetSelection Tk_GetStyle Tk_GetStyleEngine Tk_GetStyleFromObj Tk_GetStyledElement Tk_GetUid Tk_GetUserInactiveTime Tk_GetVRootGeometry Tk_GetVisual Tk_Grab Tk_HWNDToWindow Tk_HandleEvent Tk_IdToWindow Tk_ImageChanged Tk_Init Tk_InitConsoleChannels Tk_InitOptions Tk_InternAtom Tk_Interp Tk_IntersectTextLayout Tk_MainEx Tk_MainLoop Tk_MainWindow Tk_MaintainGeometry Tk_MakeWindowExist Tk_ManageGeometry Tk_MapWindow Tk_MeasureChars Tk_MoveResizeWindow Tk_MoveToplevelWindow Tk_MoveWindow Tk_NameOf3DBorder Tk_NameOfAnchor Tk_NameOfBitmap Tk_NameOfCapStyle Tk_NameOfColor Tk_NameOfCursor Tk_NameOfFont Tk_NameOfImage Tk_NameOfJoinStyle Tk_NameOfJustify Tk_NameOfRelief Tk_NameOfStyle Tk_NameToWindow Tk_OwnSelection Tk_ParseArgv Tk_PhotoBlank Tk_PhotoExpand Tk_PhotoExpand_Panic Tk_PhotoGetImage Tk_PhotoGetSize Tk_PhotoPutBlock Tk_PhotoPutBlock_NoComposite Tk_PhotoPutBlock_Panic Tk_PhotoPutZoomedBlock Tk_PhotoPutZoomedBlock_NoComposite Tk_PhotoPutZoomedBlock_Panic Tk_PhotoSetSize Tk_PhotoSetSize_Panic Tk_PkgInitStubsCheck Tk_PointToChar Tk_PointerEvent Tk_PostscriptBitmap Tk_PostscriptColor Tk_PostscriptFont Tk_PostscriptFontName Tk_PostscriptImage Tk_PostscriptPath Tk_PostscriptPhoto Tk_PostscriptStipple Tk_PostscriptY Tk_PreserveColormap Tk_QueueWindowEvent Tk_RedrawImage Tk_RegisterStyleEngine Tk_RegisterStyledElement Tk_ResetOutlineGC Tk_ResetUserInactiveTime Tk_ResizeWindow Tk_RestackWindow Tk_RestoreSavedOptions Tk_RestrictEvents Tk_SafeInit Tk_SetAppName Tk_SetBackgroundFromBorder Tk_SetCaretPos Tk_SetClass Tk_SetClassProcs Tk_SetGrid Tk_SetInternalBorder Tk_SetInternalBorderEx Tk_SetMinimumRequestSize Tk_SetOptions Tk_SetTSOrigin Tk_SetWindowBackground Tk_SetWindowBackgroundPixmap Tk_SetWindowBorder Tk_SetWindowBorderPixmap Tk_SetWindowBorderWidth Tk_SetWindowColormap Tk_SetWindowVisual Tk_SizeOfBitmap Tk_SizeOfImage Tk_StrictMotif Tk_TextLayoutToPostscript Tk_TextWidth Tk_TranslateWinEvent Tk_UndefineCursor Tk_UnderlineChars Tk_UnderlineTextLayout Tk_Ungrab Tk_UnmaintainGeometry Tk_UnmapWindow Tk_UnsetGrid Tk_UpdatePointer TkpChangeFocus TkpClaimFocus TkpCloseDisplay TkpDisplayWarning TkpDrawFrame TkpDrawHighlightBorder TkpFreeCursor TkpGetAppName TkpGetKeySym TkpGetMS TkpGetOtherWindow TkpGetString TkpGetSubFonts TkpGetSystemDefault TkpGetWrapperWindow TkpInit TkpInitKeymapInfo TkpInitializeMenuBindings TkpMakeContainer TkpMakeMenuWindow TkpMakeWindow TkpMenuNotifyToplevelCreate TkpMenuThreadInit TkpOpenDisplay TkpPrintWindowId TkpRedirectKeyEvent TkpScanWindowId TkpSetCapture TkpSetCursor TkpSetKeycodeAndState TkpSetMainMenubar TkpTestembedCmd TkpTesttextCmd TkpUseWindow TkpWindowWasRecentlyDeleted TkpWmSetState XAllocColor XBell XChangeGC XChangeProperty XChangeWindowAttributes XClearWindow XConfigureWindow XCopyArea XCopyPlane XCreateBitmapFromData XCreateColormap XCreateGC XCreateGlyphCursor XCreateIC XCreateImage XCreatePixmapCursor XDefineCursor XDeleteProperty XDestroyIC XDestroyWindow XDrawArc XDrawLine XDrawLines XDrawRectangle XFillArc XFillPolygon XFillRectangle XFillRectangles XFilterEvent XForceScreenSaver XFreeColormap XFreeColors XFreeCursor XFreeGC XFreeModifiermap XGContextFromGC XGetAtomName XGetGeometry XGetImage XGetInputFocus XGetModifierMapping XGetVisualInfo XGetWMColormapWindows XGetWindowAttributes XGetWindowProperty XGrabKeyboard XGrabPointer XIconifyWindow XInternAtom XKeycodeToKeysym XKeysymToKeycode XKeysymToString XListHosts XLookupColor XMapWindow XMoveResizeWindow XMoveWindow XNextEvent XParseColor XPutBackEvent XQueryColors XQueryPointer XQueryTree XRaiseWindow XRefreshKeyboardMapping XResizeWindow XRootWindow XSelectInput XSendEvent XSetArcMode XSetBackground XSetClipMask XSetClipOrigin XSetCommand XSetDashes XSetErrorHandler XSetFillRule XSetFillStyle XSetFont XSetForeground XSetFunction XSetIconName XSetInputFocus XSetLineAttributes XSetSelectionOwner XSetStipple XSetTSOrigin XSetWMClientMachine XSetWindowBackground XSetWindowBackgroundPixmap XSetWindowBorder XSetWindowBorderPixmap XSetWindowBorderWidth XSetWindowColormap XStringListToTextProperty XStringToKeysym XTranslateCoordinates XUngrabKeyboard XUngrabPointer XUnmapWindow XWarpPointer XWindowEvent XWithdrawWindow XmbLookupString _TkWinChildProc@16 _XInitImageFuncPtrs tkWinProcs

Sharing

General

Malware Config

Signatures

File Explorer

356204c704b0d989d73855b9125673895fc06158a54b2fa2dd0a751b0c5101d6

kernel32

user32

gdi32

msvcr90

comdlg32

shell32

ole32

oleaut32

comctl32

advapi32

imm32

generic