e125cbe585e654316d5ab0c2a73bd830N

Sharing

Copy URL Twitter E-mail

General

Target
e125cbe585e654316d5ab0c2a73bd830N
Size 524KB
Sample240915-dznqratcqa
SHA256 7d9ccf7be546cdad2baab25c98336224ae050f477594647c9a8adf6b8700011a
MD5 e125cbe585e654316d5ab0c2a73bd830
SHA1 62bf4c0a8fbd8a30663e468cf865b1c6e5f5a7bc
SHA512 57d6ae7a7b4c13d23f0ac17a1a684a81155a4e233a107fc275e5d901db70dd4d246f7f746852d4bf4bfd17c522f0ef7e666e983f766c04248b885e044dcc704c
SSDEEP 12288:X9pL8dQnSsG5u8j/cYRHFuVP32+8AEDuME4lbMIOy:X9pL8dQnSsG5umRHFKD8AED+ibMXy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e125cbe585e654316d5ab0c2a73bd830N

File Explorer

e125cbe585e654316d5ab0c2a73bd830N

.exe 524KB

e125cbe585e654316d5ab0c2a73bd830N

IMPHASH 137e6bb55b7583e53f515a8b55acc5fa
SHA256 7d9ccf7be546cdad2baab25c98336224ae050f477594647c9a8adf6b8700011a
MD5 e125cbe585e654316d5ab0c2a73bd830
SHA1 62bf4c0a8fbd8a30663e468cf865b1c6e5f5a7bc
SHA512 57d6ae7a7b4c13d23f0ac17a1a684a81155a4e233a107fc275e5d901db70dd4d246f7f746852d4bf4bfd17c522f0ef7e666e983f766c04248b885e044dcc704c
SSDEEP 12288:X9pL8dQnSsG5u8j/cYRHFuVP32+8AEDuME4lbMIOy:X9pL8dQnSsG5umRHFKD8AED+ibMXy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

168088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

opengl32

glCopyPixels glFlush

kernel32

GetStartupInfoA GetCommandLineA ExitProcess TerminateProcess HeapFree HeapAlloc RaiseException HeapReAlloc HeapSize GetACP GetTimeZoneInformation UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr RtlUnwind CompareStringA CompareStringW SetEnvironmentVariableA GetProfileStringA VirtualProtect GetCurrentThreadId GetCurrentThread lstrcmpiA lstrcmpA GlobalDeleteAtom GlobalAlloc GlobalLock GetModuleFileNameA CloseHandle LoadResource FindResourceA LockResource GlobalFree GlobalUnlock GetProcAddress GetModuleHandleA lstrcpyA GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA lstrcatA GetVersion FreeLibrary LoadLibraryA InterlockedIncrement InterlockedDecrement lstrlenA WideCharToMultiByte MultiByteToWideChar SetLastError MulDiv GetFileTime GetFileSize GetFileAttributesA GetTickCount FileTimeToLocalFileTime FileTimeToSystemTime GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle SetErrorMode GetOEMCP GetCPInfo GetThreadLocale SizeofResource GetProcessVersion GetLastError WritePrivateProfileStringA GlobalFlags TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc lstrcpynA FormatMessageA LocalFree SetStdHandle

user32

CopyAcceleratorTableA SetRect GetNextDlgGroupItem MessageBeep CharUpperA RegisterClipboardFormatA PostThreadMessageA GetClassNameA GetDesktopWindow DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen DestroyMenu LoadStringA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA SendDlgItemMessageA MapWindowPoints SetFocus AdjustWindowRectEx ScreenToClient CopyRect CharNextA GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetWindowTextLengthA GetWindowTextA GetDlgCtrlID DefWindowProcA CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow SetWindowLongA RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement MapDialogRect GrayStringA AppendMenuA GetSystemMenu UnregisterClassA HideCaret ShowCaret ExcludeUpdateRgn SetWindowPos GetWindow SetWindowContextHelpId EndDialog SetActiveWindow CreateDialogIndirectParamA DestroyWindow GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps GetSysColorBrush CheckMenuItem EnableMenuItem DrawFocusRect DefDlgProcA IsWindowUnicode SendMessageA EnableWindow LoadIconA GetSystemMetrics DrawIcon IsIconic GetClientRect GetWindowRect LoadCursorA IsWindow GetSysColor ReleaseCapture PtInRect InflateRect PostMessageA UpdateWindow InvalidateRect SetCapture PostQuitMessage SetCursor MessageBoxA GetWindowLongA IsWindowEnabled GetLastActivePopup GetParent SetWindowsHookExA GetCursorPos PeekMessageA IsWindowVisible ValidateRect CallNextHookEx GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState

gdi32

SetBkMode SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx IntersectClipRect DeleteObject GetDeviceCaps GetViewportExtEx GetWindowExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape GetMapMode PatBlt DPtoLP GetTextColor GetBkColor LPtoDP GetStockObject SelectObject RestoreDC SaveDC DeleteDC GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap CreateFontIndirectA CreateDIBitmap GetTextExtentPointA BitBlt CreateCompatibleDC CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegCloseKey RegSetValueExA RegOpenKeyExA RegCreateKeyExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries CoRegisterMessageFilter OleInitialize CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard OleUninitialize

olepro32

ord253

oleaut32

SysFreeString SysAllocStringLen VariantClear VariantTimeToSystemTime VariantCopy VariantChangeType SysAllocString SysAllocStringByteLen SysStringLen

Name

.text

Size

260KB

Virtual Size

258KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

68KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jodata

Size

164KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

e125cbe585e654316d5ab0c2a73bd830N

opengl32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

generic