e7be4052b88e0042232a0f96fe91d626fb498d0bf6fcfede7977b4d2e80fb39a

Sharing

Copy URL Twitter E-mail

General

Target
e7be4052b88e0042232a0f96fe91d626fb498d0bf6fcfede7977b4d2e80fb39a
Size 1.2MB
Sample241011-exycvavdrf
SHA256 e7be4052b88e0042232a0f96fe91d626fb498d0bf6fcfede7977b4d2e80fb39a
MD5 643fa87281b1e9993767c18ef0066fa2
SHA1 9628c4a368454e6c56f41090d35337df7ba35263
SHA512 d1c1a8389e39d9a56b6420c4dd90a79395acf7f4a3e2247db239fad9078853e6b755d50894cee9a7fb60067b431964bf040552d18186e14b29c642eef8d945c7
SSDEEP 24576:PtdAm9DUi/CR3wCkCiRgoG7hBaHkbEXXeG/jFt5pZTx9wE:lqTytRFk6ek1pfz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7be4052b88e0042232a0f96fe91d626fb498d0bf6fcfede7977b4d2e80fb39a

File Explorer

e7be4052b88e0042232a0f96fe91d626fb498d0bf6fcfede7977b4d2e80fb39a

.exe 1.2MB

e7be4052b88e0042232a0f96fe91d626fb498d0bf6fcfede7977b4d2e80fb39a

IMPHASH f62b90e31eca404f228fcf7068b00f31
SHA256 e7be4052b88e0042232a0f96fe91d626fb498d0bf6fcfede7977b4d2e80fb39a
MD5 643fa87281b1e9993767c18ef0066fa2
SHA1 9628c4a368454e6c56f41090d35337df7ba35263
SHA512 d1c1a8389e39d9a56b6420c4dd90a79395acf7f4a3e2247db239fad9078853e6b755d50894cee9a7fb60067b431964bf040552d18186e14b29c642eef8d945c7
SSDEEP 24576:PtdAm9DUi/CR3wCkCiRgoG7hBaHkbEXXeG/jFt5pZTx9wE:lqTytRFk6ek1pfz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1245184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen GetErrorInfo GetActiveObject RegisterTypeLib LoadTypeLib SysFreeString SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayGetElement SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopyInd VariantCopy VariantClear VariantInit SysFreeString

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey SetSecurityDescriptorDacl RegSetValueExW RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegCloseKey OpenThreadToken OpenProcessToken LookupPrivilegeValueW InitializeSecurityDescriptor GetUserNameW GetTokenInformation FreeSid EqualSid AllocateAndInitializeSid AdjustTokenPrivileges

user32

GetKeyboardType LoadStringW MessageBoxA CharNextW CreateWindowExW WindowFromPoint WaitMessage WaitForInputIdle UpdateWindow UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetWindowLongW SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRectEmpty SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursor SetClassLongW SetCapture SetActiveWindow SendNotifyMessageW SendMessageTimeoutW SendMessageA SendMessageW ScrollWindowEx ScrollWindow ScreenToClient ReplyMessage RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PtInRect PostQuitMessage PostMessageW PeekMessageA PeekMessageW OffsetRect OemToCharBuffA MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageA IsDialogMessageW IsChild InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowLongW GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessagePos GetMessageW GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClientRect GetClassLongW GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect ExitWindowsEx EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon ClientToScreen CheckMenuItem CharUpperBuffW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BringWindowToTop BeginPaint AppendMenuW CharToOemBuffA AdjustWindowRectEx ActivateKeyboardLayout

kernel32

GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte SetCurrentDirectoryW MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetCurrentDirectoryW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleW lstrcpyW lstrcmpW WriteProfileStringW WritePrivateProfileStringW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualFree VirtualAlloc TransactNamedPipe TerminateProcess SwitchToThread SizeofResource SignalObjectAndWait SetThreadLocale SetNamedPipeHandleState SetLastError SetFileTime SetFilePointer SetFileAttributesW SetEvent SetErrorMode SetEndOfFile SetCurrentDirectoryW ResumeThread ResetEvent RemoveDirectoryW ReleaseMutex ReadFile QueryPerformanceCounter OpenProcess OpenMutexW MultiByteToWideChar MulDiv MoveFileExW MoveFileW LockResource LocalFree LocalFileTimeToFileTime LoadResource LoadLibraryExW LoadLibraryW LeaveCriticalSection IsDBCSLeadByte IsBadWritePtr InitializeCriticalSection GlobalFindAtomW GlobalDeleteAtom GlobalAddAtomW GetWindowsDirectoryW GetVersionExW GetVersion GetUserDefaultLangID GetTickCount GetThreadLocale GetSystemTimeAsFileTime GetSystemInfo GetSystemDirectoryW GetStdHandle GetShortPathNameW GetProfileStringW GetProcAddress GetPrivateProfileStringW GetOverlappedResult GetModuleHandleW GetModuleFileNameW GetLogicalDrives GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileSize GetFileAttributesW GetExitCodeThread GetExitCodeProcess GetEnvironmentVariableW GetDriveTypeW GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCurrentDirectoryW GetComputerNameW GetCommandLineW GetCPInfo FreeResource InterlockedIncrement InterlockedExchangeAdd InterlockedExchange InterlockedDecrement InterlockedCompareExchange FreeLibrary FormatMessageW FlushFileBuffers FindResourceW FindNextFileW FindFirstFileW FindClose FileTimeToSystemTime FileTimeToLocalFileTime EnumCalendarInfoW EnterCriticalSection DeviceIoControl DeleteFileW DeleteCriticalSection CreateThread CreateProcessW CreateNamedPipeW CreateMutexW CreateFileW CreateEventW CreateDirectoryW CopyFileW CompareStringW CompareFileTime CloseHandle Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject StretchBlt SetWindowOrgEx SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SaveDC RoundRect RestoreDC RemoveFontResourceW Rectangle RectVisible RealizePalette Polyline Pie PatBlt MoveToEx MaskBlt LineTo LineDDA IntersectClipRect GetWindowOrgEx GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits GdiFlush FrameRgn ExtTextOutW ExtFloodFill ExcludeClipRect EnumFontsW Ellipse DeleteObject DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectW CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap Chord BitBlt Arc AddFontResourceW

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

mpr

WNetOpenEnumW WNetGetUniversalNameW WNetGetConnectionW WNetEnumResourceW WNetCloseEnum

comctl32

InitCommonControls InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawEx ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

ole32

OleUninitialize OleInitialize CoTaskMemFree CLSIDFromProgID CLSIDFromString StringFromCLSID CoCreateInstance CoFreeUnusedLibraries CoUninitialize CoInitialize IsEqualGUID CoDisconnectObject

shell32

ShellExecuteExW ShellExecuteW SHGetFileInfoW ExtractIconW SHGetPathFromIDListW SHGetMalloc SHChangeNotify SHBrowseForFolderW

comdlg32

GetSaveFileNameW GetOpenFileNameW

Name

.text

Size

1016KB

Virtual Size

1016KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

24KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

113KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.zero

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e7be4052b88e0042232a0f96fe91d626fb498d0bf6fcfede7977b4d2e80fb39a

oleaut32

advapi32

user32

kernel32

msimg32

gdi32

version

mpr

comctl32

ole32

shell32

comdlg32

generic