0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8

General

Target
0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8
Size 1.1MB
Sample241011-hsnvds1aqa
SHA256 0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8
MD5 a765bc1136f4df890414e5bb6d916b29
SHA1 dae9c28c1faec5a8c05747fb3586e546a6c5c036
SHA512 85a22d83e606bb3fa73bdb2e59eee7d6d0bf71758cec4dc050e5dab06999a59afdfd2402f127c23c0a8a24168f7b4d7ae9806e10d1f01b092e6d67b8d0f9ca64
SSDEEP 24576:2Sh4+aXWFagPVqs0SkOgsicIHG9Zsef9koA25CIelHPb:3hluLmq3cI0ZZfOot5F0z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/643dde3f461907a94f145b3cd8fe37dbad63aec85a4e5ed759fe843b9214a8d2

File Explorer

0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8

.zip 1.1MB
643dde3f461907a94f145b3cd8fe37dbad63aec85a4e5ed759fe843b9214a8d2

.exe 2.1MB

0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8

SHA256 0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8
MD5 a765bc1136f4df890414e5bb6d916b29
SHA1 dae9c28c1faec5a8c05747fb3586e546a6c5c036
SHA512 85a22d83e606bb3fa73bdb2e59eee7d6d0bf71758cec4dc050e5dab06999a59afdfd2402f127c23c0a8a24168f7b4d7ae9806e10d1f01b092e6d67b8d0f9ca64
SSDEEP 24576:2Sh4+aXWFagPVqs0SkOgsicIHG9Zsef9koA25CIelHPb:3hluLmq3cI0ZZfOot5F0z
MD5 SHA1 SHA512 SSDEEP

Password

infected

643dde3f461907a94f145b3cd8fe37dbad63aec85a4e5ed759fe843b9214a8d2

IMPHASH f17865074bdf68334aac0395602ab098
SHA256 643dde3f461907a94f145b3cd8fe37dbad63aec85a4e5ed759fe843b9214a8d2
MD5 0468a32ad1ed1169e98b897d87f51164
SHA1 0d9dc54a5f91e6ed7d324c2a65b152a168d57b08
SHA512 7deb90629608f3a227e96d948bbb4c78ad21e1eb659bfdab903d4f25bdb1e6c8af7edec9604274aa745dd90f8253e48fbccf661f2bc2b6609e5b8807645750ca
SSDEEP 24576:GQZEhAybJ37KtuUZ786qGbAJYhIRKPS0dJDhrI4ufnLVVx90e+7ym:WAC3a78sIRSGVV8V5
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

6

Entry point

2144808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

RtlPcToFileHeader RaiseException EncodePointer LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStdHandle EnterCriticalSection SetLastError GetLastError RtlUnwindEx GetModuleHandleW IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc GetModuleHandleA FlsGetValue FlsSetValue FlsFree LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW CloseHandle WriteConsoleW HeapCreate GetProcAddress LoadLibraryA LeaveCriticalSection IsDebuggerPresent RtlVirtualUnwind QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry

user32

GetKeyboardLayoutList GetWindowInfo EnumDisplaySettingsExW EnumDisplaySettingsW ChangeDisplaySettingsW WinHelpW MapDialogRect LookupIconIdFromDirectoryEx DeregisterShellHookWindow GetDesktopWindow GetClassLongW SetClassWord EqualRect UnionRect IntersectRect ChildWindowFromPoint ShowCaret SetCaretBlinkTime GetCursor SetCursorPos MessageBoxExW GetWindowContextHelpId AdjustWindowRect GetClientRect GetWindowTextLengthW SetWindowTextW EnumPropsW SetPropW EnableScrollBar ShowScrollBar SetScrollRange ScrollDC InvalidateRgn GetWindowRgn SetWindowRgn WindowFromDC GetTabbedTextExtentW GrayStringW GetMenuItemRect SetMenuInfo AppendMenuW GetMenuItemCount GetSubMenu CheckMenuItem DrawMenuBar HiliteMenuItem IsWindowEnabled KillTimer SetTimer GetLastInputInfo SetKeyboardState GetKeyState GetActiveWindow IsCharAlphaW CharNextExA CharPrevW CharNextW CharLowerBuffW CharUpperBuffW CharToOemW CountClipboardFormats ChangeClipboardChain GetDlgCtrlID GetNextDlgGroupItem IsDlgButtonChecked SetDlgItemTextW AnyPopup DeferWindowPos BeginDeferWindowPos GetWindowPlacement MoveWindow SetLayeredWindowAttributes UpdateLayeredWindow DrawAnimatedRects DrawCaption IsHungAppWindow

gdi32

SetMetaRgn GdiGetBatchLimit GdiSetBatchLimit UnrealizeObject SetWindowOrgEx SetViewportExtEx LPtoDP GetObjectW SetMiterLimit SelectClipPath PathToRegion ArcTo AbortPath SetColorAdjustment ModifyWorldTransform SetWorldTransform GetTextMetricsW EnumEnhMetaFile SetPixel SetMetaFileBitsEx SetLayout SetMapperFlags SetDIBits SetBoundsRect SetDCPenColor SaveDC ResizePalette RestoreDC Rectangle PolyPolygon PaintRgn PlayMetaFile Pie PatBlt OffsetClipRgn PlgBlt GetWindowOrgEx GetCharABCWidthsI GetCharacterPlacementW GetTextExtentPointW GetTextColor GetSystemPaletteUse GetSystemPaletteEntries GetRgnBox GetRegionData GetRasterizerCaps GetPaletteEntries GetFontData GetClipRgn GetCharABCWidthsW GetBitmapBits EqualRgn EnumFontFamiliesW EnumFontFamiliesExW DrawEscape CreateHatchBrush CombineRgn AnimatePalette

userenv

GetUserProfileDirectoryW

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8

643dde3f461907a94f145b3cd8fe37dbad63aec85a4e5ed759fe843b9214a8d2

kernel32

user32

gdi32

userenv

generic