d83acf32a536bb28194ac79a896d6d956f19bad746f060ac0b6a8e7d6ac7eb18N

Sharing

Copy URL Twitter E-mail

General

Target
d83acf32a536bb28194ac79a896d6d956f19bad746f060ac0b6a8e7d6ac7eb18N
Size 212KB
Sample241022-zgtd6sshpg
SHA256 d83acf32a536bb28194ac79a896d6d956f19bad746f060ac0b6a8e7d6ac7eb18
MD5 402f653bc57e620ab5c37f750131be70
SHA1 28f422f6c48536b8b4a8e23f9efb19c8e5e91cc6
SHA512 1afa9e571e8ad684f38896608650c0559df3c129d0933da9c63aa91e268a29b407ed80c5f442d0861e6882b4b350caf0935473d1f7871442cb9b6928f971232a
SSDEEP 3072:PGwPsm1VrwxOsf0juzv8j4P1Hr6krr4IEhx9QZe2gO9mG9UHA30Vt3E/vDjb:PG/iVkO20SFgBhxtW9mG9+Umt3Ezjb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d83acf32a536bb28194ac79a896d6d956f19bad746f060ac0b6a8e7d6ac7eb18N

File Explorer

d83acf32a536bb28194ac79a896d6d956f19bad746f060ac0b6a8e7d6ac7eb18N

.exe 212KB

d83acf32a536bb28194ac79a896d6d956f19bad746f060ac0b6a8e7d6ac7eb18N

IMPHASH 728b5168c443fc8cea3c0c483ddbb8ff
SHA256 d83acf32a536bb28194ac79a896d6d956f19bad746f060ac0b6a8e7d6ac7eb18
MD5 402f653bc57e620ab5c37f750131be70
SHA1 28f422f6c48536b8b4a8e23f9efb19c8e5e91cc6
SHA512 1afa9e571e8ad684f38896608650c0559df3c129d0933da9c63aa91e268a29b407ed80c5f442d0861e6882b4b350caf0935473d1f7871442cb9b6928f971232a
SSDEEP 3072:PGwPsm1VrwxOsf0juzv8j4P1Hr6krr4IEhx9QZe2gO9mG9UHA30Vt3E/vDjb:PG/iVkO20SFgBhxtW9mG9+Umt3Ezjb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5852

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDrives GetProcAddress GetCurrentThread WaitForMultipleObjects GlobalAlloc OpenMutexA InitializeCriticalSection AddAtomA CompareStringA CopyFileA IsValidLocale lstrcpynA OpenEventW GetModuleHandleA GetStartupInfoA GetSystemDefaultLCID GetACP GetCalendarInfoW OpenWaitableTimerA Sleep GetSystemDefaultLangID CreateSemaphoreW ExpandEnvironmentStringsW lstrlenA GetDateFormatA CreateMailslotW SystemTimeToFileTime BeginUpdateResourceA GetExpandedNameW SearchPathA DosDateTimeToFileTime GetWindowsDirectoryW GetEnvironmentStringsW GetStringTypeA QueryPerformanceCounter

user32

GetDlgItemTextW DialogBoxParamA LoadMenuIndirectW GetCapture GetClassInfoW IsIconic LoadBitmapA GetDC PeekMessageW GetMenuState SetWindowTextW GetWindowRect UpdateWindow GetForegroundWindow DialogBoxIndirectParamA ShowWindow EnumClipboardFormats AdjustWindowRect SetCursorPos ReleaseDC InsertMenuA CreateWindowExA ActivateKeyboardLayout LoadIconW DrawTextA DialogBoxIndirectParamW

gdi32

FillPath UnrealizeObject SetDIBits CreateScalableFontResourceW GetTextFaceA CreateFontW SelectClipRgn AnimatePalette

advapi32

RegOpenKeyExA RegOpenKeyW RegDeleteKeyA RegOpenKeyW

shlwapi

SHRegGetBoolUSValueW PathIsUNCServerShareA PathRemoveExtensionA PathGetDriveNumberW IntlStrEqWorkerA PathMakePrettyA StrCmpNIW UrlCombineW

comctl32

DrawStatusText CreateMappedBitmap ImageList_Write

inetcomm

MimeOleGenerateCID MimeOleSetBodyPropW EssKeyExchPreferenceDecodeEx CreateSMTPTransport MimeOleSMimeCapInit MimeOleSMimeCapGetHashAlg MimeEditIsSafeToRun MimeOleParseMhtmlUrl EssSecurityLabelEncodeEx MimeOleGetRelatedSection MimeOleGetFileInfoW EssReceiptRequestEncodeEx MimeOleCreateSecurity MimeOleFileTimeToInetDate MimeOleSMimeCapGetEncAlg MimeOleGetInternat MimeOleSMimeCapAddCert EssSignCertificateDecodeEx

oledlg

OleUIObjectPropertiesW OleUIConvertW OleUIPasteSpecialW OleUIConvertA OleUIPromptUserA OleUIAddVerbMenuW OleUIEditLinksA OleUIPasteSpecialA

Name

.qYS

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.jvNc

Size

2KB

Virtual Size

405KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bCq

Size

3KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gMFODl

Size

3KB

Virtual Size

329KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

109KB

Virtual Size

216KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ifpDc

Size

3KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.Ox

Size

2KB

Virtual Size

474KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

740B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

d83acf32a536bb28194ac79a896d6d956f19bad746f060ac0b6a8e7d6ac7eb18N

kernel32

user32

gdi32

advapi32

shlwapi

comctl32

inetcomm

oledlg

generic