b77de0fb855cd859678fd1d16e03af3114cde9b3f0636d0fb7b9674eae14fd35[.]exe

resource
b77de0fb855cd859678fd1d16e03af3114cde9b3f0636d0fb7b9674eae14fd35.exe
unpack001/$PLUGINSDIR/System.dll

b77de0fb855cd859678fd1d16e03af3114cde9b3f0636d0fb7b9674eae14fd35.exe

IMPHASH 7192d3773f389d45ebac3cc67d054a8a
SHA256 b77de0fb855cd859678fd1d16e03af3114cde9b3f0636d0fb7b9674eae14fd35
MD5 632bb0a566efd66ed7fdb905ea8c9803
SHA1 4c3e846fe594e7e10f5ed4f0d0a13de7290b4077
SHA512 f525a1a238b3587ccef06f4baaa00bcdef362840ceb22d475c39a4b0d2b6abe1447959d9fe67bad45a082a0faff1c9ab7c8c71902bcd79b9201fb154cd297325
SSDEEP 12288:XDGxeWd8KhML5xEfN5JPafaM8czPA2f1gLd1U0jgaTeiZdHawb:W3ddhMLTElzPYaMtzP/9gLdO0VTnH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW LoadLibraryW GetProcAddress GetModuleHandleA ExpandEnvironmentStringsW GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle GlobalFree lstrcmpW GlobalAlloc WaitForSingleObject GetDiskFreeSpaceW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW GetDC SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow LoadImageW SetWindowLongW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint SetTimer FindWindowExW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 e94a1f7bcd7e0d532b660d0af468eb3321536c3efdca265e61f9ec174b1aef27
MD5 ee260c45e97b62a5e42f17460d406068
SHA1 df35f6300a03c4d3d3bd69752574426296b78695
SHA512 a98f350d17c9057f33e5847462a87d59cbf2aaeda7f6299b0d49bb455e484ce4660c12d2eb8c4a0d21df523e729222bbd6c820bf25b081bc7478152515b414b3
SSDEEP 192:eF24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol9Sl:h8QIl975eXqlWBrz7YLOl9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Underpower/Udeladelsens.txt

SHA256 d21e0cd7a7c2e95ffcafcd23f04d2a232729f672fbb47b7d0776abb3229fbb0b
MD5 4ef1859a18fb4c5b61db725aafe27f90
SHA1 d31a038ea086536f22bf7d64ff099ad5d8800706
SHA512 1b9c8ae8b6fdc1d1bcaa69cb748c3cbee764573d4ddbf40dd8d307b63365650d9b85e3ea386028f8ddbe32da5237771d6996721107eed18cba71e20d07bb5e7e
MD5 SHA1 SHA512

Underpower/nontelegraphical.hyp

SHA256 b301c24d700076375eaa2394a9e0b754ddaa6a6a7066e8b7ae6ffaea259b03d4
MD5 21bdd59977ea7cd06c63391aa9fd189e
SHA1 9cc5b83758407c6d78bd2a96e6a31533c640c524
SHA512 042b6b7234bac120cfefa13db48e1ef116adb1f9fe60120a815973e485987c01751f27f6482fdc6fdf84b005fa3ce359a9dc13bc49acd255383d2b8cd5c10e6c
SSDEEP 1536:xwxFmKCuH60CJ++DBpgfz/f/WpT7CiSKP4FMWYOSQotMddJ3toh6:YtCQ63az/GpqiSjWWfo279eh6
MD5 SHA1 SHA512 SSDEEP

Underpower/sluggardly.udf

SHA256 268fcae0ec44a3e572dfc0bf3c55306200687aa96ed484e50fae4f1fdc400e04
MD5 deea5d4f6617fe0772227fd43368936f
SHA1 ae52fcb091dce0118e79e4ff46f0a04bb25c350a
SHA512 94573f2c11958e46a75009461ffe4f6cd00ed6c1cf4c5f02c942773262d2db0311fd8778b47b418c27826039b5b7895440528aaea80f0e3d5c5fcfd1fb4ecae9
SSDEEP 3072:Up3Z9pSH0D11/iNlORIFbTYVN7kjQD/48cin2ij5RQq458mu0FnkLfmcJmiIMaDE:SpGH0Elc7mwkk2q5Yfu2nkL+c7wehb
MD5 SHA1 SHA512 SSDEEP

Underpower/stiltish.sti

SHA256 404e86068579d935c692f89ebb98eba6d930a536b4833468c536f1a0273fdde2
MD5 fd876f66cb55e8597ab2adcb1715e24d
SHA1 90de8c19016e7121c2861cf748262a44f57c2de0
SHA512 ca8a1951d4013297a2168db38027e8f9904838576af4b59fac09655f976c45966e58656038d51ebf0593a82f7a9b826276c65465cf8845fe299f7358d15f1c1c
SSDEEP 3072:bNFzfqxOSxM9xAWyQhTStOwqqWnf+3EQ+782Z5:BV6LmDpyQ9wIn8bYL3
MD5 SHA1 SHA512 SSDEEP

Ungraded.gro

SHA256 43638f22f80ec22069396e4c8d6c6c8470fce6ec905354ad4fe2b32018696111
MD5 6c428bff0083f0092ba25eb80a8e628a
SHA1 99f2ece4d7749cb832abe884358e8c2c623749a7
SHA512 b6c3a4eeefc835324773b1019ec6ba37ffaf516a85a08bc554da4ba9576e4f84524c49c7066437a5cc24210ec364c33651ca3a27ef7ef178d4805e232b041bb8
SSDEEP 6144:IyIWVLSjtUILu1whQ4Sl7WI5Gvb9TxLsruV6FyHGluWxV73f:IyIWVSRLu1whQ75+9tCo6FyHG8WHDf
MD5 SHA1 SHA512 SSDEEP

b77de0fb855cd859678fd1d16e03af3114cde9b3f0636d0fb7b9674eae14fd35.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Underpower/Udeladelsens.txt

Underpower/nontelegraphical.hyp

Underpower/sluggardly.udf

Underpower/stiltish.sti

Ungraded.gro

Sharing

General

Malware Config

Signatures

File Explorer

b77de0fb855cd859678fd1d16e03af3114cde9b3f0636d0fb7b9674eae14fd35.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Underpower/Udeladelsens.txt

Underpower/nontelegraphical.hyp

Underpower/sluggardly.udf

Underpower/stiltish.sti

Ungraded.gro