9d1a6580bc5bb994b21a305b2eb5090e43c4484db66695f16dcdbcc1fa02cc83

Sharing

Copy URL Twitter E-mail

General

Target
9d1a6580bc5bb994b21a305b2eb5090e43c4484db66695f16dcdbcc1fa02cc83
Size 1.6MB
Sample241106-wvbvhaxmfp
SHA256 9d1a6580bc5bb994b21a305b2eb5090e43c4484db66695f16dcdbcc1fa02cc83
MD5 2ed23f81431d49e3e55df1aa29de82f8
SHA1 151e16611a179fccf3b707440ecb8ecbdd55348a
SHA512 7a1f0d58630057a648483938c5dca973e772feb2dace7ab3d3168ce7f8449fd210293fe0ec6ba839ffe6b84675c2b569433016b9e2f0a0b408d2e6454bcc975b
SSDEEP 24576:hmF8SggCmm5E2bcAOFGR7gKd1Vge5rlyjgAPo+B5Jh:IF8SHnmfD7gKTVnlDAP9Bjh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d1a6580bc5bb994b21a305b2eb5090e43c4484db66695f16dcdbcc1fa02cc83

File Explorer

9d1a6580bc5bb994b21a305b2eb5090e43c4484db66695f16dcdbcc1fa02cc83

.exe 1.6MB

9d1a6580bc5bb994b21a305b2eb5090e43c4484db66695f16dcdbcc1fa02cc83

IMPHASH 778e1c84cc440c89a38211c654cd9734
SHA256 9d1a6580bc5bb994b21a305b2eb5090e43c4484db66695f16dcdbcc1fa02cc83
MD5 2ed23f81431d49e3e55df1aa29de82f8
SHA1 151e16611a179fccf3b707440ecb8ecbdd55348a
SHA512 7a1f0d58630057a648483938c5dca973e772feb2dace7ab3d3168ce7f8449fd210293fe0ec6ba839ffe6b84675c2b569433016b9e2f0a0b408d2e6454bcc975b
SSDEEP 24576:hmF8SggCmm5E2bcAOFGR7gKd1Vge5rlyjgAPo+B5Jh:IF8SHnmfD7gKTVnlDAP9Bjh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

431072

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_DEBUG_STRIPPED

PDB paths

winmm

timeGetTime timeEndPeriod timeBeginPeriod

msvcrt

_acmdln __setusermatherr _adjust_fdiv exit _XcptFilter _exit _initterm __getmainargs _controlfp __p__commode __set_app_type __p__fmode _except_handler3

imm32

ImmGetContext ImmGetCompositionStringA ImmGetCompositionStringW ImmSetCompositionFontA ImmSetCompositionWindow ImmGetVirtualKey ImmReleaseContext

mpr

WNetOpenEnumA WNetCloseEnum WNetGetUniversalNameA WNetEnumResourceA

comctl32

ImageList_DragLeave ord17 ImageList_Write ImageList_SetIconSize ImageList_SetDragCursorImage ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Remove ImageList_Read ImageList_LoadImageA ImageList_GetImageCount ImageList_GetIconSize ImageList_GetDragImage ImageList_GetBkColor ImageList_EndDrag ImageList_DrawEx ImageList_DragShowNolock ImageList_DragMove ImageList_DragEnter ImageList_Destroy ImageList_Create ImageList_BeginDrag ImageList_Add

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

kernel32

IsBadReadPtr LoadLibraryExA LoadResource LocalAlloc LocalFree LockResource lstrcpyA lstrcpynA lstrlenA MulDiv MultiByteToWideChar OutputDebugStringA OutputDebugStringW RaiseException ReadFile ResetEvent ResumeThread SetEndOfFile SetErrorMode SetEvent SetFilePointer SetLastError SetThreadLocale SetThreadPriority SizeofResource Sleep TlsGetValue TlsSetValue VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile GlobalFindAtomA GlobalDeleteAtom GlobalAlloc GlobalAddAtomA GetVersionExA GetVersion GetThreadLocale GetTempPathA GetSystemInfo GetStringTypeExA GetStdHandle InterlockedIncrement GetProcAddress GetModuleHandleA GetModuleFileNameA GetLogicalDrives GetLocalTime GetLocaleInfoA GetLastError GetFullPathNameA GetExitCodeThread GetDriveTypeA GetDiskFreeSpaceA GetDateFormatA GetACP FreeResource FreeLibrary FormatMessageA FindResourceA FindNextFileA FindFirstFileA FindClose FileTimeToSystemTime FileTimeToLocalFileTime FileTimeToDosDateTime ExitThread EnumCalendarInfoA DeviceIoControl DeleteCriticalSection CreateThread CreateMutexA CreateFileW CreateFileA CreateEventA CompareStringA CloseHandle GetCPInfo QueryPerformanceCounter GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId IsValidCodePage GetCommandLineA InitializeCriticalSection EnterCriticalSection GetTickCount ExitProcess LeaveCriticalSection LoadLibraryA InterlockedExchange InterlockedDecrement GlobalUnlock GlobalReAlloc GlobalLock GlobalHandle GetStartupInfoA GlobalFree GetWindowsDirectoryA

user32

IsDialogMessageA IsIconic IsRectEmpty IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapA LoadCursorA LoadIconA LoadKeyboardLayoutA LoadStringA MapVirtualKeyA MapWindowPoints MessageBeep MessageBoxA MoveWindow MsgWaitForMultipleObjects OemToCharA OffsetRect OpenClipboard PeekMessageA PostMessageA PostQuitMessage PtInRect RedrawWindow RegisterClassA RegisterClipboardFormatA RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollDC ScrollWindow SendMessageA SetActiveWindow SetCapture SetClassLongA SetClipboardData SetCursor SetFocus SetForegroundWindow SetMenuItemInfoA SetParent SetPropA SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongA SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowsHookExA SetWindowTextA ShowCursor ShowOwnedPopups ShowScrollBar ShowWindow SubtractRect SystemParametersInfoA ToAscii TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnionRect UnregisterClassA UpdateWindow ValidateRect WaitMessage WindowFromPoint WinHelpA IsCharAlphaNumericA InvalidateRect IntersectRect InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId GetWindowTextW GetWindowTextLengthW GetWindowTextA GetWindowRect IsChild GetWindowLongA GetWindowDC GetUpdateRect GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropA GetParent GetMenuStringA GetMenuState GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetLastActivePopup GetKeyState GetKeyNameTextA GetKeyboardType GetKeyboardState GetKeyboardLayoutList GetIconInfo GetForegroundWindow GetFocus GetDoubleClickTime GetDlgCtrlID GetDesktopWindow GetDCEx GetCursorPos GetClipboardData GetClientRect GetClassNameA GetClassInfoA GetCapture GetActiveWindow FrameRect FindWindowExA FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EndPaint EndDeferWindowPos EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextW DrawTextA DrawMenuBar DrawIconEx DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcA DefMDIChildProcA DefFrameProcA CreateWindowExA CreatePopupMenu CreateMenu CreateIcon CopyImage CloseClipboard ClientToScreen CheckMenuItem CharUpperBuffA CharToOemA CharNextA CharLowerBuffA CharLowerA CallWindowProcA CallNextHookEx BringWindowToTop BeginPaint BeginDeferWindowPos AdjustWindowRectEx ActivateKeyboardLayout IsWindowUnicode GetWindowLongW GetWindowPlacement IsCharAlphaNumericW GetDlgItem

gdi32

GetCurrentObject GetClipBox GetBrushOrgEx GetBkColor GetBitmapBits GetTextColor GetTextAlign GetMapMode GetSystemPaletteEntries GetStockObject GetPixel GetPaletteEntries GetObjectA GdiFlush ExtTextOutW ExtCreateRegion ExcludeClipRect DeleteObject DeleteDC CreateSolidBrush CreateRectRgnIndirect CreatePenIndirect CreatePatternBrush CreatePalette GetCurrentPositionEx GetDCOrgEx GetDeviceCaps CreateHalftonePalette GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextMetricsA GetViewportOrgEx GetWindowOrgEx GetWinMetaFileBits IntersectClipRect LineTo LPtoDP MaskBlt MoveToEx OffsetRgn PatBlt PlayEnhMetaFile Polygon Polyline RealizePalette Rectangle RectVisible ResizePalette RestoreDC RoundRect SaveDC SelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetEnhMetaFileBits SetMapMode SetPaletteEntries SetPixel SetROP2 SetStretchBltMode SetTextAlign SetTextColor SetViewportOrgEx SetWindowOrgEx SetWinMetaFileBits StretchBlt StretchDIBits UnrealizeObject GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileBits GetDIBits CreateFontIndirectA CreateDIBSection CreateDIBitmap CreateCompatibleDC CreateCompatibleBitmap GetNearestPaletteIndex CreateBrushIndirect CreateBitmap GetDIBColorTable DeleteEnhMetaFile

comdlg32

GetSaveFileNameA FindTextA GetOpenFileNameA

advapi32

RegCreateKeyExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegOpenKeyExA RegQueryValueExA RegCloseKey RegFlushKey

shell32

SHGetFileInfoA

ole32

CoUninitialize CoInitialize

oleaut32

VariantChangeType SysReAllocStringLen SysFreeString SysAllocStringLen SafeArrayCreate SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex GetErrorInfo VariantClear VariantCopy VariantInit

Name

.text

Size

420KB

Virtual Size

417KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

14.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls5

Size

4KB

Virtual Size

35B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

204KB

Virtual Size

204KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bcw122

Size

999KB

Virtual Size

999KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

9d1a6580bc5bb994b21a305b2eb5090e43c4484db66695f16dcdbcc1fa02cc83

winmm

msvcrt

imm32

mpr

comctl32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic