24f92eae83a46f174c9b832164fe6a6f9f3c6f302759c7194dbc9558e7e82608N

Sharing

Copy URL Twitter E-mail

General

Target
24f92eae83a46f174c9b832164fe6a6f9f3c6f302759c7194dbc9558e7e82608N
Size 36KB
Sample241109-qgljwsvepp
SHA256 24f92eae83a46f174c9b832164fe6a6f9f3c6f302759c7194dbc9558e7e82608
MD5 db079cebd61c62a13451a6283b1ffe40
SHA1 3d3800ae0c3be6c67524fb3ed3d2d9732dbd9883
SHA512 f69d706adb88896b603024d1772ea0ac7255897c3e29e0ba5cbc91639910fe72e21a7a506b1b35a83e02dd6d14b404ebc629e4f539222eb247c5c655c59e445a
SSDEEP 768:TT1BNCkK5gVGxlaZql9J1oT1cIg7/fO3+a5hCDKR4plx85/t:HnNCl5X/J12y5736+4QWR4pzUV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24f92eae83a46f174c9b832164fe6a6f9f3c6f302759c7194dbc9558e7e82608N

File Explorer

24f92eae83a46f174c9b832164fe6a6f9f3c6f302759c7194dbc9558e7e82608N

.dll 36KB

24f92eae83a46f174c9b832164fe6a6f9f3c6f302759c7194dbc9558e7e82608N

IMPHASH 19773e00a36899dfe46828bcd72ee9d3
SHA256 24f92eae83a46f174c9b832164fe6a6f9f3c6f302759c7194dbc9558e7e82608
MD5 db079cebd61c62a13451a6283b1ffe40
SHA1 3d3800ae0c3be6c67524fb3ed3d2d9732dbd9883
SHA512 f69d706adb88896b603024d1772ea0ac7255897c3e29e0ba5cbc91639910fe72e21a7a506b1b35a83e02dd6d14b404ebc629e4f539222eb247c5c655c59e445a
SSDEEP 768:TT1BNCkK5gVGxlaZql9J1oT1cIg7/fO3+a5hCDKR4plx85/t:HnNCl5X/J12y5736+4QWR4pzUV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26360

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

WaitForSingleObject ReadFile GetFileSize SetFilePointer GetLastError CreateEventA GetModuleFileNameA GetTempPathA GetWindowsDirectoryA CreateThread SetFileAttributesA GetCommandLineA GetSystemDirectoryA MultiByteToWideChar DeleteFileA GlobalLock CreateFileA WriteFile GlobalUnlock GlobalFree CloseHandle LoadLibraryA GetProcAddress GlobalAlloc VirtualProtect GetModuleHandleA Sleep ExitProcess IsBadReadPtr

user32

GetParent GetWindowThreadProcessId ReleaseDC wsprintfA GetWindowTextA GetWindowRect GetDC GetDesktopWindow GetClientRect CallWindowProcA GetClassNameA SetWindowLongA RegisterShellHookWindow RegisterWindowMessageA

gdi32

CreateDCA GetDeviceCaps DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetDIBits RealizePalette SelectPalette GetStockObject GetObjectA DeleteDC

gdiplus

GdipCloneImage GdipAlloc GdipFree GdipGetImageEncodersSize GdipGetImageEncoders GdipLoadImageFromFile GdipDisposeImage GdiplusShutdown GdipSaveImageToFile GdiplusStartup

msvcp60

??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ

ws2_32

WSAStartup send recv socket inet_addr htons connect gethostbyname inet_ntoa closesocket WSACleanup

wininet

InternetOpenUrlA InternetOpenA InternetReadFile InternetCloseHandle

msvcrt

_access strrchr strchr strncpy abs __dllonexit _onexit _initterm _adjust_fdiv _strupr _strlwr _getpid _stricmp _strrev free malloc wcscmp ??2@YAPAXI@Z __CxxFrameHandler strstr memcpy strncmp strcat atoi sprintf strlen strcmp strcpy memset

netapi32

Netbios

Sharing

General

Malware Config

Signatures

File Explorer

24f92eae83a46f174c9b832164fe6a6f9f3c6f302759c7194dbc9558e7e82608N

kernel32

user32

gdi32

gdiplus

msvcp60

ws2_32

wininet

msvcrt

netapi32

generic