22d00f20ca45107852d840c99165ff171e2ab7dfdd4a505518267f86c1edaf8a[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
22d00f20ca45107852d840c99165ff171e2ab7dfdd4a505518267f86c1edaf8a.exe
Size 204KB
Sample241112-k6mwcssmfj
SHA256 22d00f20ca45107852d840c99165ff171e2ab7dfdd4a505518267f86c1edaf8a
MD5 9ffc85e85626c6869ccc01307f555be5
SHA1 a4d8204000184cba7fa3cc214392277f44141b4c
SHA512 cb5ff9809dde357516c1417e7a9a2ba7956a5bcd9eabe7c1ac419e1c6ef30347c39d2c98a79ce725e4cd1c86f7fe80f03fc13895df6ea0dce8bb60e157adc05e
SSDEEP 3072:xdGaTPrrIGvvyy8dHSi+OcGMrOpOVKdOyMbkrWRdg+E2uEPczTinJhV+p9GEVFUE:jGazIc6TVBMrOpzeJEsuirSGEMpgE8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22d00f20ca45107852d840c99165ff171e2ab7dfdd4a505518267f86c1edaf8a.exe

File Explorer

22d00f20ca45107852d840c99165ff171e2ab7dfdd4a505518267f86c1edaf8a.exe

.exe 204KB

22d00f20ca45107852d840c99165ff171e2ab7dfdd4a505518267f86c1edaf8a.exe

IMPHASH e12f72e7fe59535708698b4de0340a02
SHA256 22d00f20ca45107852d840c99165ff171e2ab7dfdd4a505518267f86c1edaf8a
MD5 9ffc85e85626c6869ccc01307f555be5
SHA1 a4d8204000184cba7fa3cc214392277f44141b4c
SHA512 cb5ff9809dde357516c1417e7a9a2ba7956a5bcd9eabe7c1ac419e1c6ef30347c39d2c98a79ce725e4cd1c86f7fe80f03fc13895df6ea0dce8bb60e157adc05e
SSDEEP 3072:xdGaTPrrIGvvyy8dHSi+OcGMrOpOVKdOyMbkrWRdg+E2uEPczTinJhV+p9GEVFUE:jGazIc6TVBMrOpzeJEsuirSGEMpgE8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetOEMCP GetWindowsDirectoryW SetErrorMode CreateFileMappingA GetComputerNameA QueryPerformanceCounter GetModuleFileNameA SetPriorityClass lstrcpyn GetFileType InitializeCriticalSection GetLogicalDrives GetProcessHeap GetNumberFormatA LocalAlloc CreateEventW GetTimeFormatA GetVersionExW GetProcessHeaps CopyFileExW GetHandleInformation GlobalGetAtomNameA FlushFileBuffers CreateNamedPipeW CopyFileA GetCurrentDirectoryA OpenWaitableTimerW GetCommandLineW lstrlen CopyFileExA FreeLibrary SetComputerNameW GetProcAddress EnumCalendarInfoA FindAtomA GetModuleHandleW CreatePipe OpenProcess CreateMailslotW BeginUpdateResourceW IsDebuggerPresent GetVersionExA GetEnvironmentStringsW GetModuleHandleA

user32

GetSysColorBrush RegisterClassExW GetWindowLongA SetMenu ArrangeIconicWindows DialogBoxParamW LoadIconW CreateIcon CharNextA GetMessageW LoadImageA TrackPopupMenuEx mouse_event GetParent OpenClipboard LoadIconW GetIconInfo CheckRadioButton GetIconInfo GetWindowTextW OffsetRect SetWindowPos GetMenuStringW CopyRect EnumWindows SetFocus SetDlgItemInt GetSystemMetrics GetWindowTextLengthA GetCapture GetMenuItemCount EnumDesktopsA DestroyCursor GetClassInfoExA UpdateLayeredWindow MonitorFromWindow FrameRect EnumChildWindows FindWindowA LoadBitmapW RegisterClassExA CloseWindow IsMenu MessageBeep AdjustWindowRect EnumDesktopWindows DeleteMenu MonitorFromRect IsWindow

gdi32

ExtFloodFill ExtEscape EqualRgn CopyEnhMetaFileW SetPixelFormat ResetDCW CreatePolygonRgn CreateDCA SetTextJustification GetKerningPairsA GetDCPenColor SetPaletteEntries AbortPath CreatePolyPolygonRgn GetBkMode

advapi32

RegOpenKeyA RegQueryValueW RegReplaceKeyW RegCreateKeyExW RegRestoreKeyA

oleaut32

CreateDispTypeInfo

opengl32

glColor3iv

winspool.drv

SetPortW AddPortExW ScheduleJob PrinterProperties XcvDataW FindNextPrinterChangeNotification EnumPrintProcessorDatatypesW SetPortA ResetPrinterW

oledlg

OleUIInsertObjectA

wsock32

WSARecvEx WSASetBlockingHook shutdown

Name

.text

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.oqngCF

Size

1KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

4KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.LUV

Size

1024B

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.GOTYM

Size

2KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.AGbvFQ

Size

2KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kkPQAu

Size

512B

Virtual Size

253KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

168KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

22d00f20ca45107852d840c99165ff171e2ab7dfdd4a505518267f86c1edaf8a.exe

kernel32

user32

gdi32

advapi32

oleaut32

opengl32

winspool.drv

oledlg

wsock32

generic