6825b11bd25f663298ed6580d39c1db642d825d0f93f4c9c23689070a665756f

Sharing

Copy URL Twitter E-mail

General

Target
6825b11bd25f663298ed6580d39c1db642d825d0f93f4c9c23689070a665756f
Size 619KB
Sample241112-znk2datrcl
SHA256 6825b11bd25f663298ed6580d39c1db642d825d0f93f4c9c23689070a665756f
MD5 3e0eed9bac03169acb55b5eb1b70188d
SHA1 114ab737209d41a069aff370f2b7efbf5e1f1943
SHA512 0de41f83674503213f658397baff767bdd21d7f478d30f37054c4c800de5d4e1a06ed3689e2fd5bf22635d493d6250eed13d14f0e33954689bd80f1bf4bbc924
SSDEEP 12288:sUjZuoYh77pG2EPogTcvhQjMp4rtBJ/eofcDU/tjad:sBNhvpNXZ2MCJ/eo0ytad
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6825b11bd25f663298ed6580d39c1db642d825d0f93f4c9c23689070a665756f

File Explorer

6825b11bd25f663298ed6580d39c1db642d825d0f93f4c9c23689070a665756f

.exe 619KB

6825b11bd25f663298ed6580d39c1db642d825d0f93f4c9c23689070a665756f

IMPHASH 1db71adeabd2b6fdf16352a481aa05e4
SHA256 6825b11bd25f663298ed6580d39c1db642d825d0f93f4c9c23689070a665756f
MD5 3e0eed9bac03169acb55b5eb1b70188d
SHA1 114ab737209d41a069aff370f2b7efbf5e1f1943
SHA512 0de41f83674503213f658397baff767bdd21d7f478d30f37054c4c800de5d4e1a06ed3689e2fd5bf22635d493d6250eed13d14f0e33954689bd80f1bf4bbc924
SSDEEP 12288:sUjZuoYh77pG2EPogTcvhQjMp4rtBJ/eofcDU/tjad:sBNhvpNXZ2MCJ/eo0ytad
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

66961

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Users\BEAUREGARD\Downloads\mfccalcctrl_demo\Release\CalculatorControl.pdb

kernel32

RtlUnwind RaiseException HeapAlloc GetCommandLineA GetStartupInfoA HeapFree Sleep ExitProcess HeapReAlloc HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapCreate GetStdHandle GetACP IsValidCodePage FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetErrorMode GetModuleHandleW GetOEMCP GetCPInfo CreateFileA FlushFileBuffers SetFilePointer WriteFile ReadFile InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags WritePrivateProfileStringA InterlockedDecrement GetModuleFileNameW FormatMessageA LocalFree lstrlenA GlobalGetAtomNameA GlobalFindAtomA MultiByteToWideChar lstrcmpW GetVersionExA GlobalUnlock GlobalFree GetCurrentProcessId GetLastError SetLastError GlobalAddAtomA CloseHandle GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA CompareStringA InterlockedExchange GlobalLock lstrcmpA GlobalAlloc FreeLibrary GetModuleHandleA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource LoadLibraryA CreateDirectoryA VirtualAlloc GetProcAddress GetEnvironmentStrings GetCurrentProcess

user32

GetSysColorBrush ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu ShowWindow SetWindowTextA RegisterWindowMessageA WinHelpA GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA RegisterClassA GetSysColor AdjustWindowRectEx PtInRect GetDlgCtrlID CallWindowProcA GetMenu SetWindowLongA SetWindowPos SystemParametersInfoA GetWindowPlacement SendMessageA GetWindowRect GetWindow DestroyWindow IsWindow GetDlgItem GetWindowThreadProcessId GetWindowLongA GetLastActivePopup UnregisterClassA IsIconic GetClientRect EnableWindow LoadIconA GetSystemMetrics DispatchMessageA TranslateMessage CopyRect PostMessageA GetParent LoadCursorA DefWindowProcA GetClassInfoA GetKeyState PostQuitMessage CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA IsWindowEnabled MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA GetActiveWindow IsWindowVisible PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus

gdi32

SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject SetViewportExtEx ScaleViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape TextOutA RectVisible PtVisible DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA GetDeviceCaps SetBkColor SetTextColor GetClipBox CreateBitmap SelectObject

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathFindExtensionA

oleaut32

VariantClear VariantChangeType VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

6825b11bd25f663298ed6580d39c1db642d825d0f93f4c9c23689070a665756f

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

generic