dd76c4658847db272b8caa3140a94a810a69aec754c29f1085f41fa6bdf53d20[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
dd76c4658847db272b8caa3140a94a810a69aec754c29f1085f41fa6bdf53d20.exe
Size 5.5MB
Sample250825-geavyack6v
SHA256 dd76c4658847db272b8caa3140a94a810a69aec754c29f1085f41fa6bdf53d20
MD5 224b3a0c479f7ecad05cd4b0cd3cf7dd
SHA1 3a5f6927fb50d5174162090f375abe2137cf9b5f
SHA512 f94dab5b866c370396dd96e4aceb40bd9a952bcba10063f4215898f0cb3e723d2154dd39fd36e1fcc74719bc9e04e25cbdad4fd65d4258953c17e87174da1319
SSDEEP 98304:1QrD6ojc3k/rDyTaV6CUThU3ZzatSWsMv2HOUJUNAUrz0y5AF8HD2VBOX:iDdd//NihUJWsMv2HrNa0yaF8Aq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd76c4658847db272b8caa3140a94a810a69aec754c29f1085f41fa6bdf53d20.exe

File Explorer

dd76c4658847db272b8caa3140a94a810a69aec754c29f1085f41fa6bdf53d20.exe

.exe 5.5MB

dd76c4658847db272b8caa3140a94a810a69aec754c29f1085f41fa6bdf53d20.exe

IMPHASH 68c812220ef41a1bea0980e196c18e31
SHA256 dd76c4658847db272b8caa3140a94a810a69aec754c29f1085f41fa6bdf53d20
MD5 224b3a0c479f7ecad05cd4b0cd3cf7dd
SHA1 3a5f6927fb50d5174162090f375abe2137cf9b5f
SHA512 f94dab5b866c370396dd96e4aceb40bd9a952bcba10063f4215898f0cb3e723d2154dd39fd36e1fcc74719bc9e04e25cbdad4fd65d4258953c17e87174da1319
SSDEEP 98304:1QrD6ojc3k/rDyTaV6CUThU3ZzatSWsMv2HOUJUNAUrz0y5AF8HD2VBOX:iDdd//NihUJWsMv2HrNa0yaF8Aq
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4589058

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileMappingW SetFilePointer IsBadReadPtr GetModuleFileNameW ReadFile CreateFileW GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx GetProcessHeap LCMapStringW GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW CloseHandle GetCommandLineW GetCommandLineA GetCPInfo GetLastError GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType DecodePointer HeapFree HeapAlloc GetModuleHandleExW ExitProcess WriteFile GetStdHandle RaiseException EncodePointer LoadLibraryExW GetProcAddress FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection MapViewOfFile WideCharToMultiByte VirtualQuery LeaveCriticalSection EnterCriticalSection SetLastError RtlUnwind TerminateProcess GetCurrentProcess lstrlenW GetSystemTimeAsFileTime MultiByteToWideChar LocalFree GetOEMCP GetModuleHandleW GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter WriteConsoleW GetSystemTimeAsFileTime CreateEventA GetModuleHandleA TerminateProcess GetCurrentProcess CreateToolhelp32Snapshot Thread32First GetCurrentProcessId GetCurrentThreadId OpenThread Thread32Next CloseHandle SuspendThread ResumeThread WriteProcessMemory GetSystemInfo VirtualAlloc VirtualProtect VirtualFree GetProcessAffinityMask SetProcessAffinityMask GetCurrentThread SetThreadAffinityMask Sleep LoadLibraryA FreeLibrary GetTickCount SystemTimeToFileTime FileTimeToSystemTime GlobalFree HeapAlloc HeapFree GetProcAddress ExitProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar GetModuleHandleW LoadResource FindResourceExW FindResourceExA WideCharToMultiByte GetThreadLocale GetUserDefaultLCID GetSystemDefaultLCID EnumResourceNamesA EnumResourceNamesW EnumResourceLanguagesA EnumResourceLanguagesW EnumResourceTypesA EnumResourceTypesW CreateFileW LoadLibraryW GetLastError GetCommandLineA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter HeapReAlloc GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize WriteFile RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers VirtualQuery

user32

GetWindowRect GetWindowThreadProcessId GetWindowTextW EnableWindow InvalidateRect DialogBoxParamW GetWindowTextLengthA CheckDlgButton GetDlgItem MapDialogRect CharUpperA SetCursor SendMessageA SetDlgItemTextA IsDlgButtonChecked MoveWindow IsWindowEnabled SetWindowTextA GetWindowTextA ShowWindow LoadStringW DialogBoxParamA SetWindowTextW EndDialog MessageBoxW ScreenToClient CharPrevA LoadStringA SendMessageW CharUpperW GetWindowTextLengthW EnumDesktopWindows PostMessageA ReleaseDC PostQuitMessage GetDC GetSystemMetrics SetWindowLongA GetForegroundWindow GetWindowLongA DestroyWindow GetCursorPos DefWindowProcA KillTimer SetTimer GetMessageA GetDesktopWindow LoadCursorA LoadIconA CreateWindowExW DispatchMessageA TranslateMessage RegisterClassW

gdi32

GetStockObject GetDeviceCaps

ole32

CoUninitialize CoInitialize

oleaut32

VariantClear VariantCopy SysAllocString SysStringByteLen

comctl32

ord17

comdlg32

GetOpenFileNameW GetOpenFileNameA

shell32

CommandLineToArgvW

Name

.text

Size

178KB

Virtual Size

177KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

345KB

Virtual Size

345KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

36KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.%<d

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.lEb

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tOo

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

166KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

dd76c4658847db272b8caa3140a94a810a69aec754c29f1085f41fa6bdf53d20.exe

kernel32

user32

gdi32

ole32

oleaut32

comctl32

comdlg32

shell32

generic