d3fc07b8625ff669fa8d3f0ca18937b4516a0ac3be19258af42bfda55709ef73

Sharing

Copy URL Twitter E-mail

General

Target
d3fc07b8625ff669fa8d3f0ca18937b4516a0ac3be19258af42bfda55709ef73
Size 321KB
Sample260423-1stdzsat9x
SHA256 d3fc07b8625ff669fa8d3f0ca18937b4516a0ac3be19258af42bfda55709ef73
MD5 e9e2f62bf80268126f9bc3e25cd14c9f
SHA1 b7ad8ed23e0526dad3beca09f5c0e6dbb91353fc
SHA512 3841e10d4c33df3d3217bdcc586de6f7a039aa5fc66387c64eb19ac121c905d58714a26a3afcd63deabf45bf59df588635b79242199187ffc5dde79f99af06a9
SSDEEP 6144:HEsZ5iexbevn8E2batfDX4QVSRi5HgCL5LqMIKGQyy0tR/:HEii38EL7VSg5HgCFLqyGQyL
TLSH
T189644B1137E0C436C2A235324966E77566BEBD319E35834F27D53B7E9E30291AA2834F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3fc07b8625ff669fa8d3f0ca18937b4516a0ac3be19258af42bfda55709ef73

File Explorer

d3fc07b8625ff669fa8d3f0ca18937b4516a0ac3be19258af42bfda55709ef73

.exe 321KB

d3fc07b8625ff669fa8d3f0ca18937b4516a0ac3be19258af42bfda55709ef73

IMPHASH 1f1244810911dd4d97297a8d5f6dcabd
SHA256 d3fc07b8625ff669fa8d3f0ca18937b4516a0ac3be19258af42bfda55709ef73
MD5 e9e2f62bf80268126f9bc3e25cd14c9f
SHA1 b7ad8ed23e0526dad3beca09f5c0e6dbb91353fc
SHA512 3841e10d4c33df3d3217bdcc586de6f7a039aa5fc66387c64eb19ac121c905d58714a26a3afcd63deabf45bf59df588635b79242199187ffc5dde79f99af06a9
SSDEEP 6144:HEsZ5iexbevn8E2batfDX4QVSRi5HgCL5LqMIKGQyy0tR/:HEii38EL7VSg5HgCFLqyGQyL
TLSH
T189644B1137E0C436C2A235324966E77566BEBD319E35834F27D53B7E9E30291AA2834F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

127461

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\E_work\i300Pro\UpdataTools\GQTOOLS\Assit(辅助删除目录功能_集成到卸载程序中)\Release\Assit.pdb

kernel32

GetFileTime GetStartupInfoW HeapAlloc HeapFree RtlUnwind Sleep ExitProcess HeapReAlloc RaiseException HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery SetUnhandledExceptionFilter GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter GetFileSizeEx GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW InitializeCriticalSectionAndSpinCount GetTimeZoneInformation LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode GetCurrentDirectoryA GetDriveTypeA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA GetFileAttributesW GetTickCount SetErrorMode CreateFileW GetFullPathNameW GetVolumeInformationW GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile lstrlenA GetThreadLocale InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags FindFirstFileW FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileW FindClose GlobalFindAtomW GetVersionExW CompareStringW LoadLibraryA GetVersionExA GetModuleHandleA InterlockedDecrement FormatMessageW LocalFree MulDiv GetCurrentProcessId GetLastError SetLastError GlobalAddAtomW CloseHandle GlobalUnlock lstrlenW WritePrivateProfileStringW FreeResource GlobalFree GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesW GetModuleFileNameW lstrcmpA GetLocaleInfoW LoadLibraryW WideCharToMultiByte CompareStringA InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GetModuleHandleW GetProcAddress MultiByteToWideChar DeleteFileW RemoveDirectoryW SetFileAttributesW Process32NextW Process32FirstW CreateToolhelp32Snapshot GetCommandLineW FindResourceW LoadResource LockResource IsDebuggerPresent SizeofResource

user32

RegisterClipboardFormatW PostThreadMessageW MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableW CharNextW ReleaseCapture LoadCursorW SetCapture RegisterWindowMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetForegroundWindow GetTopWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow CreateWindowExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect CopyRect PtInRect DefWindowProcW CallWindowProcW GetMenu OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetSysColor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW GetWindowTextW SetFocus ShowWindow MoveWindow SetWindowLongW GetDlgCtrlID SetWindowTextW IsDialogMessageW SendDlgItemMessageW UnhookWindowsHookEx LoadIconW SetTimer IsIconic SendMessageW GetMenuItemID GetMenuItemCount GetSubMenu GetWindowThreadProcessId GetLastActivePopup MessageBoxW SetCursor SetWindowsHookExW DestroyMenu CallNextHookEx GetMessageW UnregisterClassW CharUpperW GetSysColorBrush GetSystemMetrics GetClientRect DrawIcon KillTimer EnableWindow PostMessageW PostQuitMessage SetWindowPos MapDialogRect GetParent SetWindowContextHelpId GetWindow EndDialog GetNextDlgTabItem IsWindowEnabled GetDlgItem GetWindowLongW IsWindow DestroyWindow CreateDialogIndirectParamW SetActiveWindow GetActiveWindow GetDesktopWindow CheckMenuItem EnableMenuItem GetMenuState ModifyMenuW GetFocus LoadBitmapW GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageW GetKeyState IsWindowVisible DispatchMessageW TranslateMessage GetClassInfoExW

gdi32

GetStockObject GetBkColor DeleteDC CreateRectRgnIndirect GetRgnBox GetMapMode ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject GetTextColor CreateBitmap ExtTextOutW TextOutW RectVisible PtVisible GetWindowExtEx GetViewportExtEx GetObjectW DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC GetDeviceCaps Escape

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW

advapi32

RegDeleteKeyW RegQueryValueW RegOpenKeyW RegEnumKeyW RegCloseKey RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW PathStripToRootW PathIsUNCW PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes OleIsCurrentClipboard CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleFlushClipboard CoRegisterMessageFilter CoGetClassObject

oleaut32

SysFreeString SysAllocStringLen SysStringLen VariantClear VariantChangeType VariantInit OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy

Sharing

General

Malware Config

Signatures

File Explorer

d3fc07b8625ff669fa8d3f0ca18937b4516a0ac3be19258af42bfda55709ef73

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

generic