proxy

Sharing

Copy URL Twitter E-mail

General

Target
proxy
Size 4.0MB
Sample260608-pgj6dsds2k
SHA256 cd9640018fa4397115c19bba60aab5afdfddd3b6c080b93dd7d7211759caa4f2
MD5 b18d01bddb14035225dcd1abc7d37f8b
SHA1 8530cf5c52047ed5c88c7ed512d229b608d9a8a4
SHA512 2e76298ead6463a398564fe73abeaa56d5dc2ec74e1a5936708db193193d378ca0395c5753313d7decd3c9e121a7d1d0b608e67c7cfbffa7150a38f1927e6de0
SSDEEP 98304:q5b+qHYjPknkDYRTACw/uG9vdnv6DYYs22qQX:cv4j08/v9JvYs2I
TLSH
T1361633C08D791DA9F22242BAF5845244F0FA1BC6E454167EC337D63564B8BC3A9A0DDF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/putty.exe

File Explorer

proxy

.zip 4.0MB
proxy.lnk

.lnk 1KB
putty.exe

.exe 4.3MB

SHA256 cd9640018fa4397115c19bba60aab5afdfddd3b6c080b93dd7d7211759caa4f2
MD5 b18d01bddb14035225dcd1abc7d37f8b
SHA1 8530cf5c52047ed5c88c7ed512d229b608d9a8a4
SHA512 2e76298ead6463a398564fe73abeaa56d5dc2ec74e1a5936708db193193d378ca0395c5753313d7decd3c9e121a7d1d0b608e67c7cfbffa7150a38f1927e6de0
SSDEEP 98304:q5b+qHYjPknkDYRTACw/uG9vdnv6DYYs22qQX:cv4j08/v9JvYs2I
TLSH
T1361633C08D791DA9F22242BAF5845244F0FA1BC6E454167EC337D63564B8BC3A9A0DDF
MD5 SHA1 SHA512 SSDEEP TLSH

putty.exe

IMPHASH 74638b0911b0c9268aae1edee5a60a9f
SHA256 fffa291363c6f4dd7695d56559bff754512cbdd4cc15a55bc4f34cb6006df9e3
MD5 683103409851fff2be650955eaa6908d
SHA1 a3ab0f343f61c9f537a21e97d6a19c2af5a18601
SHA512 40a6d295fb02154a59183b4cd3a11f236cda8fe51faa1b04d08938753226c8e9f0273ddf54919457d6db83d3d20a9f909795983fc9a93710c92615187034f6ff
SSDEEP 98304:LcujX9CMHSkgEFyJSfKUX1sjHvHKfc+hhps8uYq:H9dauX6HfUhh+8e
TLSH
T187262362A1E0443AE0BB0671980F4722EBF7995541288C3F9BE054CD3C75BD7A7297EE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

345019

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyA GetUserNameA CopySid GetLengthSid RegCreateKeyA RegSetValueExA RegDeleteKeyA RegEnumKeyA RegDeleteValueA RegCreateKeyExA

comctl32

ord14 ord15 ord17 ord13

comdlg32

ChooseColorA ChooseFontA GetOpenFileNameA GetSaveFileNameA

gdi32

CreateBitmap IntersectClipRect ExcludeClipRect UpdateColors DeleteDC GetTextExtentPoint32A CreateCompatibleDC DeleteObject TextOutA SetBkColor SetTextColor Rectangle CreateSolidBrush GetStockObject SelectObject CreateFontIndirectA GetTextExtentExPointA SetMapMode GetDeviceCaps GetTextMetricsA CreateFontA RealizePalette SelectPalette CreatePalette ExtTextOutA GetCharacterPlacementW SetBkMode GetBkMode ExtTextOutW GetCharABCWidthsFloatA GetPixel SetTextAlign CreateCompatibleBitmap TranslateCharsetInfo GetObjectA LineTo MoveToEx CreatePen SetPixel Polyline GetCharWidthW GetCharWidth32W GetCharWidthA GetCharWidth32A SetPaletteEntries UnrealizeObject

imm32

ImmReleaseContext ImmGetCompositionStringW ImmSetCompositionFontA ImmGetContext ImmSetCompositionWindow

ole32

CoUninitialize CoInitialize CoCreateInstance

shell32

ShellExecuteA

user32

SetForegroundWindow CreateMenu GetSystemMenu GetDoubleClickTime GetForegroundWindow GetQueueStatus GetClipboardOwner FindWindowA MessageBoxIndirectA WinHelpA UpdateWindow DefWindowProcA InvalidateRect SetWindowPos EndPaint GetWindowTextA GetWindowTextLengthA GetClientRect BeginPaint SetWindowTextA PeekMessageA MsgWaitForMultipleObjects IsWindow CreateCaret ShowCaret HideCaret DestroyCaret TranslateMessage EnableMenuItem GetCursorPos TrackPopupMenu ScreenToClient GetKeyboardLayout SetKeyboardState ToAsciiEx SetScrollInfo GetMessageTime PostMessageA CheckMenuItem IsZoomed FlashWindow GetClipboardData RegisterClipboardFormatA OpenClipboard SetClipboardData CloseClipboard SetCaretPos KillTimer SetTimer GetKeyboardState SetClassLongA SetCursor ShowCursor CreatePopupMenu InsertMenuA DeleteMenu AppendMenuA IsIconic GetSystemMetrics GetCapture ReleaseCapture LoadIconA GetDesktopWindow MoveWindow DefDlgProcA LoadCursorA CreateDialogParamA GetMessageA GetWindowLongA IsDialogMessageA DispatchMessageA PostQuitMessage EnableWindow DialogBoxParamA EndDialog GetParent SetActiveWindow GetWindowPlacement SetWindowPlacement RegisterWindowMessageA DrawEdge SetCapture MessageBoxA SetFocus GetDlgItem GetDlgItemTextA SetDlgItemTextA CheckDlgButton IsDlgButtonChecked CheckRadioButton SetWindowLongA MessageBeep SendDlgItemMessageA GetDC ReleaseDC SendMessageA MapDialogRect GetCaretBlinkTime DestroyWindow RegisterClassA GetSysColor SystemParametersInfoA GetWindowRect CreateWindowExA ShowWindow EmptyClipboard

winmm

PlaySoundA

winspool.drv

OpenPrinterA StartDocPrinterA StartPagePrinter EndDocPrinter ClosePrinter EnumPrintersA WritePrinter EndPagePrinter

kernel32

SetEnvironmentVariableA CompareStringW CompareStringA HeapSize SetEndOfFile InterlockedExchange RtlUnwind SetFilePointer SetStdHandle GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter VirtualFree HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount LCMapStringW LCMapStringA VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect GetTimeZoneInformation FlushFileBuffers GetStringTypeW GetStringTypeA GetCommandLineA GetStartupInfoA GetSystemTimeAsFileTime DeleteFileA TerminateProcess ExitProcess HeapFree HeapReAlloc HeapAlloc GetDateFormatA GetTimeFormatA GetCurrentDirectoryA SetCurrentDirectoryA GetACP GetLocalTime GetEnvironmentVariableA SetCommBreak CreateFileA GetCommState SetCommState SetCommTimeouts ClearCommBreak CreatePipe SetHandleInformation GetCurrentThreadId OpenProcess LocalAlloc LocalFree GetWindowsDirectoryA FindFirstFileA FindNextFileA FindClose GetCurrentProcessId QueryPerformanceCounter GlobalMemoryStatus GetCurrentThread GetThreadTimes GetCurrentProcess GetProcessTimes GetSystemTime GetSystemTimeAdjustment GetSystemDirectoryA WriteFile CreateEventA ReadFile GetLastError WaitForSingleObject GetOverlappedResult SetEvent LoadLibraryA FreeLibrary CreateFileMappingA MapViewOfFile UnmapViewOfFile GetModuleFileNameA CreateProcessA CloseHandle Beep CreateThread WideCharToMultiByte GlobalAlloc GlobalLock GlobalUnlock GlobalFree IsDBCSLeadByteEx MultiByteToWideChar GetLocaleInfoA GetOEMCP GetCPInfo lstrcpynA GetModuleHandleA GetProcAddress GetVersionExA MulDiv GetTickCount