23062026_1110_Document15[.]0602026 BGNkwws-22jxoxjxox53591frp2sg[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
23062026_1110_Document15.0602026 BGNkwws-22jxoxjxox53591frp2sg.exe
Size 4.2MB
Sample260623-m96tracs2j
SHA256 7f045de36654d00d6c55bcff9e5e8e328d0eb89ef0e21b41c3da36508a38045c
MD5 f448f0f0efe3f46ddf3ad1aaf3c668b2
SHA1 7606e71cd28f47ee4161b5f1490fdbb80593c0fc
SHA512 976c56cc3d47a0f4fd1d808b7df6b4da453cdb7230eba09e05dfe2455e5f4af91152c1f6b45dab401492386d5d68604652a06de54f544c8bd6fb1748e2a11f69
SSDEEP 98304:LFLWYn2UWIp+0owOAmuFLOAkGkzdnEVomFHKnP:LVJ8wOiFLOyomFHKnP
TLSH
T13426BE45AAED04D8E4AAD075C95B491FE6B3BC11123287AF0261B75FEF733514E2E322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23062026_1110_Document15.0602026 BGNkwws-22jxoxjxox53591frp2sg.exe

File Explorer

23062026_1110_Document15.0602026 BGNkwws-22jxoxjxox53591frp2sg.exe

.exe 4.2MB

23062026_1110_Document15.0602026 BGNkwws-22jxoxjxox53591frp2sg.exe

IMPHASH 00cf654ccdf58393d841d49cc03b3261
SHA256 7f045de36654d00d6c55bcff9e5e8e328d0eb89ef0e21b41c3da36508a38045c
MD5 f448f0f0efe3f46ddf3ad1aaf3c668b2
SHA1 7606e71cd28f47ee4161b5f1490fdbb80593c0fc
SHA512 976c56cc3d47a0f4fd1d808b7df6b4da453cdb7230eba09e05dfe2455e5f4af91152c1f6b45dab401492386d5d68604652a06de54f544c8bd6fb1748e2a11f69
SSDEEP 98304:LFLWYn2UWIp+0owOAmuFLOAkGkzdnEVomFHKnP:LVJ8wOiFLOyomFHKnP
TLSH
T13426BE45AAED04D8E4AAD075C95B491FE6B3BC11123287AF0261B75FEF733514E2E322
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

1806136

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead GetStartupInfoW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW ReadConsoleW EnumSystemLocalesW IsValidLocale LCMapStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc GetConsoleMode TerminateProcess GetTimeZoneInformation SetFilePointerEx GetStdHandle GetFileType SetStdHandle VirtualQuery VirtualAlloc GetSystemInfo QueryPerformanceFrequency HeapQueryInformation GetCommandLineA FreeLibraryAndExitThread ExitThread RtlPcToFileHeader RtlUnwindEx GetCPInfo LCMapStringEx GetStringTypeW RaiseException IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetUserDefaultLCID GetTempFileNameW SystemTimeToTzSpecificLocalTime GetFileTime GetFileSizeEx GetFileAttributesExW FileTimeToLocalFileTime SetErrorMode Sleep RtlVirtualUnwind GetProfileIntW GetTickCount64 SearchPathW GetWindowsDirectoryW FindResourceExW GetTempPathW lstrcmpiW GetCurrentProcess DuplicateHandle UnlockFile SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FindFirstFileW FindClose DeleteFileW GetFileSize GetThreadLocale FileTimeToSystemTime VirtualProtect GlobalFlags GetSystemDefaultUILanguage GetLocaleInfoW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection GlobalGetAtomNameW InitializeCriticalSectionAndSpinCount VerifyVersionInfoW VerSetConditionMask lstrcpyW WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW lstrcmpA GetVersionExW GetCurrentThread ResumeThread SetThreadPriority CopyFileW MulDiv LocalFree GlobalSize CompareStringW QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW GlobalFindAtomW GlobalAddAtomW lstrcmpW GlobalDeleteAtom GetSystemDirectoryW EncodePointer OutputDebugStringA GetEnvironmentVariableW FreeLibrary LoadLibraryW CreateProcessW GetUserDefaultUILanguage GetModuleFileNameW ExpandEnvironmentStringsW GlobalUnlock GlobalLock GlobalFree GlobalAlloc WideCharToMultiByte SystemTimeToFileTime GetCurrentDirectoryW LocalFileTimeToFileTime MultiByteToWideChar GetFileAttributesW CreateFileW SetFilePointer SetFileTime WriteFile ReadFile CreateDirectoryW LoadLibraryExW CreateThread ExitProcess LeaveCriticalSection GetCommandLineW EnterCriticalSection IsDebuggerPresent DebugBreak GetModuleHandleW GetProcessHeap GetCurrentProcessId DeleteCriticalSection CreateMutexExW GetProcAddress DecodePointer HeapAlloc FindResourceW LoadResource CloseHandle HeapReAlloc OpenSemaphoreW LockResource WaitForSingleObjectEx OutputDebugStringW GetLastError FormatMessageW HeapSize ReleaseMutex GetCurrentThreadId WaitForSingleObject InitializeCriticalSectionEx GetModuleHandleExW ReleaseSemaphore SetLastError HeapFree CreateSemaphoreExW SizeofResource GetModuleFileNameA SetEnvironmentVariableW WriteConsoleW GetConsoleOutputCP RtlUnwind

user32

GetAsyncKeyState RealChildWindowFromPoint SendDlgItemMessageA CopyImage GetMenuItemInfoW DestroyMenu EnumDisplayMonitors SystemParametersInfoW LoadCursorW SetRectEmpty SetLayeredWindowAttributes MapDialogRect SetWindowContextHelpId SetCursor ShowOwnedPopups PostQuitMessage DrawIconEx IsRectEmpty OffsetRect InflateRect DrawFocusRect GetSysColorBrush SetWindowRgn DrawFrameControl DrawEdge TranslateMessage GetMessageW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetWindowThreadProcessId ReleaseDC GetWindowDC GetDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW RemoveMenu InsertMenuW GetMenuState GetMenuStringW ClientToScreen GetCursorPos GetDesktopWindow GetActiveWindow GetNextDlgTabItem EndDialog CreateDialogIndirectParamW IsDialogMessageW SetWindowTextW IsWindowEnabled CheckDlgButton MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetWindow GetLastActivePopup GetTopWindow GetParent GetClassLongPtrW GetWindowLongPtrW EqualRect CopyRect GetSysColor MapWindowPoints MessageBoxW AdjustWindowRectEx IsZoomed GetWindowTextLengthW GetWindowTextW RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow ValidateRect EndPaint BeginPaint SetForegroundWindow GetForegroundWindow SetActiveWindow CharUpperW SetTimer KillTimer EnableWindow UnregisterClassW IsIconic AppendMenuW GetClientRect TrackPopupMenu GetMenuItemCount GetMenuItemID GetSubMenu SetMenu GetMenu GetKeyState GetFocus SetFocus GetDlgCtrlID GetDlgItem IsWindowVisible EndDeferWindowPos DeferWindowPos BeginDeferWindowPos LoadMenuW DeleteMenu MessageBeep WindowFromPoint IntersectRect NotifyWinEvent CreatePopupMenu GetMenuDefaultItem SetMenuDefaultItem UpdateLayeredWindow EnableScrollBar UnionRect MonitorFromPoint DestroyIcon LoadImageW SetParent SetWindowPlacement GetWindowPlacement SetCursorPos SetRect BringWindowToTop LockWindowUpdate GetDoubleClickTime GetIconInfo ToUnicodeEx SetWindowLongW LoadIconW MessageBoxA SetWindowDisplayAffinity DrawIcon GetSystemMetrics SendMessageW SetWindowLongPtrW SetWindowPos PostMessageW GetSystemMenu GetWindowLongW wsprintfW SetClipboardData EmptyClipboard CloseClipboard OpenClipboard ReleaseCapture PtInRect SetCapture TrackMouseEvent GetCapture ScreenToClient DrawStateW UpdateWindow InvalidateRect FillRect GetClassNameW LoadBitmapW RegisterWindowMessageW DispatchMessageW PeekMessageW GetMessagePos GetMessageTime DefWindowProcW CallWindowProcW RegisterClassW GetClassInfoW GetClassInfoExW CreateWindowExW IsWindow IsMenu CopyIcon ModifyMenuW DestroyAcceleratorTable SetClassLongPtrW IsChild DestroyWindow GetUpdateRect WaitMessage CharNextW CopyAcceleratorTableW InvalidateRgn GetNextDlgGroupItem GetWindowRgn DestroyCursor InvertRect HideCaret CreateMenu GetComboBoxInfo TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar MapVirtualKeyExW IsCharLowerW IsClipboardFormatAvailable SubtractRect GetKeyNameTextW PostThreadMessageW FrameRect ReuseDDElParam UnpackDDElParam InsertMenuItemW TranslateAcceleratorW CharUpperBuffW RegisterClipboardFormatW CreateAcceleratorTableW LoadAcceleratorsW MapVirtualKeyW GetKeyboardState GetKeyboardLayout GetWindowRect

gdi32

GetObjectType GetPixel GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextAlign MoveToEx TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CombineRgn CreateEllipticRgn CreateRectRgnIndirect Ellipse GetBkColor GetClipBox GetTextExtentPoint32W PatBlt CreatePolygonRgn Polygon Polyline GetTextMetricsW CreateCompatibleBitmap CreateDIBitmap CreateFontIndirectW EnumFontFamiliesW GetTextCharsetInfo CreateRoundRectRgn CreateDIBSection GetMapMode SetRectRgn DPtoLP RealizePalette SetPixel StretchBlt SetDIBColorTable Rectangle GetRgnBox OffsetRgn RoundRect CreatePalette GetPaletteEntries EnumFontFamiliesExW GetNearestPaletteIndex GetSystemPaletteEntries LPtoDP ExtFloodFill SetPaletteEntries FillRgn FrameRgn GetBoundsRect PtInRegion GetViewportOrgEx GetWindowOrgEx SetPixelV GetTextFaceW ExcludeClipRect Escape CreateRectRgn CreatePatternBrush CreatePen CreateHatchBrush CreateCompatibleDC CreateBitmap BitBlt GetDeviceCaps CreateDCW CopyMetaFileW SetTextColor SetBkColor GetObjectW GetStockObject DeleteObject GetTextColor DeleteDC CreateSolidBrush

msimg32

TransparentBlt AlphaBlend

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegGetValueW RegEnumKeyExW RegEnumValueW RegQueryValueW RegQueryValueExW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW

shell32

CommandLineToArgvW GetCurrentProcessExplicitAppUserModelID SHGetMalloc SHGetPathFromIDListW DragFinish DragQueryFileW ShellExecuteW SHGetFileInfoW SHAppBarMessage SHGetDesktopFolder SHBrowseForFolderW SHGetSpecialFolderLocation

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW StrFormatKBSizeW PathIsUNCW PathStripToRootW PathFindExtensionW PathRemoveFileSpecW

uxtheme

GetThemeColor DrawThemeBackground GetCurrentThemeName CloseThemeData GetThemeSysColor IsThemeBackgroundPartiallyTransparent GetThemePartSize GetWindowTheme DrawThemeText IsAppThemed OpenThemeData DrawThemeParentBackground

ole32

OleLockRunning CoFreeUnusedLibraries OleInitialize OleUninitialize OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator CLSIDFromString RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard DoDragDrop OleIsCurrentClipboard OleFlushClipboard CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject CreateStreamOnHGlobal CoDisconnectObject CLSIDFromProgID CoCreateInstance CoCreateGuid ReleaseStgMedium OleDuplicateData CoUninitialize CoInitialize CoInitializeEx CoTaskMemFree CoTaskMemAlloc CoRevokeClassObject CoRegisterMessageFilter

oleaut32

SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantChangeType SysAllocString VariantCopy VarBstrFromDate VariantClear LoadTypeLi OleCreateFontIndirect VariantInit SysFreeString SysAllocStringLen

oledlg

OleUIBusyW

urlmon

URLOpenBlockingStreamW

gdiplus

GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdiplusShutdown GdipAlloc

crypt32

CryptStringToBinaryA

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

imm32

ImmReleaseContext ImmGetOpenStatus ImmGetContext

winmm

PlaySoundW

Name

.text

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

614KB

Virtual Size

613KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

40KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

95KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

61KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

23062026_1110_Document15.0602026 BGNkwws-22jxoxjxox53591frp2sg.exe

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

urlmon

gdiplus

crypt32

oleacc

imm32

winmm

generic