freeVbucks[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
freeVbucks.exe
Size 706KB
Sample260623-sr53dsdz6s
SHA256 ec8d1bca14f2e725ae993cca2456b21bdafa6ca82a7edee2dffe1fe4590cea21
MD5 cbbf3fb48230f348e1c21fe9db4ed8f2
SHA1 f9cd6a98f24725cf824dd4096d8803acd8e68d74
SHA512 243ef6788fd8845bfa9cdbb4f27a5740b95aa81c0985f566db05371b6047f64d408b1d8458c03d2880e9adfec8b192b3f259fb708b562832c031e1974fe32e7f
SSDEEP 12288:oU+9H3900EJqrekLEyTYQcDL/TNuUCziP6VFGO5lrEaKYNtcBvAuvlee2NCFbLkk:oU+9XNrenyktDLdYNtcdvQNC9wHAP5cU
TLSH
T190F4AD61F69A41F6E9D1347011BAE7325939EE762334BAC3BBA43D7809311C2AD3934D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
freeVbucks.exe

File Explorer

freeVbucks.exe

.exe 706KB

freeVbucks.exe

IMPHASH 9ff9e9f6ab5caab780768df74f57d5d0
SHA256 ec8d1bca14f2e725ae993cca2456b21bdafa6ca82a7edee2dffe1fe4590cea21
MD5 cbbf3fb48230f348e1c21fe9db4ed8f2
SHA1 f9cd6a98f24725cf824dd4096d8803acd8e68d74
SHA512 243ef6788fd8845bfa9cdbb4f27a5740b95aa81c0985f566db05371b6047f64d408b1d8458c03d2880e9adfec8b192b3f259fb708b562832c031e1974fe32e7f
SSDEEP 12288:oU+9H3900EJqrekLEyTYQcDL/TNuUCziP6VFGO5lrEaKYNtcBvAuvlee2NCFbLkk:oU+9XNrenyktDLdYNtcdvQNC9wHAP5cU
TLSH
T190F4AD61F69A41F6E9D1347011BAE7325939EE762334BAC3BBA43D7809311C2AD3934D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

570580

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

gethostbyname inet_addr WSACleanup gethostname WSAStartup

winmm

mixerGetLineInfoA mixerGetDevCapsA mixerOpen mciSendStringA joyGetPosEx mixerGetLineControlsA mixerGetControlDetailsA mixerSetControlDetails waveOutGetVolume mixerClose waveOutSetVolume joyGetDevCapsA

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

comctl32

ImageList_Create ord6 ImageList_ReplaceIcon InitCommonControlsEx ImageList_GetIconSize ImageList_Destroy ImageList_AddMasked

psapi

GetModuleBaseNameA GetModuleFileNameExA

wininet

InternetOpenA InternetOpenUrlA InternetCloseHandle InternetReadFileExA InternetReadFile

kernel32

DeleteCriticalSection GetModuleFileNameA GetSystemTimeAsFileTime FindResourceA SizeofResource LoadResource LockResource GetFullPathNameA GetShortPathNameA FindFirstFileA FindNextFileA FindClose FileTimeToLocalFileTime SetEnvironmentVariableA Beep MoveFileA OutputDebugStringA CreateProcessA GetFileAttributesA GetExitCodeProcess WriteProcessMemory ReadProcessMemory GetCurrentProcessId OpenProcess TerminateProcess SetPriorityClass SetLastError GetEnvironmentVariableA GetLocalTime GetDateFormatA GetTimeFormatA GetDiskFreeSpaceExA SetVolumeLabelA CreateFileA DeviceIoControl GetDriveTypeA GetVolumeInformationA GetDiskFreeSpaceA GetCurrentDirectoryA CreateDirectoryA ReadFile GetACP WriteFile DeleteFileA SetFileAttributesA LocalFileTimeToFileTime SetFileTime GetFileSizeEx InitializeCriticalSection GetSystemDefaultUILanguage GetComputerNameA GetSystemWindowsDirectoryA GetTempPathA EnterCriticalSection LeaveCriticalSection VirtualProtect QueryDosDeviceA CompareStringA GetFullPathNameW RemoveDirectoryA CopyFileA GetCurrentProcess CreateToolhelp32Snapshot Process32First Process32Next FormatMessageA GetPrivateProfileStringA GetPrivateProfileSectionA GetPrivateProfileSectionNamesA WritePrivateProfileStringA WritePrivateProfileSectionA SetEndOfFile GetFileType GetStdHandle SetFilePointerEx SystemTimeToFileTime FileTimeToSystemTime GetFileSize VirtualAllocEx VirtualFreeEx EnumResourceNamesA LoadLibraryExA GlobalSize HeapSetInformation GetCommandLineA HeapQueryInformation HeapSize HeapReAlloc ExitProcess GetModuleHandleW HeapAlloc HeapFree IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate GetCPInfo GetVersionExW GetModuleHandleA FreeLibrary GetProcAddress LoadLibraryA MultiByteToWideChar GetLastError CreateMutexA CloseHandle GetExitCodeThread SetThreadPriority CreateThread GetStringTypeExA lstrcmpiA WideCharToMultiByte GetCurrentThreadId GlobalUnlock GlobalFree GlobalAlloc GlobalLock SetErrorMode SetCurrentDirectoryA Sleep GetTickCount MulDiv GetModuleFileNameW InitializeCriticalSectionAndSpinCount GetStartupInfoW InterlockedIncrement InterlockedDecrement LoadLibraryW IsProcessorFeaturePresent GetStringTypeW RaiseException RtlUnwind GetConsoleCP GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount QueryPerformanceCounter SetFilePointer GetOEMCP WriteConsoleW SetStdHandle FlushFileBuffers GetProcessHeap CreateFileW GetSystemTime VirtualQuery

user32

SetWindowTextW SetDlgItemTextA MessageBeep GetCursorInfo GetLastInputInfo GetSystemMenu GetMenuItemCount GetMenuItemID GetSubMenu GetMenuStringA ExitWindowsEx SetMenu FlashWindow GetPropA SetPropA RemovePropA MapWindowPoints RedrawWindow SetParent SendMessageW GetClassInfoExA DefDlgProcA GetAncestor UpdateWindow GetMessagePos GetClassLongA CallWindowProcA CheckRadioButton IntersectRect GetUpdateRect PtInRect CreateDialogIndirectParamA CreateAcceleratorTableA DestroyAcceleratorTable InsertMenuItemA SetMenuDefaultItem RemoveMenu SetMenuItemInfoA IsMenu GetMenuItemInfoA CreateMenu CreatePopupMenu SetMenuInfo AppendMenuA DestroyMenu TrackPopupMenuEx CopyImage CreateIconIndirect CreateIconFromResourceEx EnumClipboardFormats GetWindow BringWindowToTop MessageBoxA GetTopWindow GetQueueStatus PostQuitMessage GetDlgItem ChangeClipboardChain SetClipboardViewer LoadAcceleratorsA EnableMenuItem GetMenu CreateWindowExA RegisterClassExA DestroyIcon DestroyWindow GetWindowTextLengthA MapVirtualKeyA MapVirtualKeyExA VkKeyScanExA GetGUIThreadInfo GetWindowTextA mouse_event WindowFromPoint GetSystemMetrics keybd_event SetKeyboardState GetKeyboardState GetCursorPos PostMessageW GetAsyncKeyState AttachThreadInput SendInput UnregisterHotKey RegisterHotKey SendMessageTimeoutA UnhookWindowsHookEx SetWindowsHookExA PostThreadMessageA IsCharAlphaNumericA IsCharUpperA IsCharLowerA ToAsciiEx GetKeyboardLayout CallNextHookEx CharLowerA ReleaseDC GetDC OpenClipboard GetClipboardData GetClipboardFormatNameA CloseClipboard SetClipboardData EmptyClipboard PostMessageA FindWindowA EndDialog IsWindow DispatchMessageA TranslateMessage ShowWindow CountClipboardFormats SendDlgItemMessageA DialogBoxParamA SetForegroundWindow DefWindowProcA FillRect DrawIconEx GetSysColorBrush GetSysColor RegisterWindowMessageA EnumDisplayMonitors IsIconic IsZoomed LoadImageA EnumWindows SetWindowLongA ScreenToClient IsDialogMessageA SendMessageA IsWindowEnabled GetWindowLongA GetKeyState TranslateAcceleratorA KillTimer PeekMessageA GetFocus EnableWindow InvalidateRect SetLayeredWindowAttributes SetWindowPos SetWindowRgn SetFocus SetActiveWindow ClientToScreen EnumChildWindows MoveWindow GetWindowRect GetMonitorInfoA MonitorFromPoint GetClientRect SystemParametersInfoA AdjustWindowRectEx DrawTextA SetRect GetIconInfo SetWindowTextA IsWindowVisible GetClassNameA GetWindowThreadProcessId GetForegroundWindow GetMessageA SetTimer GetParent GetDlgCtrlID CharUpperA IsClipboardFormatAvailable BlockInput IsCharAlphaA CheckMenuItem LoadCursorA

gdi32

GetPixel GetClipRgn GetCharABCWidthsA SetBkMode CreatePatternBrush SetBrushOrgEx EnumFontFamiliesExA CreateDIBSection GdiFlush SetBkColor ExcludeClipRect SetTextColor GetClipBox BitBlt CreateCompatibleBitmap GetSystemPaletteEntries GetDIBits CreateCompatibleDC CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateEllipticRgn DeleteDC GetObjectA GetTextMetricsA GetTextFaceA SelectObject GetStockObject CreateDCA CreateSolidBrush CreateFontA FillRgn GetDeviceCaps DeleteObject

comdlg32

CommDlgExtendedError GetSaveFileNameA GetOpenFileNameA

advapi32

RegDeleteKeyA RegSetValueExA RegCreateKeyExA RegQueryValueExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken CloseServiceHandle UnlockServiceDatabase LockServiceDatabase OpenSCManagerA GetUserNameA RegEnumKeyExA RegEnumValueA RegQueryInfoKeyA RegOpenKeyExA RegCloseKey RegConnectRegistryA RegDeleteValueA

shell32

DragQueryPoint SHEmptyRecycleBinA SHFileOperationA SHGetPathFromIDListA SHBrowseForFolderA SHGetDesktopFolder SHGetMalloc SHGetFolderPathA ShellExecuteExA Shell_NotifyIconA DragFinish DragQueryFileA ExtractIconA

ole32

OleInitialize OleUninitialize CoCreateInstance CoInitialize CoUninitialize CLSIDFromString CLSIDFromProgID CoGetObject StringFromGUID2 CreateStreamOnHGlobal

oleaut32

SafeArrayGetLBound GetActiveObject OleLoadPicture SafeArrayUnaccessData SafeArrayGetElemsize SafeArrayAccessData SafeArrayUnlock SafeArrayPtrOfIndex SafeArrayLock SafeArrayGetDim SafeArrayDestroy SafeArrayGetUBound VariantCopyInd SafeArrayCopy SysAllocString VariantChangeType VariantClear SafeArrayCreate SysFreeString SysStringLen