39a1c72c6b2ac2c6a568744340cf902a6c9c3d2b6fe9f54123831f86a33ccc10

Sharing

Copy URL Twitter E-mail

General

Target
39a1c72c6b2ac2c6a568744340cf902a6c9c3d2b6fe9f54123831f86a33ccc10
Size 2.6MB
Sample260706-gsjd8set6l
SHA256 39a1c72c6b2ac2c6a568744340cf902a6c9c3d2b6fe9f54123831f86a33ccc10
MD5 d7f70559a75a498ab9b78d2089ccf5a7
SHA1 e53f99718309aff346ee73304e1f014280c501b5
SHA512 ede81fb7293b107598db2d97e4a330a6436ba8e6c71fbd8470e5559bbc37be2e653fa27492bd8640dca903c6f435bdd9a165c8667a75aee042bb61b20508674b
SSDEEP 49152:NBRUnw3GpKCS1ItD79OnqfTbldpES/XJD:VUw3GpKCZtyqFJXN
TLSH
T118C5BF12A6D144B2D17D357201773339AAB48E420E35CBDBABDCFDE91C329A1A7121DB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a1c72c6b2ac2c6a568744340cf902a6c9c3d2b6fe9f54123831f86a33ccc10

File Explorer

39a1c72c6b2ac2c6a568744340cf902a6c9c3d2b6fe9f54123831f86a33ccc10

.dll 2.6MB

39a1c72c6b2ac2c6a568744340cf902a6c9c3d2b6fe9f54123831f86a33ccc10

IMPHASH 329824ae174d48cdd51e5de4f32320fd
SHA256 39a1c72c6b2ac2c6a568744340cf902a6c9c3d2b6fe9f54123831f86a33ccc10
MD5 d7f70559a75a498ab9b78d2089ccf5a7
SHA1 e53f99718309aff346ee73304e1f014280c501b5
SHA512 ede81fb7293b107598db2d97e4a330a6436ba8e6c71fbd8470e5559bbc37be2e653fa27492bd8640dca903c6f435bdd9a165c8667a75aee042bb61b20508674b
SSDEEP 49152:NBRUnw3GpKCS1ItD79OnqfTbldpES/XJD:VUw3GpKCZtyqFJXN
TLSH
T118C5BF12A6D144B2D17D357201773339AAB48E420E35CBDBABDCFDE91C329A1A7121DB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

850487

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA AVIStreamGetFrame

winmm

waveOutPrepareHeader waveOutUnprepareHeader waveOutReset waveOutPause waveOutRestart waveOutClose PlaySoundA midiStreamRestart midiStreamClose midiOutReset midiStreamStop midiStreamOut midiOutPrepareHeader midiStreamProperty midiStreamOpen midiOutUnprepareHeader waveOutOpen waveOutGetNumDevs waveOutWrite

ws2_32

recvfrom ioctlsocket connect recv WSAGetLastError setsockopt getservbyname shutdown gethostbyname inet_ntoa inet_addr WSAStartup ntohl socket htons WSAAsyncSelect closesocket send WSACleanup accept ntohs getpeername

kernel32

GetTimeZoneInformation GetLocaleInfoA GetVersion WideCharToMultiByte CreateMutexA ReleaseMutex SuspendThread InterlockedIncrement InterlockedDecrement LocalFree FileTimeToSystemTime FileTimeToLocalFileTime lstrcpynA DuplicateHandle FlushFileBuffers LockFile UnlockFile SetEndOfFile lstrcmpiA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA lstrcmpA LocalAlloc TlsAlloc GlobalHandle TlsFree TlsSetValue LocalReAlloc TlsGetValue GetFileTime GetCurrentThread GlobalFlags SetErrorMode GetProcessVersion GetCPInfo GetOEMCP RtlUnwind GetSystemTime GetLocalTime RaiseException HeapSize GetACP SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree SetEnvironmentVariableW SetEnvironmentVariableA LCMapStringA LCMapStringW VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW CompareStringA CompareStringW IsBadReadPtr IsBadCodePtr IsValidLocale IsValidCodePage EnumSystemLocalesA SetStdHandle GetLocaleInfoW MapViewOfFile UnmapViewOfFile GetSystemInfo IsProcessorFeaturePresent SetNamedPipeHandleState WaitNamedPipeA OpenFileMappingA OpenEventA SetLastError MultiByteToWideChar GetSystemDirectoryA GetWindowsDirectoryA TerminateProcess GetCurrentProcess GetFileSize SetFilePointer TerminateThread CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA WriteFile ReadFile WaitForMultipleObjects CreateFileA SetEvent FindResourceA LoadResource LockResource lstrlenW RemoveDirectoryA GetModuleFileNameA GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA lstrlenA WinExec lstrcpyA FindNextFileA GetDriveTypeA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc GetUserDefaultLCID GetFullPathNameA FreeLibrary LoadLibraryA GetLastError GetVersionExA WritePrivateProfileStringA GetPrivateProfileStringA CreateThread CreateEventA Sleep GlobalAlloc GlobalLock GlobalUnlock GetTempPathA FindFirstFileA FindClose GetFileAttributesA DeleteFileA GetCurrentDirectoryA SetCurrentDirectoryA GetVolumeInformationA GetModuleHandleA GetProcAddress MulDiv GetCommandLineA GetTickCount WaitForSingleObject CloseHandle InterlockedExchange

user32

UnregisterClassA LoadStringA GetSysColorBrush GetClassNameA GetDesktopWindow DrawStateA FrameRect GetNextDlgTabItem TranslateMessage LoadIconA DrawFrameControl DrawEdge DrawFocusRect GetMessageA DispatchMessageA SetRectEmpty RegisterClipboardFormatA CreateIconFromResourceEx CreateIconFromResource DrawIconEx CreatePopupMenu AppendMenuA ModifyMenuA CreateMenu CreateAcceleratorTableA GetDlgCtrlID GetSubMenu EnableMenuItem ClientToScreen EnumDisplaySettingsA LoadImageA SystemParametersInfoA ShowWindow IsWindowEnabled TranslateAcceleratorA GetKeyState CopyAcceleratorTableA PostQuitMessage IsZoomed GetClassInfoA DefWindowProcA GetSystemMenu DeleteMenu GetMenu SetMenu PeekMessageA IsIconic SetFocus GetWindow DestroyAcceleratorTable SetWindowRgn GetMessagePos ScreenToClient ChildWindowFromPointEx CopyRect LoadBitmapA WinHelpA KillTimer SetTimer ReleaseCapture GetCapture SetCapture GetScrollRange SetScrollRange SetScrollPos SetRect InflateRect IntersectRect DestroyIcon PtInRect OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA GetSysColor SetActiveWindow SetCursorPos LoadCursorA SetCursor GetDC FillRect IsRectEmpty ReleaseDC IsChild DestroyMenu SetForegroundWindow GetWindowRect EqualRect UpdateWindow ValidateRect InvalidateRect GetClientRect GetFocus GetParent GetTopWindow PostMessageA IsWindow SetParent DestroyCursor SendMessageA SetWindowPos MessageBoxA GetCursorPos GetSystemMetrics EmptyClipboard SetClipboardData OpenClipboard GetClipboardData CloseClipboard wsprintfA GetMenuCheckMarkDimensions GetMenuState CheckMenuItem SetMenuItemBitmaps MoveWindow SetWindowTextA IsDialogMessageA ScrollWindowEx SendDlgItemMessageA MapWindowPoints AdjustWindowRectEx GetScrollPos RegisterClassA GetMenuItemCount GetMenuItemID CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetLastActivePopup RegisterWindowMessageA GetWindowPlacement EndDialog CreateDialogIndirectParamA DestroyWindow GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC CharUpperA GetWindowTextLengthA GetForegroundWindow GetWindowTextA FindWindowExA GetActiveWindow GetDlgItem WindowFromPoint

gdi32

LPtoDP DPtoLP GetCurrentObject RoundRect EndDoc DeleteDC StartDocA StartPage BitBlt GetPixel CreateCompatibleDC GetTextExtentPoint32A GetDeviceCaps GetTextMetricsA EndPage Rectangle GetObjectA GetStockObject CreateFontIndirectA CreateSolidBrush FillRgn CreateRectRgn CombineRgn PatBlt CreatePen SelectObject CreatePatternBrush CreateBitmap CreateDCA CreateCompatibleBitmap GetPolyFillMode GetStretchBltMode GetROP2 GetBkColor GetBkMode GetTextColor CreateRoundRectRgn CreateEllipticRgn PathToRegion EndPath BeginPath GetWindowOrgEx GetViewportOrgEx GetWindowExtEx GetDIBits RealizePalette SelectPalette StretchBlt CreatePalette GetSystemPaletteEntries CreateDIBitmap DeleteObject SelectClipRgn CreatePolygonRgn GetClipRgn SetStretchBltMode CreateDIBSection CreateRectRgnIndirect SetBkColor TextOutA SetBkMode SetTextColor SetDIBitsToDevice SaveDC RestoreDC SetPolyFillMode SetROP2 SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetClipBox ExcludeClipRect MoveToEx LineTo ExtSelectClipRgn GetViewportExtEx PtVisible RectVisible ExtTextOutA Escape Ellipse

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

comdlg32

GetFileTitleA GetSaveFileNameA GetOpenFileNameA ChooseColorA

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegQueryValueA RegOpenKeyA RegEnumValueA

shell32

SHGetSpecialFolderPathA ShellExecuteA Shell_NotifyIconA

ole32

CLSIDFromProgID OleInitialize OleUninitialize CLSIDFromString CoCreateInstance OleRun

oleaut32

SafeArrayPutElement VariantClear VariantChangeType SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetDim SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetElement VariantCopyInd VariantInit SysAllocString SafeArrayDestroy SafeArrayCreate RegisterTypeLi LHashValOfNameSys LoadTypeLi UnRegisterTypeLi

comctl32

_TrackMouseEvent ord17 ImageList_Destroy

generic

count=14, id=12, version=7291,

count=9, id=11, version=8047,

count=6, id=10, version=8047,

count=44, id=19, version=8022,

count=1, id=11, version=8966,

count=74, id=10, version=8966,

count=1, id=28, version=9178,

count=6, id=18, version=8444,

count=117, id=29, version=9178,

count=9, id=95, version=2067,

count=2, id=93, version=2179,

count=49, id=14, version=7299,

count=736, id=1, productName=Unmarked objects,

count=29, id=19, version=8034,

count=244, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=121, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=100, id=11, productName=VS98 (6.0) build 8168, version=8168,

count=46, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=49, productName=Unmarked objects (old),

count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,

count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,