427e64864568eebc36e2994480da85b1320858f977e7dca007cf8c7cfccfe28d

Sharing

Copy URL Twitter E-mail

General

Target
427e64864568eebc36e2994480da85b1320858f977e7dca007cf8c7cfccfe28d
Size 1.1MB
Sample260708-cslr5shv81
SHA256 427e64864568eebc36e2994480da85b1320858f977e7dca007cf8c7cfccfe28d
MD5 44d3206391d2bbe0419e0f2b36583b9d
SHA1 82c8112f1a74f4b53d055974589c64b1a05f3ead
SHA512 f266705c601fe09320541b5f0f076110636203dccf31b248c505a8463019f660439330b74978f5176aba5a7b51d9324f8aeb91878729bfab71d9658b0cc22a3a
SSDEEP 12288:yW6lW8dcnqYRt1rK1bFUPzzBEG7QrP8IrJNzNo3dOGSvO67XTImfk0Z5CV:8WqyR3rK1JU7zH7QJZUdOGSmCTFk7
TLSH
T168359F42B69788B3D6462E3004AB673AA6359E494B25CBC36368FF396D331C1DF37185
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
427e64864568eebc36e2994480da85b1320858f977e7dca007cf8c7cfccfe28d

File Explorer

427e64864568eebc36e2994480da85b1320858f977e7dca007cf8c7cfccfe28d

.exe 1.1MB

427e64864568eebc36e2994480da85b1320858f977e7dca007cf8c7cfccfe28d

IMPHASH 39acd42a6553657d1707cdffc2fa0508
SHA256 427e64864568eebc36e2994480da85b1320858f977e7dca007cf8c7cfccfe28d
MD5 44d3206391d2bbe0419e0f2b36583b9d
SHA1 82c8112f1a74f4b53d055974589c64b1a05f3ead
SHA512 f266705c601fe09320541b5f0f076110636203dccf31b248c505a8463019f660439330b74978f5176aba5a7b51d9324f8aeb91878729bfab71d9658b0cc22a3a
SSDEEP 12288:yW6lW8dcnqYRt1rK1bFUPzzBEG7QrP8IrJNzNo3dOGSvO67XTImfk0Z5CV:8WqyR3rK1JU7zH7QJZUdOGSmCTFk7
TLSH
T168359F42B69788B3D6462E3004AB673AA6359E494B25CBC36368FF396D331C1DF37185
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

585757

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

midiStreamOut midiOutPrepareHeader midiStreamProperty midiStreamOpen midiOutUnprepareHeader waveOutOpen waveOutUnprepareHeader waveOutPrepareHeader waveOutWrite waveOutPause waveOutReset waveOutClose waveOutGetNumDevs waveOutRestart midiStreamStop midiOutReset midiStreamClose midiStreamRestart

ws2_32

WSAAsyncSelect closesocket send select WSAStartup inet_ntoa recvfrom ioctlsocket recv getpeername accept WSACleanup ntohl

rasapi32

RasHangUpA RasGetConnectStatusA

kernel32

GetCurrentProcess TerminateThread SetFilePointer GetFileSize TerminateProcess SetLastError GetTimeZoneInformation FileTimeToSystemTime CreateMutexA ReleaseMutex SuspendThread InterlockedIncrement InterlockedDecrement GetSystemInfo IsProcessorFeaturePresent lstrcmpiA RaiseException GetLocalTime GetSystemTime RtlUnwind GetStartupInfoA GetOEMCP GetCPInfo GetProcessVersion SetErrorMode GlobalFlags GetCurrentThread GetFileTime TlsGetValue LocalReAlloc TlsSetValue TlsFree GlobalHandle TlsAlloc LocalAlloc lstrcmpA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom SetEndOfFile UnlockFile LockFile FlushFileBuffers DuplicateHandle lstrcpynA FileTimeToLocalFileTime LocalFree GetSystemDirectoryA CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA WriteFile WaitForMultipleObjects CreateFileA SetEvent FindResourceA LoadResource LockResource ReadFile GetModuleFileNameA GetCurrentProcessId GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA lstrlenA WinExec lstrcpyA FindNextFileA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc MultiByteToWideChar WideCharToMultiByte GetFullPathNameA FreeLibrary LoadLibraryA GetLastError GetVersionExA WritePrivateProfileStringA CreateThread CreateEventA Sleep InterlockedExchange GlobalAlloc GlobalLock GlobalUnlock FindFirstFileA FindClose GetFileAttributesA SetCurrentDirectoryA GetVolumeInformationA GetModuleHandleA GetProcAddress MulDiv GetCommandLineA GetTickCount CreateProcessA WaitForSingleObject CloseHandle HeapSize GetACP SetStdHandle GetFileType UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree SetEnvironmentVariableA LCMapStringA LCMapStringW VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW CompareStringA CompareStringW IsBadReadPtr IsBadCodePtr GetVersion

user32

WinHelpA LoadBitmapA CopyRect ChildWindowFromPointEx ScreenToClient GetMessagePos SetWindowRgn DestroyAcceleratorTable GetWindow KillTimer SetTimer GetSysColorBrush LoadStringA GetWindowThreadProcessId PostQuitMessage CopyAcceleratorTableA GetKeyState TranslateAcceleratorA ShowWindow SystemParametersInfoA LoadImageA EnumDisplaySettingsA ClientToScreen EnableMenuItem GetSubMenu GetDlgCtrlID CreateAcceleratorTableA CreateMenu ModifyMenuA AppendMenuA CreatePopupMenu DrawIconEx CreateIconFromResource CreateIconFromResourceEx RegisterClipboardFormatA GetCapture SetCapture GetScrollRange SetScrollRange SetScrollPos SetRect InflateRect IntersectRect DestroyIcon PtInRect OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA SetRectEmpty GetMenuCheckMarkDimensions GetMenuState SetMenuItemBitmaps CheckMenuItem MoveWindow IsDialogMessageA ScrollWindowEx SendDlgItemMessageA MapWindowPoints AdjustWindowRectEx GetActiveWindow GetScrollPos RegisterClassA GetMenuItemCount GetMenuItemID CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetLastActivePopup RegisterWindowMessageA GetWindowPlacement GetNextDlgTabItem EndDialog SetActiveWindow SetCursorPos LoadCursorA SetCursor GetDC FillRect IsRectEmpty ReleaseDC IsChild DestroyMenu SetForegroundWindow GetWindowRect EqualRect UpdateWindow ValidateRect InvalidateRect GetClientRect GetFocus GetParent GetTopWindow PostMessageA IsWindow SetParent DestroyCursor SendMessageA SetWindowPos MessageBoxA ReleaseCapture GetCursorPos GetSystemMetrics EmptyClipboard SetClipboardData OpenClipboard GetClipboardData CloseClipboard wsprintfA WaitForInputIdle SetFocus IsIconic PeekMessageA SetMenu GetMenu DeleteMenu GetSystemMenu DefWindowProcA DispatchMessageA GetMessageA WindowFromPoint DrawFocusRect DrawEdge DrawFrameControl LoadIconA GetForegroundWindow UnregisterClassA GetDesktopWindow GetClassNameA GetDlgItem GetWindowTextA SetWindowTextA GetClassInfoA IsZoomed EnumWindows IsWindowEnabled GetSysColor TranslateMessage GetWindowTextLengthA CharUpperA GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA DestroyWindow CreateDialogIndirectParamA

gdi32

ExtSelectClipRgn LineTo MoveToEx ExcludeClipRect GetClipBox ScaleWindowExtEx CreateCompatibleDC Ellipse Rectangle LPtoDP DPtoLP GetCurrentObject RoundRect GetTextExtentPoint32A GetDeviceCaps GetWindowOrgEx GetWindowExtEx GetDIBits RealizePalette SelectPalette StretchBlt CreatePalette GetSystemPaletteEntries CreateDIBitmap DeleteObject SelectClipRgn CreatePolygonRgn GetClipRgn SetStretchBltMode CreateRectRgnIndirect SetBkColor SetWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetTextColor SetROP2 SetPolyFillMode SetBkMode GetViewportExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextMetricsA BitBlt StartPage StartDocA DeleteDC EndDoc EndPage CreateFontIndirectA GetStockObject CreateSolidBrush CombineRgn CreateRectRgn PatBlt CreatePen GetObjectA SelectObject CreateBitmap RestoreDC SaveDC FillRgn CreateDCA CreateCompatibleBitmap GetPolyFillMode GetStretchBltMode GetROP2 GetBkColor GetBkMode GetTextColor CreateRoundRectRgn CreateEllipticRgn PathToRegion EndPath GetViewportOrgEx BeginPath

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegOpenKeyExA RegSetValueExA RegQueryValueA RegCreateKeyExA RegOpenKeyA RegCloseKey

shell32

ShellExecuteA Shell_NotifyIconA

ole32

CLSIDFromString OleInitialize OleUninitialize

oleaut32

LoadTypeLi RegisterTypeLi UnRegisterTypeLi

comctl32

ord17 ImageList_Destroy

wininet

InternetCloseHandle

comdlg32

ChooseColorA GetFileTitleA GetSaveFileNameA GetOpenFileNameA

generic

count=9, id=11, version=8047,

count=6, id=10, version=8047,

count=49, id=14, version=7299,

count=5, id=12, version=7291,

count=44, id=19, version=8022,

count=28, id=19, version=8034,

count=697, id=1, productName=Unmarked objects,

count=3, id=93, version=2179,

count=1, id=28, version=9178,

count=6, id=18, version=8444,

count=117, id=29, version=9178,

count=9, id=95, version=2067,

count=241, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=115, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=100, id=11, productName=VS98 (6.0) build 8168, version=8168,

count=27, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=89, productName=Unmarked objects (old),

count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,