f84848952221a8e3447fc56f3cd04b676b6cca928455e57d135776c72e1a5a63

Sharing

Copy URL Twitter E-mail

General

Target
f84848952221a8e3447fc56f3cd04b676b6cca928455e57d135776c72e1a5a63
Size 326KB
Sample260709-dslb2sc13z
SHA256 f84848952221a8e3447fc56f3cd04b676b6cca928455e57d135776c72e1a5a63
MD5 784af57c0db9e1aec07611c1ee16adb8
SHA1 20217313cbea29a8ee7304fd3a77c95c6c0251de
SHA512 458048dfab163dbc42cbccbe882a0ba6cd49718766f1b0d5f50c0497b1ea36119031589d454a2040c4fc052df7e7b5db1afb4682b56dd277db04d636c6609a87
SSDEEP 6144:pTxt0qTqX4cqhLm4+pOSy3c378nGJQ+9qxMsa8n4nfm:laX4cqhLSo6UG5otrnGm
TLSH
T13A64AF99F1D844FCC067A038916AB70FF93638A4075456DB73E855183FA33E4AABB712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f84848952221a8e3447fc56f3cd04b676b6cca928455e57d135776c72e1a5a63

File Explorer

f84848952221a8e3447fc56f3cd04b676b6cca928455e57d135776c72e1a5a63

.exe 326KB

f84848952221a8e3447fc56f3cd04b676b6cca928455e57d135776c72e1a5a63

IMPHASH 00a26e8189fdf687b1cd07dcae6c14be
SHA256 f84848952221a8e3447fc56f3cd04b676b6cca928455e57d135776c72e1a5a63
MD5 784af57c0db9e1aec07611c1ee16adb8
SHA1 20217313cbea29a8ee7304fd3a77c95c6c0251de
SHA512 458048dfab163dbc42cbccbe882a0ba6cd49718766f1b0d5f50c0497b1ea36119031589d454a2040c4fc052df7e7b5db1afb4682b56dd277db04d636c6609a87
SSDEEP 6144:pTxt0qTqX4cqhLm4+pOSy3c378nGJQ+9qxMsa8n4nfm:laX4cqhLSo6UG5otrnGm
TLSH
T13A64AF99F1D844FCC067A038916AB70FF93638A4075456DB73E855183FA33E4AABB712
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

258064

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

opengl32

wglCreateContext glClear glClearColor wglMakeCurrent glViewport

kernel32

QueryPerformanceFrequency QueryPerformanceCounter GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock Sleep GetModuleHandleW AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetLocaleInfoA RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW MultiByteToWideChar FreeLibrary GetProcAddress RtlCaptureContext LoadLibraryA ReleaseSRWLockExclusive

user32

CreateWindowExW DestroyWindow DefWindowProcW UnregisterClassW DispatchMessageW TranslateMessage PostQuitMessage UpdateWindow IsIconic OpenClipboard CloseClipboard PeekMessageW ShowWindow EmptyClipboard GetClipboardData GetCursorPos ReleaseDC SetCursorPos ReleaseCapture SetClipboardData GetKeyState GetMessageExtraInfo GetDC ScreenToClient RegisterClassExW IsWindowUnicode GetClientRect SetCursor SetCapture LoadCursorW GetForegroundWindow GetKeyboardLayout TrackMouseEvent ClientToScreen GetCapture

gdi32

SetPixelFormat SwapBuffers ChoosePixelFormat

shell32

ShellExecuteA

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset __current_exception_context __current_exception __C_specific_handler __std_exception_copy __std_exception_destroy strstr memchr memcmp memcpy memmove _CxxThrowException __std_terminate

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fseek fclose fflush ftell __stdio_common_vsscanf __p__commode __stdio_common_vfprintf __stdio_common_vsprintf _set_fmode fwrite _wfopen fread

api-ms-win-crt-string-l1-1-0

strncmp strcmp strncpy

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc _set_new_mode

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _register_onexit_function _get_narrow_winmain_command_line _crt_atexit _configure_narrow_argv terminate _register_thread_local_exe_atexit_callback _c_exit _cexit _exit exit _invalid_parameter_noinfo_noreturn _initterm_e _set_app_type _initterm _seh_filter_exe _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr sqrtf ceilf cosf fmodf acosf atan2 sinf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

f84848952221a8e3447fc56f3cd04b676b6cca928455e57d135776c72e1a5a63

opengl32

kernel32

user32

gdi32

shell32

msvcp140

imm32

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic