Homedale[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Homedale.exe
Size 2.0MB
Sample260722-2337lsdc52
SHA256 ec15a59be76eb9edce55e804d683caf169314abcbf968588ded4bc9b2113929c
MD5 91b17d2cacc6a217fb1fbad7551427fb
SHA1 1cca9e658f9eae277ae9d23396d0ed4f51782231
SHA512 9defebc3f6aefb1546966739ffc362229dcd6f913a216a05897a96733cd87cbea8bd2aa2f56c00c222b54fdd6276785b4868d0f2a769a23f1897d7405a2c835a
SSDEEP 24576:OyVW6uHV2ydXP3Zdn2xlBn/eWdw8Yhd3XWJtKFMUaNUz4jQy7pJb0Y:r22y1PznClUWK8UVXQtWEQepJbF
TLSH
T13E958D01F2E642B5E1B39534C8BA6776DA757C504B318BCB1354FA2D1D33AE0AA39336
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Homedale.exe

File Explorer

Homedale.exe

.exe 2.0MB

Homedale.exe

IMPHASH b6a4d0f61de8175730eadf797e69caf1
SHA256 ec15a59be76eb9edce55e804d683caf169314abcbf968588ded4bc9b2113929c
MD5 91b17d2cacc6a217fb1fbad7551427fb
SHA1 1cca9e658f9eae277ae9d23396d0ed4f51782231
SHA512 9defebc3f6aefb1546966739ffc362229dcd6f913a216a05897a96733cd87cbea8bd2aa2f56c00c222b54fdd6276785b4868d0f2a769a23f1897d7405a2c835a
SSDEEP 24576:OyVW6uHV2ydXP3Zdn2xlBn/eWdw8Yhd3XWJtKFMUaNUz4jQy7pJb0Y:r22y1PznClUWK8UVXQtWEQepJbF
TLSH
T13E958D01F2E642B5E1B39534C8BA6776DA757C504B318BCB1354FA2D1D33AE0AA39336
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

420707

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetLocalTime LocalFileTimeToFileTime GetDateFormatW GetTimeFormatW GetCommandLineW CreateThread TerminateThread GetFileAttributesW SetErrorMode GetFileSize FindClose FindFirstFileW CreateFileW GetCurrentDirectoryW GetTempPathW ExpandEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW GetTempFileNameW SetFileAttributesW CreateDirectoryW MoveFileW FindNextFileW WritePrivateProfileStringW GetShortPathNameW MoveFileExW RemoveDirectoryW DeleteFileW ReadFile WriteFile FlushFileBuffers UnmapViewOfFile SetFilePointer GetFileInformationByHandle DeviceIoControl SetEndOfFile MapViewOfFile CreateFileMappingW OpenFileMappingW SetFileTime GetModuleFileNameW LocalFree LocalAlloc SizeofResource MulDiv LoadLibraryW GetSystemTime GetProcAddress GetSystemDefaultLangID GetUserDefaultLangID InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetCommTimeouts SetupComm GetCommTimeouts GetCommState SetCommState OutputDebugStringW SetLastError GlobalFree GlobalUnlock GlobalLock GlobalAlloc GetVersionExW SetUnhandledExceptionFilter GetThreadSelectorEntry GetCurrentProcessId GetVersionExA CreateEventW SetEvent ResetEvent WaitForMultipleObjectsEx GetPrivateProfileStringW GetPrivateProfileStructW WritePrivateProfileStructW QueryPerformanceFrequency QueryPerformanceCounter GetVolumeInformationW GetEnvironmentVariableW GetModuleFileNameA lstrcpyA GetTimeZoneInformation GetVersion SetFileAttributesA CreateFileA GetVolumeInformationA GetFullPathNameA FindFirstFileA FindNextFileA SetVolumeLabelA lstrlenA GetDriveTypeA GetLocaleInfoA GetFileAttributesA GetFileTime FileTimeToDosDateTime RtlUnwind HeapFree HeapAlloc GetModuleHandleA GetStartupInfoA GetCommandLineA ExitProcess HeapReAlloc RaiseException TlsSetValue TlsAlloc TlsGetValue GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr HeapSize SetHandleCount GetStdHandle GetFileType UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW CompareStringA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetCPInfo GetACP GetOEMCP IsBadReadPtr IsBadCodePtr LoadLibraryA SetStdHandle SetEnvironmentVariableA SystemTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime FindResourceExW LoadResource LockResource GetLocaleInfoW FormatMessageW GetCurrentThreadId GetTickCount GetCurrentProcess TerminateProcess GetExitCodeProcess CreateProcessW CloseHandle InterlockedIncrement InterlockedDecrement WideCharToMultiByte GetThreadLocale GetStringTypeExW CompareStringW MultiByteToWideChar GetLastError GetProcessHeap DeleteFileA CreateDirectoryA GetCurrentDirectoryA FreeConsole Sleep GetModuleHandleW lstrlenW FreeLibrary

user32

SetMenuDefaultItem InsertMenuItemW DeleteMenu GetMenuItemInfoW SetMenu GetMenuItemCount SetMenuInfo ReleaseDC GetDC GetDlgCtrlID OffsetRect GetWindowDC FindWindowExW DrawFocusRect DrawFrameControl IsZoomed UnhookWindowsHookEx RegisterClassW DrawIconEx RegisterWindowMessageW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard AdjustWindowRectEx LoadIconW MsgWaitForMultipleObjectsEx DispatchMessageW TranslateMessage MsgWaitForMultipleObjects LoadBitmapW WindowFromPoint RegisterClipboardFormatW CreateIconIndirect DrawEdge GetWindowTextLengthW CopyRect DrawMenuBar RemoveMenu LoadAcceleratorsW IsDialogMessageW TranslateAcceleratorW TranslateMDISysAccel GetMessageW DefFrameProcW OemToCharA CharToOemA CreateDialogIndirectParamW CreateDialogParamW DialogBoxIndirectParamW DialogBoxParamW LoadStringW SetClassLongW SetMenuItemInfoW GetForegroundWindow GetFocus IsWindow SetWindowPlacement GetWindowPlacement MessageBoxW PeekMessageW PostQuitMessage GetParent ScreenToClient IsDlgButtonChecked CheckDlgButton IsWindowEnabled EnableWindow GetDlgItem MapWindowPoints GetDlgItemInt GetDlgItemTextW SetDlgItemInt SendDlgItemMessageW SetCursor SetWindowTextW GetSystemMetrics LoadImageW SetWindowLongW GetSysColor GetKeyState SendMessageW DrawTextW SetWindowPos DestroyIcon CharNextW InvalidateRect MapDialogRect DefWindowProcW EndPaint FrameRect GetSysColorBrush BeginPaint GetWindowLongW GetSubMenu RemovePropW SetForegroundWindow PostMessageW SystemParametersInfoW GetWindowRect DrawAnimatedRects IsWindowVisible MoveWindow SetFocus KillTimer SetTimer GetClientRect ShowWindow UpdateWindow LoadCursorW RegisterClassExW CreateWindowExW CheckMenuItem EnableMenuItem GetMenuState TrackPopupMenu DestroyMenu CreatePopupMenu GetMenu LoadMenuW LoadMenuIndirectW CallWindowProcW GetPropW SetPropW PtInRect GetMessagePos GetDoubleClickTime GetWindowTextW GetCapture ReleaseCapture InflateRect SetCapture GetCursorPos FillRect RedrawWindow EndDialog DestroyWindow SetDlgItemTextW

gdi32

GetDIBits SetTextColor PolyPolyline CreatePen SelectObject Polyline DeleteObject RestoreDC GetTextMetricsW GetTextExtentPoint32W RoundRect SetPolyFillMode GetTextColor CreateFontW GetTextFaceW SaveDC CreateFontIndirectW GetObjectW EnumFontFamiliesExW DeleteDC CreateCompatibleBitmap CreateDIBSection CreateCompatibleDC BitBlt StretchBlt SetStretchBltMode Ellipse GetPixel GetDeviceCaps TextOutW GetBkColor Rectangle SetROP2 CreateHatchBrush Polygon ExcludeClipRect CreateSolidBrush SetBkColor SetBkMode GetStockObject

comctl32

ImageList_Destroy ImageList_GetIcon ImageList_GetImageCount ImageList_DrawEx ImageList_Draw ord17 ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Create

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

winmm

timeGetTime PlaySoundW

comdlg32

GetOpenFileNameW CommDlgExtendedError GetSaveFileNameW

advapi32

QueryServiceStatus RegCreateKeyExW RegSetKeySecurity RegCloseKey EnumDependentServicesW StartServiceW OpenServiceW ControlService OpenSCManagerW CloseServiceHandle GetUserNameW RegOpenKeyExW RegQueryValueExW RegCreateKeyW CryptDecrypt CryptDeriveKey CryptEncrypt CryptDestroyKey CryptCreateHash CryptHashData CryptDestroyHash CryptAcquireContextW CryptReleaseContext RegEnumValueW RegEnumKeyExW RegDeleteKeyW RegSetValueExW RegDeleteValueW

shell32

Shell_NotifyIconW SHGetFileInfoW SHGetMalloc SHGetSpecialFolderLocation SHGetPathFromIDListW ShellExecuteExW DragQueryFileW

ole32

CLSIDFromProgID OleRun CLSIDFromString StringFromGUID2 CoTaskMemAlloc CoInitialize ReleaseStgMedium CreateStreamOnHGlobal CoUninitialize OleSave OleSetMenuDescriptor OleSetContainedObject CoCreateInstance CoCreateGuid CoTaskMemFree OleDraw

oleaut32

SysFreeString VariantClear SafeArrayPtrOfIndex VariantInit SafeArrayDestroy SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreate SysAllocString

ws2_32

WSACleanup WSAStartup inet_ntoa WSAAddressToStringW