7bc9aa4ac4f3433ec062203de9274ffe28b3dc2171e2d3d5c6a9af95163b0cc2

Sharing

Copy URL Twitter E-mail

General

Target
7bc9aa4ac4f3433ec062203de9274ffe28b3dc2171e2d3d5c6a9af95163b0cc2
Size 432KB
Sample260722-bc12fstvbx
SHA256 7bc9aa4ac4f3433ec062203de9274ffe28b3dc2171e2d3d5c6a9af95163b0cc2
MD5 11eea6dd4b31da138fc7f989982c4ee5
SHA1 8e167ae487ec8f56927d3e32e5f59808aa05896e
SHA512 b6d91e8a86f0f04f0646fe3fe84ad4019e0fa9da2c409688d8821fd3991167ffd867e0b247df95549326b03a6f8023e54ddc89a18a22cd1d18ab188e1a557b97
SSDEEP 6144:HUio9KB67THYfEKjYnkoDPXDjXTxcsVDSeavDiHXQEyUdTPm:HUVi1YnHLxc0DyvgXQ8dTPm
TLSH
T1B6942C2331C0C121F4625533697689A9E5397DB88F2089CBA38C7D9E6DB53C17736B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bc9aa4ac4f3433ec062203de9274ffe28b3dc2171e2d3d5c6a9af95163b0cc2

File Explorer

7bc9aa4ac4f3433ec062203de9274ffe28b3dc2171e2d3d5c6a9af95163b0cc2

.exe 432KB

7bc9aa4ac4f3433ec062203de9274ffe28b3dc2171e2d3d5c6a9af95163b0cc2

IMPHASH 1bb54f07b09eeeec0a40d6be8fdf34ea
SHA256 7bc9aa4ac4f3433ec062203de9274ffe28b3dc2171e2d3d5c6a9af95163b0cc2
MD5 11eea6dd4b31da138fc7f989982c4ee5
SHA1 8e167ae487ec8f56927d3e32e5f59808aa05896e
SHA512 b6d91e8a86f0f04f0646fe3fe84ad4019e0fa9da2c409688d8821fd3991167ffd867e0b247df95549326b03a6f8023e54ddc89a18a22cd1d18ab188e1a557b97
SSDEEP 6144:HUio9KB67THYfEKjYnkoDPXDjXTxcsVDSeavDiHXQEyUdTPm:HUVi1YnHLxc0DyvgXQ8dTPm
TLSH
T1B6942C2331C0C121F4625533697689A9E5397DB88F2089CBA38C7D9E6DB53C17736B3A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

78534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\V3DDK_DIR\spacedeskServer\trunk\Release\spacedeskServiceTray.pdb

iphlpapi

GetAdaptersInfo

crypt32

CryptMsgClose CertGetNameStringW CryptQueryObject CryptMsgGetParam CertFreeCertificateContext CertCloseStore CertFindCertificateInStore

kernel32

LocalFree LocalAlloc HeapAlloc GetProcessHeap HeapFree GetModuleHandleW GetComputerNameW CreateFileW GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapSize SetFilePointerEx SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetFileType GetStdHandle GetModuleHandleExW ExitProcess TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RaiseException RtlUnwind InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW SetEvent CreateEventW LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection CreateThread CloseHandle ConnectNamedPipe CreateNamedPipeW ReadFile WriteFile GetModuleFileNameW GetProcAddress GetLastError LoadLibraryExW GetLocalTime OutputDebugStringW FreeLibrary IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess LoadLibraryW WinExec MultiByteToWideChar WideCharToMultiByte GetStringTypeW EncodePointer DecodePointer InitializeCriticalSectionEx LCMapStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess WriteConsoleW

user32

PostQuitMessage IsIconic IsWindowVisible GetMenu RegisterClassExW RegisterWindowMessageW SetWindowPos GetWindowRect SetDlgItemTextA GetDlgItem GetDlgCtrlID FillRect GetClientRect SendDlgItemMessageW SetDlgItemTextW CreateDialogParamW UpdateWindow DestroyWindow CreateWindowExW RegisterClassW LoadCursorW GetSystemMetrics MessageBoxW InvalidateRect CreatePopupMenu DefWindowProcW ShowWindow DestroyMenu PostMessageW TrackPopupMenu SetForegroundWindow GetMonitorInfoW MonitorFromRect GetDisplayConfigBufferSizes QueryDisplayConfig SetDisplayConfig DisplayConfigGetDeviceInfo GetDC LoadImageW DispatchMessageW TranslateMessage TranslateAcceleratorW GetMessageW LoadAcceleratorsW SendMessageW FindWindowW GetCursorPos SendInput LoadIconW LoadStringW InsertMenuItemW

gdi32

GetDIBits CreateSolidBrush GetStockObject SetBkColor DeleteObject CreateFontW

advapi32

QueryServiceStatusEx SetSecurityDescriptorDacl RegOpenKeyExW RegQueryValueExW RegCloseKey RegSetValueExW RegCreateKeyExW StartServiceW OpenSCManagerW OpenServiceW CloseServiceHandle InitializeSecurityDescriptor

shell32

ShellExecuteW Shell_NotifyIconW

comctl32

InitCommonControlsEx

Sharing

General

Malware Config

Signatures

File Explorer

7bc9aa4ac4f3433ec062203de9274ffe28b3dc2171e2d3d5c6a9af95163b0cc2

iphlpapi

crypt32

kernel32

user32

gdi32

advapi32

shell32

comctl32

generic