af8fee2e6ddd7489b5bf39cd808512b5b26934995789549543fb04bf16de30d5

Sharing

Copy URL Twitter E-mail

General

Target
af8fee2e6ddd7489b5bf39cd808512b5b26934995789549543fb04bf16de30d5
Size 408KB
Sample260729-tsm4msbc59
SHA256 af8fee2e6ddd7489b5bf39cd808512b5b26934995789549543fb04bf16de30d5
MD5 f0f6f2915f5c8a7899ba2b3aff176163
SHA1 7991345fc13771ad36443afeca4dce8816a1b330
SHA512 be4b7b27d3f1d6d0f962adec1ebe975b23cc877e452ed7a2a4e620e51bea161d6e2306c6971ab309243be5fd7cb116765772161742ca6f722ba80afa30ea931d
SSDEEP 6144:yMl6Aki7Cry17i6H9jucpRszweNrZrixgSdteLWap0v:yMlD7C2si9jtQ3rZggSi
TLSH
T1FB944A15E7E844E4F5B3A33889728646DB72BC951B74C78F43A4726E2F336A04D2D722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af8fee2e6ddd7489b5bf39cd808512b5b26934995789549543fb04bf16de30d5

File Explorer

af8fee2e6ddd7489b5bf39cd808512b5b26934995789549543fb04bf16de30d5

.exe 408KB

af8fee2e6ddd7489b5bf39cd808512b5b26934995789549543fb04bf16de30d5

IMPHASH a935cfbec7a17ad1c988950249c9f413
SHA256 af8fee2e6ddd7489b5bf39cd808512b5b26934995789549543fb04bf16de30d5
MD5 f0f6f2915f5c8a7899ba2b3aff176163
SHA1 7991345fc13771ad36443afeca4dce8816a1b330
SHA512 be4b7b27d3f1d6d0f962adec1ebe975b23cc877e452ed7a2a4e620e51bea161d6e2306c6971ab309243be5fd7cb116765772161742ca6f722ba80afa30ea931d
SSDEEP 6144:yMl6Aki7Cry17i6H9jucpRszweNrZrixgSdteLWap0v:yMlD7C2si9jtQ3rZggSi
TLSH
T1FB944A15E7E844E4F5B3A33889728646DB72BC951B74C78F43A4726E2F336A04D2D722
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

133104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Steven\AdaptiveTouch\UWP_TouchpadDemo_UWPLenovo_OnlyUWP\x64\Release\Launcher.pdb

kernel32

GetFileAttributesExW SystemTimeToTzSpecificLocalTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW WriteConsoleW GetConsoleMode GetConsoleOutputCP SetFilePointerEx SetErrorMode SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW GetTimeZoneInformation LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType GetStdHandle HeapQueryInformation GetCommandLineA RtlPcToFileHeader RtlUnwindEx OutputDebugStringW VirtualProtect FileTimeToSystemTime GetCurrentProcess WriteFile FileTimeToLocalFileTime GetVolumeInformationW GetFullPathNameW FlushFileBuffers FindFirstFileW FindClose CreateFileW DeleteFileW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection CompareStringW GlobalFindAtomW GetSystemDirectoryW EncodePointer FormatMessageW MulDiv LocalFree GetCurrentProcessId GlobalAddAtomW CreateEventW CloseHandle GlobalFree GlobalUnlock FreeResource WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW GetModuleHandleW lstrcmpW lstrcmpA GlobalDeleteAtom GlobalLock GlobalAlloc LoadLibraryExW FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW GetModuleHandleExW GetModuleFileNameW InitializeCriticalSectionAndSpinCount SetLastError OutputDebugStringA GetACP WideCharToMultiByte MultiByteToWideChar GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection HeapFree GetProcAddress LoadLibraryW ExitProcess GetCommandLineW FindResourceW LoadResource LockResource GetStringTypeW SizeofResource

user32

GetWindow GetTopWindow GetClassNameW GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW PtInRect CopyRect MapWindowPoints AdjustWindowRectEx GetWindowRect GetWindowTextW RemovePropW GetPropW SetPropW GetScrollPos RedrawWindow SetForegroundWindow GetForegroundWindow UpdateWindow SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID EndDeferWindowPos DeferWindowPos BeginDeferWindowPos WinHelpW IsChild IsMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW GetSysColor ScreenToClient ClientToScreen SetWindowTextW BeginPaint ReleaseDC GetDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW GetMenuItemCount GetMenuItemID GetSubMenu UnhookWindowsHookEx GetLastActivePopup GetWindowThreadProcessId MessageBoxW SetCursor CallNextHookEx SetWindowsHookExW MonitorFromWindow GetMonitorInfoW ShowWindow GetCursorPos ValidateRect SetWindowPos LoadIconW IsIconic SendMessageW GetSystemMetrics GetClientRect DrawIcon EnableWindow UnregisterClassW SendDlgItemMessageA SetRectEmpty OffsetRect GetParent PostMessageW PostQuitMessage IsWindow DestroyWindow CreateDialogIndirectParamW EndDialog GetDlgItem GetNextDlgTabItem GetActiveWindow IsWindowEnabled SetActiveWindow GetWindowLongW GetDesktopWindow GetFocus CheckMenuItem EnableMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions SetMenuItemInfoW LoadBitmapW IsDialogMessageW SetTimer KillTimer InvalidateRect GetSysColorBrush LoadCursorW CharUpperW DestroyMenu EndPaint GetMessageW TranslateMessage GetKeyState IsWindowVisible PeekMessageW DispatchMessageW RealChildWindowFromPoint

gdi32

GetStockObject PtVisible RectVisible RestoreDC SaveDC SelectObject SetBkColor SetMapMode SetTextColor GetObjectW TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx GetClipBox Escape DeleteObject GetDeviceCaps DeleteDC CreateBitmap

advapi32

RegEnumKeyW RegOpenKeyExW RegEnumValueW RegQueryValueW RegCloseKey RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW PathIsUNCW PathStripToRootW PathFindExtensionW

ole32

CoTaskMemFree CoInitialize CoCreateInstance CoCreateGuid CoUninitialize

oleaut32

VariantChangeType VariantClear VariantInit SysAllocString SysFreeString

Name

.text

Size

221KB

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

103KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

53KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

af8fee2e6ddd7489b5bf39cd808512b5b26934995789549543fb04bf16de30d5

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

generic