ea069f35691edf6bc71584ffeab8b676b828270e872b6506adadf38b35c69d2b

Sharing

Copy URL Twitter E-mail

General

Target
ea069f35691edf6bc71584ffeab8b676b828270e872b6506adadf38b35c69d2b
Size 2.4MB
Sample260803-jfl1psej4v
SHA256 ea069f35691edf6bc71584ffeab8b676b828270e872b6506adadf38b35c69d2b
MD5 1d1caf1993b85f9d4bf9a7ec97a63b2e
SHA1 0cc128adccfafadff665358202d67afa3cfe56d8
SHA512 8845ab1ee5ad1df45008a7e2c4407f87bf3ef24600f92b387494b503898450ae2250827f482e8be22df12956a1987d1a68b895c3768ffbf48a64535587bc9001
SSDEEP 49152:OfQ36Xx/z2RvHc7dFy7lR07NEx+2jE1nnVaupCV5YiUMtYCuTzoxGH5yp0WOD:RUx/KRvHc7dA7M7NA+2ohzYV5YZMtYC
TLSH
T135B58E3276908076D66B03375A2D737D61FDAAB00B3946D7A3E41F2C3EB05C26638A57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea069f35691edf6bc71584ffeab8b676b828270e872b6506adadf38b35c69d2b

File Explorer

ea069f35691edf6bc71584ffeab8b676b828270e872b6506adadf38b35c69d2b

.dll 2.4MB

ea069f35691edf6bc71584ffeab8b676b828270e872b6506adadf38b35c69d2b

IMPHASH c7c7cf56b09e3fd36f9be406c7b4917c
SHA256 ea069f35691edf6bc71584ffeab8b676b828270e872b6506adadf38b35c69d2b
MD5 1d1caf1993b85f9d4bf9a7ec97a63b2e
SHA1 0cc128adccfafadff665358202d67afa3cfe56d8
SHA512 8845ab1ee5ad1df45008a7e2c4407f87bf3ef24600f92b387494b503898450ae2250827f482e8be22df12956a1987d1a68b895c3768ffbf48a64535587bc9001
SSDEEP 49152:OfQ36Xx/z2RvHc7dFy7lR07NEx+2jE1nnVaupCV5YiUMtYCuTzoxGH5yp0WOD:RUx/KRvHc7dA7M7NA+2ohzYV5YZMtYC
TLSH
T135B58E3276908076D66B03375A2D737D61FDAAB00B3946D7A3E41F2C3EB05C26638A57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1464013

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Code\win_software_ins\SoftDistributer\Software\FaultDetectorSolution\Release\FaultDetector.pdb

kernel32

WriteConsoleW SetCurrentDirectoryW SetEnvironmentVariableA PeekNamedPipe GetFileInformationByHandle UnregisterWaitEx QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead ReleaseSemaphore VirtualFree FreeLibraryAndExitThread GetThreadTimes SystemTimeToTzSpecificLocalTime FindFirstFileExW GetStringTypeW UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask FreeEnvironmentStringsW GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SwitchToThread SignalObjectAndWait WaitForSingleObjectEx CreateTimerQueue SetVolumeLabelW lstrlenA GetEnvironmentStringsW ReadConsoleW EnumSystemLocalesW IsValidLocale LCMapStringW GetTimeFormatW GetDateFormatW GetTimeZoneInformation SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetStdHandle GetConsoleMode GetProcessAffinityMask GetConsoleCP GetOEMCP GetACP IsValidCodePage GetFileType SetStdHandle VirtualAlloc HeapQueryInformation RtlUnwind GetCommandLineA ExitThread AreFileApisANSI GetModuleHandleExW ExitProcess IsProcessorFeaturePresent IsDebuggerPresent GetSystemTimeAsFileTime MoveFileExW FindResourceExW GetUserDefaultLCID GetDiskFreeSpaceW VirtualProtect SearchPathW GetProfileIntW GetTempPathW GetTempFileNameW VerifyVersionInfoW VerSetConditionMask lstrcpyW SetFileTime LocalFileTimeToFileTime GetFileTime GetCurrentDirectoryW MoveFileW lstrcmpiW DuplicateHandle UnlockFile SetFilePointer LockFile GetVolumeInformationW GetFullPathNameW GlobalFlags GetUserDefaultUILanguage GetLocaleInfoW CompareStringW GetCurrentThread GlobalGetAtomNameW lstrcmpA ResumeThread SetThreadPriority SetErrorMode LocalReAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection GetVersionExW FindNextFileW FindFirstFileW FindClose GlobalFindAtomW GlobalAddAtomW lstrcmpW GlobalDeleteAtom LoadLibraryExW GetModuleHandleA FreeResource GetSystemDirectoryW EncodePointer SetLastError CopyFileW MulDiv GlobalUnlock GlobalLock GlobalSize SystemTimeToFileTime K32GetModuleFileNameExW DecodePointer HeapSize RaiseException InitializeCriticalSectionEx HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter GetDiskFreeSpaceExW DeviceIoControl GetDriveTypeW GetLogicalDriveStringsW GlobalMemoryStatus GlobalMemoryStatusEx LoadLibraryA GetModuleFileNameA ProcessIdToSessionId GetSystemDirectoryA GetSystemInfo GetPrivateProfileStringW CreateDirectoryW GetFileAttributesW VirtualQuery LocalAlloc UnmapViewOfFile OpenFileMappingW MapViewOfFile CreateFileMappingW OpenEventW GetCurrentThreadId GetCurrentProcess CreateProcessW CreateSemaphoreW GetStartupInfoW TerminateProcess OpenProcess HeapFree GetProcessHeap HeapAlloc CreateThread GetModuleFileNameW LocalFree FormatMessageW GlobalFree GlobalAlloc GetWindowsDirectoryW ResetEvent OutputDebugStringA GetLocalTime SetEvent CreateEventW GetCurrentProcessId GetExitCodeProcess WaitForSingleObject GetProcessId FileTimeToSystemTime FileTimeToLocalFileTime GetFileSize FlushFileBuffers SetFileAttributesW GetFileAttributesExW FreeLibrary Process32NextW Process32FirstW GetTickCount CreateToolhelp32Snapshot DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount OutputDebugStringW MultiByteToWideChar WideCharToMultiByte GetTickCount64 GetProcAddress GetLastError LoadLibraryW GetModuleHandleW ReadFile FindResourceW LoadResource LockResource SizeofResource Sleep WriteFile GetFileSizeEx SetEndOfFile SetFilePointerEx CreateFileW DeleteFileW CloseHandle SetEnvironmentVariableW

user32

ReleaseCapture SetCapture GetNextDlgGroupItem IsIconic InvalidateRect KillTimer SetTimer DeleteMenu SetCursor ShowOwnedPopups CharUpperW DestroyIcon GetNextDlgTabItem EndDialog CreateDialogIndirectParamW IntersectRect RealChildWindowFromPoint PostQuitMessage SendDlgItemMessageA CopyImage InflateRect GetMenuItemInfoW DestroyMenu LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem LoadCursorW GetSysColorBrush GetActiveWindow TranslateMessage GetMessageW WindowFromPoint GetCursorPos FillRect ClientToScreen EndPaint BeginPaint ReleaseDC GetWindowDC GetDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW GetMonitorInfoW MonitorFromWindow UnionRect IsMenu UpdateLayeredWindow MonitorFromPoint DrawFocusRect OemToCharBuffA CharToOemBuffA SendMessageW WinHelpW GetScrollInfo SetScrollInfo LoadIconW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetLastActivePopup GetTopWindow GetClassLongW PtInRect EqualRect CopyRect GetSysColor MapWindowPoints ScreenToClient AdjustWindowRectEx RemovePropW GetPropW SetPropW LoadAcceleratorsW GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow ValidateRect SetForegroundWindow SetActiveWindow UpdateWindow TrackPopupMenu SetMenu GetMenu GetCapture GetKeyState IsWindowVisible EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement DestroyWindow IsChild CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW SetRectEmpty OffsetRect IsRectEmpty LoadImageW DrawIconEx GetIconInfo MessageBeep GetAsyncKeyState EnableScrollBar HideCaret InvertRect NotifyWinEvent CreatePopupMenu GetMenuDefaultItem MapVirtualKeyW LoadMenuW SetLayeredWindowAttributes EnumDisplayMonitors OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DrawStateW DrawEdge DrawFrameControl BringWindowToTop SetWindowRgn GetWindowThreadProcessId GetParent GetWindow SystemParametersInfoW GetWindowRect GetClientRect GetDesktopWindow GetClassNameW GetWindowTextW SetWindowPos MessageBoxW GetForegroundWindow GetSystemMetrics wsprintfA UnregisterClassW GetMenuStringW GetMenuState GetSubMenu GetMenuItemID GetMenuItemCount InsertMenuW AppendMenuW RemoveMenu IsWindow ShowWindow MoveWindow GetDlgItem CheckDlgButton GetDlgCtrlID SetFocus GetFocus EnableWindow TranslateAcceleratorW InsertMenuItemW UnpackDDElParam ReuseDDElParam GetKeyNameTextW TrackMouseEvent GetComboBoxInfo IsZoomed IsWindowEnabled SetWindowTextW GetWindowTextLengthW GetWindowLongW SetWindowLongW IsDialogMessageW RegisterWindowMessageW DispatchMessageW PeekMessageW GetMessagePos GetMessageTime PostMessageW GetSystemMenu PostThreadMessageW WaitMessage GetKeyboardLayout IsCharLowerW MapVirtualKeyExW ToUnicodeEx GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable CopyAcceleratorTableW SetCursorPos SetRect SetParent LockWindowUpdate SetClassLongW GetDoubleClickTime CopyIcon SetMenuDefaultItem ModifyMenuW RegisterClipboardFormatW CharUpperBuffW FrameRect DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel IsClipboardFormatAvailable GetUpdateRect SubtractRect CreateMenu MapDialogRect DestroyCursor GetWindowRgn DrawIcon ShowScrollBar

gdi32

MoveToEx TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx GetTextExtentPoint32W CombineRgn CreateRectRgnIndirect PatBlt SetRectRgn DPtoLP GetTextMetricsW CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette GetBkColor CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo SetPixel StretchBlt CreateDIBSection SetDIBColorTable CreateEllipticRgn GetTextColor CreatePolygonRgn Polygon Polyline Rectangle EnumFontFamiliesExW GetRgnBox OffsetRgn CreateRoundRectRgn RoundRect FrameRgn PtInRegion SetPixelV ExtFloodFill SetPaletteEntries FillRgn GetBoundsRect GetWindowOrgEx LPtoDP GetViewportOrgEx GetTextFaceW SetTextAlign SetROP2 SetPolyFillMode GetLayout SetLayout SetMapMode SetBkMode SelectPalette SelectObject ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible PtVisible IntersectClipRect GetWindowExtEx GetViewportExtEx GetStockObject GetPixel GetObjectType GetClipBox ExcludeClipRect Escape DeleteObject CreateSolidBrush CreateRectRgn CreatePatternBrush CreateHatchBrush CreateBitmap BitBlt SetTextColor SetBkColor GetDeviceCaps CreateFontIndirectW GetObjectW CreateCompatibleDC CreatePen DeleteDC CopyMetaFileW Ellipse LineTo CreateDCW

msimg32

AlphaBlend TransparentBlt

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegQueryValueExW RegCloseKey RegCreateKeyExW RegSetValueExW RegDeleteKeyW ConvertSidToStringSidW LookupAccountNameW StartServiceW RegSetKeyValueA RegCreateKeyExA SetSecurityDescriptorDacl InitializeSecurityDescriptor LookupAccountSidW RegOpenKeyExW GetTokenInformation DuplicateTokenEx OpenProcessToken CreateProcessAsUserW QueryServiceStatusEx RegDeleteValueW SetServiceStatus QueryServiceStatus ControlService OpenServiceW CloseServiceHandle OpenSCManagerW RegEnumKeyExW

shell32

SHGetDesktopFolder SHGetFolderPathW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteA SHGetFolderPathA SHAppBarMessage DragFinish DragQueryFileW ShellExecuteExW SHGetSpecialFolderLocation ShellExecuteW SHGetFileInfoW

shlwapi

PathFindExtensionW PathFindFileNameW PathRemoveFileSpecW PathIsUNCW PathStripToRootW StrFormatKBSizeW

uxtheme

GetThemePartSize GetThemeSysColor IsThemeBackgroundPartiallyTransparent IsAppThemed GetCurrentThemeName GetThemeColor DrawThemeBackground CloseThemeData OpenThemeData DrawThemeParentBackground DrawThemeText GetWindowTheme

ole32

OleTranslateAccelerator IsAccelerator OleGetClipboard CoLockObjectExternal RegisterDragDrop RevokeDragDrop OleCreateMenuDescriptor OleDestroyMenuDescriptor OleLockRunning DoDragDrop CreateStreamOnHGlobal CoDisconnectObject ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc CoSetProxyBlanket CoInitializeSecurity CoInitializeEx CoCreateInstance CoUninitialize CoInitialize

oleaut32

SysAllocString VariantInit VariantCopy VarBstrFromDate LoadTypeLi SysFreeString SysStringLen VariantChangeType VariantClear SysAllocStringLen VariantTimeToSystemTime SystemTimeToVariantTime

gdiplus

GdipDrawImageI GdipCreateFromHDC GdipSetInterpolationMode GdipDrawImageRectI GdiplusShutdown GdipAlloc GdipFree GdiplusStartup GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCreateBitmapFromHBITMAP

iphlpapi

GetPerAdapterInfo GetAdaptersAddresses GetAdaptersInfo

crypt32

CryptStringToBinaryA

ws2_32

WSAEnumNetworkEvents WSAWaitForMultipleEvents sendto WSAEventSelect WSASocketW WSACreateEvent WSAAddressToStringA recvfrom getsockopt WSACleanup select connect inet_addr htons closesocket ioctlsocket WSAGetLastError socket getaddrinfo freeaddrinfo WSAStartup inet_ntoa

wtsapi32

WTSEnumerateProcessesA WTSFreeMemoryExW WTSEnumerateSessionsExW WTSFreeMemory WTSEnumerateProcessesW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

pdh

PdhOpenQueryW PdhCalculateCounterFromRawValue PdhGetRawCounterValue PdhAddCounterW PdhCloseQuery PdhGetFormattedCounterValue PdhCollectQueryData PdhAddEnglishCounterW

wevtapi

EvtNext EvtClose EvtQuery

oleacc

LresultFromObject AccessibleObjectFromWindow CreateStdAccessibleObject

imm32

ImmGetOpenStatus ImmReleaseContext ImmGetContext

winmm

PlaySoundW

generic

count=9, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=13, id=225, productName=VS2013 UPD5 build 40629, version=40629,

count=13, id=206, version=65501,

count=1, id=207, version=65501,

count=3, id=208, version=65501,

count=51, id=203, version=65501,

count=940, id=1, productName=Unmarked objects,

count=1, id=199, version=41118,

count=138, id=225, productName=VS2013 build 21005, version=21005,

count=49, id=223, productName=VS2013 build 21005, version=21005,

count=285, id=224, productName=VS2013 build 21005, version=21005,

count=320, id=225, version=20806,

count=31, id=229, version=40629,

count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=1, id=151,

count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,