314fbfbcfbdcce9d489e594cb6b148e2577dc7f18f278bf9ed59a8184ed3abb6

Sharing

Copy URL Twitter E-mail

General

Target
314fbfbcfbdcce9d489e594cb6b148e2577dc7f18f278bf9ed59a8184ed3abb6
Size 2.1MB
Sample260803-jgchnaea65
SHA256 314fbfbcfbdcce9d489e594cb6b148e2577dc7f18f278bf9ed59a8184ed3abb6
MD5 87690859b4b252983f3766f64c20ca11
SHA1 1e0228e977a7685f51b326652def8b67e3b0cf84
SHA512 c7ad4751fe8e45475df0281adbae36eb00d93792e65f5fc0bba20a88e8586c9befbb5512f78c75bd27d8adbe91699d43e5d706219a72315b1646f4156338b360
SSDEEP 49152:XsugqP81YiBcaaZY38nvUiH4TbsLzzZwETBAP2oQVRP0ThoaQlLpQQ:cq01YwcaGOwUiH4TEX2P2oQVRP5
TLSH
T102A59D227A94807BD67B0335590D736C66FEA5B00BF512D3F3E48E2D29B04C3A679693
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
314fbfbcfbdcce9d489e594cb6b148e2577dc7f18f278bf9ed59a8184ed3abb6

File Explorer

314fbfbcfbdcce9d489e594cb6b148e2577dc7f18f278bf9ed59a8184ed3abb6

.dll 2.1MB

314fbfbcfbdcce9d489e594cb6b148e2577dc7f18f278bf9ed59a8184ed3abb6

IMPHASH 79ab520b876bad3fd1d458451271273a
SHA256 314fbfbcfbdcce9d489e594cb6b148e2577dc7f18f278bf9ed59a8184ed3abb6
MD5 87690859b4b252983f3766f64c20ca11
SHA1 1e0228e977a7685f51b326652def8b67e3b0cf84
SHA512 c7ad4751fe8e45475df0281adbae36eb00d93792e65f5fc0bba20a88e8586c9befbb5512f78c75bd27d8adbe91699d43e5d706219a72315b1646f4156338b360
SSDEEP 49152:XsugqP81YiBcaaZY38nvUiH4TbsLzzZwETBAP2oQVRP0ThoaQlLpQQ:cq01YwcaGOwUiH4TEX2P2oQVRP5
TLSH
T102A59D227A94807BD67B0335590D736C66FEA5B00BF512D3F3E48E2D29B04C3A679693
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1342802

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Code\software_new\SoftDistributer\Software\sandbox\SandboxExplorer\Release\SandboxFileFlowExtension.pdb

kernel32

WriteConsoleW GetDriveTypeW SetCurrentDirectoryW SetEnvironmentVariableA FreeEnvironmentStringsW GetFileInformationByHandle SystemTimeToTzSpecificLocalTime FindFirstFileExW SetEnvironmentVariableW SetVolumeLabelW GetEnvironmentStringsW QueryPerformanceCounter GetModuleFileNameA ReadConsoleW GetStdHandle GetConsoleMode GetConsoleCP GetStringTypeW EnumSystemLocalesW IsValidLocale LCMapStringW GetTimeZoneInformation SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetOEMCP GetACP IsValidCodePage VirtualAlloc HeapQueryInformation GetFileType SetStdHandle RtlUnwind GetCommandLineA ExitThread AreFileApisANSI GetModuleHandleExW ExitProcess IsProcessorFeaturePresent IsDebuggerPresent GetSystemTimeAsFileTime MoveFileExW FindResourceExW GetUserDefaultLCID GetDiskFreeSpaceW VirtualProtect SearchPathW GetProfileIntW GetTempPathW GetTempFileNameW VerifyVersionInfoW VerSetConditionMask lstrcpyW GetCurrentDirectoryW GlobalFlags GetUserDefaultUILanguage GetLocaleInfoW CompareStringW ResumeThread SetThreadPriority MoveFileW lstrcmpiW DuplicateHandle UnlockFile SetFilePointer LockFile GetVolumeInformationW GetFullPathNameW SetFileTime LocalFileTimeToFileTime GetFileTime SystemTimeToFileTime GlobalGetAtomNameW lstrcmpA LocalReAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection GetVersionExW FindNextFileW FindFirstFileW FindClose GlobalFindAtomW GlobalAddAtomW LoadLibraryA lstrcmpW GlobalDeleteAtom GetModuleHandleA FreeResource GetSystemDirectoryW EncodePointer LoadLibraryExW SetLastError CopyFileW MulDiv GlobalUnlock GlobalLock GlobalSize GetFileAttributesA DecodePointer DisableThreadLibraryCalls HeapSize RaiseException lstrlenW InitializeCriticalSectionEx HeapReAlloc GetCommandLineW GetSystemInfo GetPrivateProfileStringW CreateDirectoryW GetFileAttributesW VirtualQuery LocalAlloc UnmapViewOfFile MapViewOfFile CreateFileMappingW GetCurrentThreadId GetCurrentProcess CreateProcessW CreateSemaphoreW GetStartupInfoW TerminateProcess OpenProcess HeapFree GetProcessHeap HeapAlloc CreateThread GetModuleFileNameW LocalFree FormatMessageW GlobalFree GlobalAlloc GetWindowsDirectoryW OutputDebugStringA GetLocalTime SetEvent CreateEventW GetCurrentProcessId WaitForSingleObject FileTimeToSystemTime FileTimeToLocalFileTime GetFileSize FlushFileBuffers SetFileAttributesW GetFileAttributesExW FreeLibrary DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount OutputDebugStringW MultiByteToWideChar WideCharToMultiByte GetTickCount64 GetProcAddress GetLastError LoadLibraryW GetTickCount GetModuleHandleW ReadFile FindResourceW LoadResource LockResource SizeofResource Sleep WriteFile GetFileSizeEx SetEndOfFile SetFilePointerEx CreateFileW DeleteFileW CloseHandle PeekNamedPipe

user32

SetRectEmpty DrawFocusRect ReleaseCapture SetCapture GetNextDlgGroupItem IsIconic InvalidateRect KillTimer SetTimer DeleteMenu SetCursor ShowOwnedPopups DestroyIcon GetNextDlgTabItem EndDialog CreateDialogIndirectParamW IntersectRect RealChildWindowFromPoint PostQuitMessage GetActiveWindow TranslateMessage GetMessageW SendDlgItemMessageA CopyImage InflateRect GetMenuItemInfoW DestroyMenu LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem CharUpperW LoadCursorW GetSysColorBrush WindowFromPoint GetCursorPos FillRect ClientToScreen EndPaint BeginPaint ReleaseDC GetWindowDC GetDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo LoadIconW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetLastActivePopup GetTopWindow GetClassLongW PtInRect EqualRect CopyRect GetSysColor MapWindowPoints ScreenToClient AdjustWindowRectEx RemovePropW GetPropW OffsetRect ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow BringWindowToTop SetForegroundWindow SetActiveWindow UpdateWindow TrackPopupMenu SetMenu GetMenu GetCapture GetKeyState IsWindowVisible LoadAcceleratorsW TranslateAcceleratorW InsertMenuItemW CharToOemBuffA SendMessageW GetWindowThreadProcessId GetParent GetWindow EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement DestroyWindow IsChild CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW PostMessageW GetMessageTime GetMessagePos PeekMessageW DispatchMessageW RegisterWindowMessageW IsDialogMessageW SetWindowLongW GetWindowLongW GetWindowTextLengthW SetWindowTextW IsWindowEnabled EnableWindow GetFocus SetFocus GetDlgCtrlID CheckDlgButton GetDlgItem MoveWindow ShowWindow IsWindow RemoveMenu AppendMenuW GetMenuItemCount GetMenuItemID IsRectEmpty LoadImageW DrawIconEx GetIconInfo MessageBeep GetAsyncKeyState EnableScrollBar HideCaret InvertRect NotifyWinEvent CreatePopupMenu GetMenuDefaultItem MapVirtualKeyW LoadMenuW SetLayeredWindowAttributes EnumDisplayMonitors OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DrawStateW DrawEdge DrawFrameControl SetWindowRgn UnionRect IsMenu UpdateLayeredWindow SetPropW MonitorFromPoint SystemParametersInfoW OemToCharBuffA GetWindowRect GetClientRect GetDesktopWindow GetClassNameW GetWindowTextW UnpackDDElParam ReuseDDElParam GetKeyNameTextW TrackMouseEvent GetComboBoxInfo IsZoomed SetWindowPos MessageBoxW GetForegroundWindow GetSystemMetrics InsertMenuW CreateMenu GetMenuStringW GetMenuState GetSubMenu GetSystemMenu PostThreadMessageW WaitMessage GetKeyboardLayout IsCharLowerW MapVirtualKeyExW ToUnicodeEx GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable CopyAcceleratorTableW DrawIcon GetWindowRgn DestroyCursor MapDialogRect SubtractRect GetUpdateRect IsClipboardFormatAvailable TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar FrameRect CharUpperBuffW RegisterClipboardFormatW ModifyMenuW SetMenuDefaultItem CopyIcon GetDoubleClickTime SetClassLongW LockWindowUpdate SetParent SetRect ValidateRect SetCursorPos

gdi32

MoveToEx TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx GetTextExtentPoint32W CombineRgn CreateRectRgnIndirect PatBlt SetRectRgn DPtoLP GetTextMetricsW CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette GetBkColor CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo SetPixel StretchBlt CreateDIBSection SetDIBColorTable Ellipse GetTextColor CreatePolygonRgn Polygon Polyline Rectangle EnumFontFamiliesExW GetRgnBox OffsetRgn CreateRoundRectRgn RoundRect FrameRgn PtInRegion SetPixelV ExtFloodFill SetPaletteEntries FillRgn GetBoundsRect GetWindowOrgEx LPtoDP GetViewportOrgEx GetTextFaceW SetTextAlign SetROP2 SetPolyFillMode GetLayout SetLayout SetMapMode SetBkMode SelectPalette SelectObject ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible PtVisible LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetStockObject GetPixel GetObjectType GetClipBox ExcludeClipRect Escape CreateSolidBrush CreateRectRgn CreatePatternBrush CreateHatchBrush CreateBitmap BitBlt SetTextColor SetBkColor GetDeviceCaps CreateDCW CopyMetaFileW DeleteDC CreatePen CreateCompatibleDC GetObjectW CreateEllipticRgn DeleteObject CreateFontIndirectW

msimg32

AlphaBlend TransparentBlt

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

OpenProcessToken RegQueryValueExW RegCloseKey RegCreateKeyExW RegSetValueExW RegDeleteKeyW RegEnumKeyExW SetSecurityDescriptorDacl InitializeSecurityDescriptor LookupAccountSidW GetTokenInformation RegOpenKeyExW RegDeleteValueW

shell32

DragFinish SHGetFolderPathW SHBrowseForFolderW SHGetPathFromIDListW CommandLineToArgvW DragQueryFileW SHGetFileInfoW ShellExecuteW SHAppBarMessage SHGetDesktopFolder SHGetSpecialFolderLocation

shlwapi

ord219 PathIsDirectoryW PathFindExtensionW PathFindFileNameW PathRemoveFileSpecW PathIsUNCW PathStripToRootW StrFormatKBSizeW

uxtheme

GetThemePartSize DrawThemeParentBackground DrawThemeText OpenThemeData GetWindowTheme GetThemeSysColor CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName IsAppThemed IsThemeBackgroundPartiallyTransparent

ole32

OleDuplicateData CoInitialize CoTaskMemFree CoTaskMemAlloc ReleaseStgMedium CoDisconnectObject CoInitializeEx CoCreateInstance CoUninitialize CreateStreamOnHGlobal DoDragDrop OleLockRunning OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator OleGetClipboard CoLockObjectExternal RegisterDragDrop RevokeDragDrop

oleaut32

SystemTimeToVariantTime VariantTimeToSystemTime VariantCopy VarBstrFromDate LoadTypeLi VariantChangeType VariantClear VariantInit SysAllocStringLen SysStringLen SysAllocString SysFreeString

crypt32

CryptStringToBinaryW CryptBinaryToStringW

gdiplus

GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdiplusShutdown GdipAlloc GdipFree GdiplusStartup GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight

wtsapi32

WTSFreeMemory WTSEnumerateProcessesW

oleacc

LresultFromObject AccessibleObjectFromWindow CreateStdAccessibleObject

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

winmm

PlaySoundW

generic

count=9, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=13, id=225, productName=VS2013 UPD5 build 40629, version=40629,

count=10, id=206, version=65501,

count=1, id=207, version=65501,

count=2, id=208, version=65501,

count=45, id=203, version=65501,

count=905, id=1, productName=Unmarked objects,

count=1, id=199, version=41118,

count=83, id=225, productName=VS2013 build 21005, version=21005,

count=48, id=223, productName=VS2013 build 21005, version=21005,

count=270, id=224, productName=VS2013 build 21005, version=21005,

count=315, id=225, version=20806,

count=7, id=229, version=40629,

count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=1, id=151,

count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,