macro mytweak[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
macro mytweak.exe
Size 1.4MB
Sample260804-evknzacg36
SHA256 efac1d397c486fa85b5274965a44843e50d5ea3bc77cafacb8b5f994b8266a1f
MD5 85dd13ebb1d79e84966e065a625cc47d
SHA1 b9d7ba19b3bd9b524c1335091970f352f2dd9e90
SHA512 543d03c4699b92aaaa9a49f67e2549f2f25e4fac161c1a7d1e538582c26e5c0c9599dd3dc3db384a3be955f747defba97f57099e5dfd9d9dc66e8189cff08a1c
SSDEEP 24576:EUNxvqF6FGYJf6yjNQpNONZNlTX5PlGPgquLEIWxUc7N11QaSYx7GqTXq:EUNxvC6FGYJf6yjNQpNONZnTX5PlGPgf
TLSH
T12965390673D1AF97CE2780B58514D2B29261FE04472897DB5CE49E3FBE52F901EBA390
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
macro mytweak.exe

File Explorer

macro mytweak.exe

.exe 1.4MB

macro mytweak.exe

IMPHASH a649e6750bcf2911044dec744c57f40f
SHA256 efac1d397c486fa85b5274965a44843e50d5ea3bc77cafacb8b5f994b8266a1f
MD5 85dd13ebb1d79e84966e065a625cc47d
SHA1 b9d7ba19b3bd9b524c1335091970f352f2dd9e90
SHA512 543d03c4699b92aaaa9a49f67e2549f2f25e4fac161c1a7d1e538582c26e5c0c9599dd3dc3db384a3be955f747defba97f57099e5dfd9d9dc66e8189cff08a1c
SSDEEP 24576:EUNxvqF6FGYJf6yjNQpNONZNlTX5PlGPgquLEIWxUc7N11QaSYx7GqTXq:EUNxvC6FGYJf6yjNQpNONZnTX5PlGPgf
TLSH
T12965390673D1AF97CE2780B58514D2B29261FE04472897DB5CE49E3FBE52F901EBA390
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

842544

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wsock32

gethostbyname inet_addr WSACleanup gethostname WSAStartup

winmm

mixerGetLineInfoW mixerGetDevCapsW mixerOpen mciSendStringW joyGetPosEx mixerGetLineControlsW mixerGetControlDetailsW mixerSetControlDetails waveOutGetVolume mixerClose waveOutSetVolume joyGetDevCapsW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

comctl32

ImageList_Create CreateStatusWindowW ImageList_ReplaceIcon ImageList_GetIconSize ImageList_Destroy ImageList_AddMasked

psapi

GetProcessImageFileNameW GetModuleBaseNameW GetModuleFileNameExW

wininet

InternetOpenW InternetOpenUrlW InternetCloseHandle InternetReadFileExA InternetReadFile

kernel32

GetModuleFileNameW GetSystemTimeAsFileTime FindResourceW SizeofResource LoadResource LockResource GetFullPathNameW GetShortPathNameW FindFirstFileW FindNextFileW FindClose FileTimeToLocalFileTime SetEnvironmentVariableW Beep MoveFileW OutputDebugStringW CreateProcessW GetFileAttributesW WideCharToMultiByte MultiByteToWideChar GetExitCodeProcess WriteProcessMemory ReadProcessMemory GetCurrentProcessId OpenProcess TerminateProcess SetPriorityClass SetLastError GetEnvironmentVariableW GetLocalTime GetDateFormatW GetTimeFormatW GetDiskFreeSpaceExW SetVolumeLabelW CreateFileW DeviceIoControl GetDriveTypeW GetVolumeInformationW GetDiskFreeSpaceW GetCurrentDirectoryW CreateDirectoryW ReadFile WriteFile DeleteFileW SetFileAttributesW LocalFileTimeToFileTime SetFileTime DeleteCriticalSection GetSystemTime GetSystemDefaultUILanguage GetComputerNameW GetSystemWindowsDirectoryW GetTempPathW EnterCriticalSection LeaveCriticalSection VirtualProtect QueryDosDeviceW CompareStringW RemoveDirectoryW CopyFileW GetCurrentProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW FormatMessageW GetPrivateProfileStringW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW WritePrivateProfileStringW WritePrivateProfileSectionW SetEndOfFile GetACP GetFileType GetStdHandle SetFilePointerEx SystemTimeToFileTime FileTimeToSystemTime GetFileSize IsWow64Process VirtualAllocEx VirtualFreeEx EnumResourceNamesW LoadLibraryExW GlobalSize HeapReAlloc EncodePointer HeapFree DecodePointer ExitProcess HeapAlloc IsValidCodePage FlsGetValue FlsSetValue FlsFree FlsAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry InitializeCriticalSection GetCPInfo GetVersionExW GetModuleHandleW FreeLibrary GetProcAddress LoadLibraryW GetLastError CreateMutexW CloseHandle GetExitCodeThread SetThreadPriority CreateThread GetStringTypeExW lstrcmpiW GetCurrentThreadId GlobalUnlock GlobalFree GlobalAlloc GlobalLock SetErrorMode SetCurrentDirectoryW Sleep GetTickCount MulDiv RtlCaptureContext HeapSetInformation GetVersion HeapCreate InitializeCriticalSectionAndSpinCount HeapSize HeapQueryInformation GetCommandLineW GetStartupInfoW RtlUnwindEx GetStringTypeW RaiseException RtlPcToFileHeader LCMapStringW GetConsoleCP GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount QueryPerformanceCounter GetOEMCP SetFilePointer WriteConsoleW SetStdHandle FlushFileBuffers GetFileSizeEx GetProcessHeap

user32

GetDlgItem SetDlgItemTextW MessageBeep GetCursorInfo GetLastInputInfo GetSystemMenu GetMenuItemCount GetMenuItemID GetSubMenu GetMenuStringW ExitWindowsEx SetMenu FlashWindow GetPropW SetPropW RemovePropW MapWindowPoints RedrawWindow SetWindowLongPtrW SetParent GetClassInfoExW DefDlgProcW GetAncestor UpdateWindow GetMessagePos GetClassLongPtrW CallWindowProcW CheckRadioButton IntersectRect GetUpdateRect PtInRect CreateDialogIndirectParamW GetWindowLongPtrW CreateAcceleratorTableW DestroyAcceleratorTable InsertMenuItemW SetMenuDefaultItem RemoveMenu SetMenuItemInfoW IsMenu GetMenuItemInfoW CreateMenu CreatePopupMenu SetMenuInfo AppendMenuW DestroyMenu TrackPopupMenuEx CopyImage CreateIconIndirect CreateIconFromResourceEx EnumClipboardFormats GetWindow BringWindowToTop MessageBoxW GetTopWindow GetQueueStatus SendDlgItemMessageW SetClipboardViewer LoadAcceleratorsW EnableMenuItem GetMenu CreateWindowExW RegisterClassExW LoadCursorW DestroyWindow EnableWindow MapVirtualKeyW VkKeyScanExW MapVirtualKeyExW GetKeyboardLayoutNameW ActivateKeyboardLayout GetGUIThreadInfo GetWindowTextW mouse_event WindowFromPoint GetSystemMetrics keybd_event SetKeyboardState GetKeyboardState GetCursorPos GetAsyncKeyState AttachThreadInput SendInput UnregisterHotKey RegisterHotKey SendMessageTimeoutW UnhookWindowsHookEx SetWindowsHookExW PostThreadMessageW IsCharAlphaNumericW IsCharUpperW IsCharLowerW ToUnicodeEx GetKeyboardLayout CallNextHookEx CharLowerW ReleaseDC GetDC OpenClipboard GetClipboardData GetClipboardFormatNameW CloseClipboard SetClipboardData EmptyClipboard PostMessageW FindWindowW EndDialog IsWindow DispatchMessageW TranslateMessage ShowWindow CountClipboardFormats SetWindowLongW ScreenToClient IsDialogMessageW DialogBoxParamW SetForegroundWindow DefWindowProcW FillRect DrawIconEx GetSysColorBrush GetSysColor RegisterWindowMessageW EnumDisplayMonitors IsIconic IsZoomed EnumWindows ChangeClipboardChain GetWindowTextLengthW SendMessageW IsWindowEnabled GetWindowLongW GetKeyState TranslateAcceleratorW KillTimer PeekMessageW GetFocus GetClassNameW GetWindowThreadProcessId GetForegroundWindow InvalidateRect SetLayeredWindowAttributes SetWindowPos SetWindowRgn SetFocus SetActiveWindow ClientToScreen EnumChildWindows MoveWindow GetWindowRect GetMonitorInfoW MonitorFromPoint GetClientRect SystemParametersInfoW AdjustWindowRectEx DrawTextW SetRect GetIconInfo SetWindowTextW IsWindowVisible BlockInput GetMessageW SetTimer GetParent GetDlgCtrlID CharUpperW IsClipboardFormatAvailable CheckMenuItem PostQuitMessage IsCharAlphaW LoadImageW DestroyIcon

gdi32

GetPixel GetClipRgn GetCharABCWidthsW SetBkMode CreatePatternBrush SetBrushOrgEx EnumFontFamiliesExW CreateDIBSection GdiFlush SetBkColor ExcludeClipRect SetTextColor GetClipBox BitBlt CreateCompatibleBitmap GetSystemPaletteEntries GetDIBits CreateCompatibleDC CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateEllipticRgn DeleteDC GetObjectW GetTextMetricsW GetTextFaceW SelectObject GetStockObject CreateDCW CreateSolidBrush CreateFontW FillRgn GetDeviceCaps DeleteObject

comdlg32

CommDlgExtendedError GetSaveFileNameW GetOpenFileNameW

advapi32

RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegQueryValueExW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken CloseServiceHandle UnlockServiceDatabase LockServiceDatabase OpenSCManagerW GetUserNameW RegEnumKeyExW RegEnumValueW RegQueryInfoKeyW RegOpenKeyExW RegCloseKey RegConnectRegistryW RegDeleteValueW

shell32

DragQueryPoint SHEmptyRecycleBinW SHFileOperationW SHGetPathFromIDListW SHBrowseForFolderW SHGetDesktopFolder SHGetMalloc SHGetFolderPathW ShellExecuteExW Shell_NotifyIconW DragFinish DragQueryFileW ExtractIconW

ole32

OleInitialize OleUninitialize CoCreateInstance CoInitialize CoUninitialize CLSIDFromString CLSIDFromProgID CoGetObject StringFromGUID2 CreateStreamOnHGlobal

oleaut32

SafeArrayGetLBound GetActiveObject SysStringLen OleLoadPicture SafeArrayUnaccessData SafeArrayGetElemsize SafeArrayAccessData SafeArrayUnlock SafeArrayPtrOfIndex SafeArrayLock SafeArrayGetDim SafeArrayDestroy SafeArrayGetUBound VariantCopyInd SafeArrayCopy SysAllocString VariantChangeType VariantClear SafeArrayCreate SysFreeString

Name

.text

Size

889KB

Virtual Size

888KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

197KB

Virtual Size

196KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

text

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE

Name

data

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

276KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

macro mytweak.exe

wsock32

winmm

version

comctl32

psapi

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic