bcaadb3220919b81bb386935d0df70a22281aaae1a54db5fa765742e6d899283

Sharing

Copy URL Twitter E-mail

General

Target
bcaadb3220919b81bb386935d0df70a22281aaae1a54db5fa765742e6d899283
Size 1.6MB
Sample260804-shmjpacf66
SHA256 bcaadb3220919b81bb386935d0df70a22281aaae1a54db5fa765742e6d899283
MD5 9afaa00353c3211a4a5c4e10a100395a
SHA1 f8384f0820639deb2d0b7eddbbd4dcfe791ca4cd
SHA512 73305412604c3d9b74717d42f516d2680b25f9695d599d5e8c5d41eaf40fd491cb086729625c7f3820e849d953a53b471ede58054321221b30fc559918082ca8
SSDEEP 24576:Q/vAjP4CgsReKj5Q1T0WAV+zVyRNzN7+IIk8Bz6FdfBdkN+0NQ:koUsfOVGz4Pk8Bz4dJ+N+0N
TLSH
T19275E029969801FDE273C2B59B575813E772784603346EEF0390AAA71F175D88F3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcaadb3220919b81bb386935d0df70a22281aaae1a54db5fa765742e6d899283

File Explorer

bcaadb3220919b81bb386935d0df70a22281aaae1a54db5fa765742e6d899283

.exe 1.6MB

bcaadb3220919b81bb386935d0df70a22281aaae1a54db5fa765742e6d899283

IMPHASH 35684c83c521321d0330f8cbf53afc30
SHA256 bcaadb3220919b81bb386935d0df70a22281aaae1a54db5fa765742e6d899283
MD5 9afaa00353c3211a4a5c4e10a100395a
SHA1 f8384f0820639deb2d0b7eddbbd4dcfe791ca4cd
SHA512 73305412604c3d9b74717d42f516d2680b25f9695d599d5e8c5d41eaf40fd491cb086729625c7f3820e849d953a53b471ede58054321221b30fc559918082ca8
SSDEEP 24576:Q/vAjP4CgsReKj5Q1T0WAV+zVyRNzN7+IIk8Bz6FdfBdkN+0NQ:koUsfOVGz4Pk8Bz4dJ+N+0N
TLSH
T19275E029969801FDE273C2B59B575813E772784603346EEF0390AAA71F175D88F3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

297440

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

ord410 ImageList_ReplaceIcon ImageList_Destroy ImageList_Create ord413 ord412 InitCommonControlsEx

shell32

ShellExecuteW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHGetFolderPathW

shlwapi

StrCmpLogicalW

winhttp

WinHttpCrackUrl WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpQueryDataAvailable WinHttpSetOption WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSendRequest WinHttpAddRequestHeaders WinHttpOpenRequest WinHttpSetTimeouts

ole32

CreateStreamOnHGlobal CoTaskMemFree

msimg32

AlphaBlend GradientFill

gdi32

MoveToEx GetTextMetricsW SetTextColor SetStretchBltMode SetBkMode SetBkColor SelectObject SelectClipRgn LineTo GetStockObject FrameRgn FillRgn ExcludeClipRect DeleteObject DeleteDC CreateSolidBrush CreateRoundRectRgn CreatePen CreateFontW CreateCompatibleDC CreateCompatibleBitmap BitBlt

gdiplus

GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdiplusShutdown GdiplusStartup GdipFree GdipCloneImage GdipDisposeImage GdipGetImageWidth GdipGetImageHeight GdipAlloc

user32

GetSysColor ClientToScreen MessageBoxW GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW GetPropW SetPropW RedrawWindow InvalidateRect EndPaint BeginPaint ReleaseDC GetWindowDC GetDC SetForegroundWindow GetForegroundWindow UpdateWindow DrawTextW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu LoadImageW FillRect EnableWindow KillTimer SetTimer GetKeyState GetFocus SetFocus GetDlgCtrlID IsDlgButtonChecked CheckDlgButton BringWindowToTop IsWindowVisible SetWindowPos ShowWindow DestroyWindow IsWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW AttachThreadInput SendMessageW DispatchMessageW TranslateMessage GetMessageW TrackMouseEvent PostMessageW OffsetRect GetWindowLongPtrW SetWindowLongPtrW GetWindowThreadProcessId LoadCursorW LoadIconW IsWindowEnabled DestroyIcon DrawIconEx SystemParametersInfoW GetSystemMetrics

kernel32

LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LoadLibraryExW VirtualProtect ReadConsoleW ReadFile GetConsoleMode GetStringTypeW FlushFileBuffers GetFileType HeapAlloc HeapFree GetStdHandle SetConsoleCtrlHandler IsProcessorFeaturePresent UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetProcAddress TerminateProcess ExitProcess GetCurrentProcess GetModuleHandleExW FreeLibraryAndExitThread FreeLibrary ExitThread CreateThread DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RtlUnwindEx RtlLookupFunctionEntry RaiseException RtlPcToFileHeader GetModuleHandleW GetStartupInfoW InitializeSListHead GetCurrentProcessId WakeAllConditionVariable WakeConditionVariable SleepConditionVariableSRW AcquireSRWLockExclusive ReleaseSRWLockExclusive GetExitCodeThread WaitForSingleObjectEx GetProcessHeap HeapSize HeapReAlloc WriteConsoleW SetStdHandle GetConsoleOutputCP GetSystemTimeAsFileTime FileTimeToSystemTime GlobalLock GlobalUnlock GlobalAlloc GetLocalTime GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte CreateFileW DeleteFileW GetDiskFreeSpaceExW GetFileSizeEx SetEndOfFile SetFilePointerEx WriteFile CloseHandle GetLastError QueryPerformanceCounter QueryPerformanceFrequency DeviceIoControl WaitForSingleObject Sleep MoveFileExW GetEnvironmentVariableW CreateDirectoryW GetFileAttributesW SetEvent ResetEvent CreateEventW WaitForMultipleObjects GetTickCount RtlCaptureStackBackTrace SetUnhandledExceptionFilter GetCurrentThreadId LoadResource LockResource SizeofResource FindResourceW

advapi32

RegSetValueExW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey

Name

.text

Size

435KB

Virtual Size

435KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

102KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

bcaadb3220919b81bb386935d0df70a22281aaae1a54db5fa765742e6d899283

comctl32

shell32

shlwapi

winhttp

ole32

msimg32

gdi32

gdiplus

user32

kernel32

advapi32

generic