16cdaff2d471d135490170ae58a8b4a5cfd61dca05a7aa1a5df5ea1b83ae4482

Sharing

Copy URL Twitter E-mail

General

Target
16cdaff2d471d135490170ae58a8b4a5cfd61dca05a7aa1a5df5ea1b83ae4482
Size 163KB
Sample260805-s2f61sbm71
SHA256 16cdaff2d471d135490170ae58a8b4a5cfd61dca05a7aa1a5df5ea1b83ae4482
MD5 08cb538b2d724c03bd7e0a927afa7950
SHA1 df864a49904dfce4ff629aacd9f76808a4acca4c
SHA512 0f6202f83f6bb44b9687607a9db69ecf23a7d8613642d5edfc728435ae8dd0a50810104a2073fe09e49e0b53d915bb124876d611d87488b5315ada2dd35d761d
SSDEEP 3072:Ci7gkWb92M64j8K57TsfKzFeFhD7f1bc0ChXop3:GZh/dYfKzopChM3
TLSH
T15EF36B22FC03C073E69408B0D59A5FFA4EBC8C736B9521EFE3D04DAA18644D6773965A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16cdaff2d471d135490170ae58a8b4a5cfd61dca05a7aa1a5df5ea1b83ae4482

File Explorer

16cdaff2d471d135490170ae58a8b4a5cfd61dca05a7aa1a5df5ea1b83ae4482

.exe 163KB

16cdaff2d471d135490170ae58a8b4a5cfd61dca05a7aa1a5df5ea1b83ae4482

IMPHASH a54a8556284a53decf80ead4b62c9b09
SHA256 16cdaff2d471d135490170ae58a8b4a5cfd61dca05a7aa1a5df5ea1b83ae4482
MD5 08cb538b2d724c03bd7e0a927afa7950
SHA1 df864a49904dfce4ff629aacd9f76808a4acca4c
SHA512 0f6202f83f6bb44b9687607a9db69ecf23a7d8613642d5edfc728435ae8dd0a50810104a2073fe09e49e0b53d915bb124876d611d87488b5315ada2dd35d761d
SSDEEP 3072:Ci7gkWb92M64j8K57TsfKzFeFhD7f1bc0ChXop3:GZh/dYfKzopChM3
TLSH
T15EF36B22FC03C073E69408B0D59A5FFA4EBC8C736B9521EFE3D04DAA18644D6773965A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

84240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetMessageW DefWindowProcW PostMessageW SetWindowPos MessageBoxW CreateWindowExW SendMessageW SetWindowTextW RegisterClassExW ShowWindow IsWindow DispatchMessageW SetTimer GetSysColor TranslateMessage LoadCursorW KillTimer PostQuitMessage GetSysColorBrush UpdateWindow InvalidateRect EnableWindow

comctl32

InitCommonControlsEx

uxtheme

SetWindowTheme

advapi32

GetSecurityInfo CreateWellKnownSid AuditFree AuditSetSystemPolicy AuditQuerySystemPolicy BuildTrusteeWithSidW SetEntriesInAclW StartServiceW QueryServiceStatusEx OpenServiceW OpenSCManagerW CloseServiceHandle SetSecurityInfo

bcrypt

BCryptGenRandom

kernel32

SleepConditionVariableSRW IsProcessorFeaturePresent GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead GetLastError GetCurrentProcess GetFileSizeEx ReadFile SetLastError GetSystemDirectoryW GetSystemWow64DirectoryW LoadLibraryW FlushInstructionCache GetSystemInfo VirtualAlloc GetCurrentThreadId LocalFree SetUnhandledExceptionFilter WakeAllConditionVariable CreateFileW CreateToolhelp32Snapshot GetTickCount64 Process32NextW Process32FirstW CloseHandle GetLocalTime GetCurrentProcessId GetModuleHandleW QueryPerformanceCounter Sleep ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared SetEvent WaitForSingleObject CreateEventW VirtualProtect VirtualQuery GetWriteWatch ResetWriteWatch IsWow64Process FreeLibrary FindResourceW LoadResource LockResource SizeofResource GetProcAddress

gdi32

SetBkMode SetTextColor SetBkColor

msvcp140

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z ?good@ios_base@std@@QBE_NXZ ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?uncaught_exception@std@@YA_NXZ ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?_Xlength_error@std@@YAXPBD@Z ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z

vcruntime140

__std_exception_copy __std_terminate strchr _CxxThrowException memcpy __std_exception_destroy memset wcsrchr __current_exception __current_exception_context _except_handler4_common __CxxFrameHandler3 memmove

api-ms-win-crt-heap-l1-1-0

_callnewh malloc _set_new_mode free

api-ms-win-crt-string-l1-1-0

_wcsnicmp _wcsicmp

api-ms-win-crt-convert-l1-1-0

wcstoull

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_wide_argv _initialize_wide_environment _get_wide_winmain_command_line _initterm _initterm_e exit _exit _cexit _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _register_onexit_function terminate _controlfp_s _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

ceil _libm_sse2_sqrt_precise __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

16cdaff2d471d135490170ae58a8b4a5cfd61dca05a7aa1a5df5ea1b83ae4482

user32

comctl32

uxtheme

advapi32

bcrypt

kernel32

gdi32

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic