5ab4d7193745e89e6c6edb235a849c33073f85a02a6c466ad7123064df3b6021

Sharing

Copy URL Twitter E-mail

General

Target
5ab4d7193745e89e6c6edb235a849c33073f85a02a6c466ad7123064df3b6021
Size 2.1MB
Sample260806-jmh8dsfq5v
SHA256 5ab4d7193745e89e6c6edb235a849c33073f85a02a6c466ad7123064df3b6021
MD5 289653fbd1c849c9e0d980dd1c5380be
SHA1 c0c79266023425dd5be35cb9598a28d5537cf7eb
SHA512 df0f41cc2998187df7393a5e55f254e352133c932feeb89c6c07a8882ad043ebdce8531ec27b1cec4b7f42727b2523a5bae49da2ede2c8577d261af2acefa774
SSDEEP 24576:q6wvJVFotffOQrGsJnB4eESHdVsYOrN32uT6Trv8Sn3//ubsp1CrrhpVTX4ugZBy:q6wvJDooQwczXi2uuTd3//xnCBTX4n
TLSH
T173A57C5AA3A881E8D0B7C13CC556A34FE5B238154B608BDF13556BAD2F33AD50E3B721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ab4d7193745e89e6c6edb235a849c33073f85a02a6c466ad7123064df3b6021

File Explorer

5ab4d7193745e89e6c6edb235a849c33073f85a02a6c466ad7123064df3b6021

.exe 2.1MB

5ab4d7193745e89e6c6edb235a849c33073f85a02a6c466ad7123064df3b6021

IMPHASH 0598ab2d3082b3d2dbc68a7acb43572a
SHA256 5ab4d7193745e89e6c6edb235a849c33073f85a02a6c466ad7123064df3b6021
MD5 289653fbd1c849c9e0d980dd1c5380be
SHA1 c0c79266023425dd5be35cb9598a28d5537cf7eb
SHA512 df0f41cc2998187df7393a5e55f254e352133c932feeb89c6c07a8882ad043ebdce8531ec27b1cec4b7f42727b2523a5bae49da2ede2c8577d261af2acefa774
SSDEEP 24576:q6wvJVFotffOQrGsJnB4eESHdVsYOrN32uT6Trv8Sn3//ubsp1CrrhpVTX4ugZBy:q6wvJDooQwczXi2uuTd3//xnCBTX4n
TLSH
T173A57C5AA3A881E8D0B7C13CC556A34FE5B238154B608BDF13556BAD2F33AD50E3B721
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

72396

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d9

Direct3DCreate9Ex

dinput8

DirectInput8Create

winmm

timeEndPeriod timeGetDevCaps PlaySoundW timeSetEvent timeGetTime mciSendCommandA timeKillEvent timeBeginPeriod

imm32

ImmGetDefaultIMEWnd ImmAssociateContext

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

kernel32

LockResource LoadResource GetTickCount LoadLibraryA GetProcAddress FreeLibrary GetVolumeInformationW FindFirstFileW VirtualFree FindNextFileW DeviceIoControl VirtualAlloc GetDriveTypeA GetModuleFileNameW SetErrorMode FindClose GetVolumeInformationA GetFileAttributesW GetLogicalDriveStringsW GetDiskFreeSpaceA GetDevicePowerState FileTimeToSystemTime GetDiskFreeSpaceExW GetLocalTime SetCurrentDirectoryW SystemTimeToFileTime GetTempFileNameW GetDriveTypeW GetModuleHandleA SetThreadAffinityMask GetLogicalProcessorInformation GetCurrentThread GetVersionExA CreateDirectoryW RemoveDirectoryW ExitThread SetFileAttributesW OpenMutexA CreateThread CreateProcessW MoveFileW GetExitCodeProcess GetExitCodeThread CopyFileW GlobalMemoryStatus GlobalMemoryStatusEx GetComputerNameA CreateFileMappingA CreateMutexA ReleaseMutex GetCurrentProcess OpenProcess MultiByteToWideChar GetUserDefaultUILanguage FindResourceW QueryPerformanceFrequency QueryPerformanceCounter SetFilePointerEx MulDiv WaitForMultipleObjects OutputDebugStringW CreateEventW InitializeSListHead CreateWaitableTimerExW GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW LCMapStringW DecodePointer EncodePointer GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc SizeofResource SetLastError GetFileInformationByHandle GetFileAttributesExW FindFirstFileExW FormatMessageW SwitchToThread SetWaitableTimer LoadLibraryExW ResumeThread GetSystemTime InitializeCriticalSectionEx FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetStdHandle HeapFree HeapAlloc GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect HeapReAlloc HeapSize HeapQueryInformation FlushFileBuffers GetConsoleOutputCP GetConsoleMode IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW RaiseException GetEnvironmentStringsW FreeEnvironmentStringsW GetFileTime GetFileSize CreateFileW SetFilePointer SetFileTime WriteFile ReadFile MapViewOfFile GetCurrentProcessId GetLastError UnmapViewOfFile TryEnterCriticalSection ResetEvent GetSystemInfo WaitForSingleObjectEx InitializeCriticalSectionAndSpinCount GlobalUnlock GetCurrentThreadId GlobalLock GlobalAlloc WideCharToMultiByte CreateEventA CloseHandle SetEvent WaitForSingleObject SetThreadPriority DeleteCriticalSection Sleep InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetProcessHeap SetStdHandle WriteConsoleW FindResourceA GetModuleHandleW DeleteFileW TerminateProcess ReleaseSemaphore DuplicateHandle CreateSemaphoreA GetACP GetThreadPriority RtlUnwindEx RtlPcToFileHeader IsProcessorFeaturePresent

user32

SetProcessDpiAwarenessContext SetCursorPos ShowCursor SwapMouseButton ClientToScreen GetCursorInfo GetUserObjectSecurity GetShellWindow GetWindowThreadProcessId PostQuitMessage SystemParametersInfoW BringWindowToTop FindWindowW IsWindow GetKeyboardState IsIconic CloseWindow GetDlgItemTextW IsDlgButtonChecked EnableWindow PostMessageA WaitForInputIdle EnumDisplayMonitors GetCursorPos AdjustWindowRectEx LoadCursorA RegisterClassExW LoadCursorW SetWindowPos GetMonitorInfoA GetClientRect MonitorFromWindow FillRect SetRect CreateDialogParamW CallWindowProcW DestroyWindow MessageBoxW SetWindowLongPtrW LoadImageW EndDialog DialogBoxParamA GetDlgItemTextA GetDlgCtrlID CallWindowProcA EnableMenuItem SetCursor LoadIconW TranslateMessage GetForegroundWindow RegisterHotKey PeekMessageW DispatchMessageW SetActiveWindow UnregisterHotKey GetSystemMenu EqualRect GetDesktopWindow SetRectEmpty PeekMessageA PostThreadMessageA SetDlgItemTextW SetWindowTextA SendDlgItemMessageW DefWindowProcA SetFocus SendDlgItemMessageA SetDlgItemTextA SendMessageA GetDlgItem GetWindowTextLengthA GetParent SetWindowLongPtrA DialogBoxParamW UpdateWindow InvalidateRect GetWindowTextW MessageBoxA OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData IsClipboardFormatAvailable SetScrollInfo DefWindowProcW PostMessageW GetWindowRect CreateWindowExW SendMessageW GetSystemMetrics SetWindowTextW GetScrollInfo ShowWindow GetAsyncKeyState RedrawWindow MoveWindow EnableScrollBar BeginPaint EndPaint GetDC ReleaseDC MsgWaitForMultipleObjects GetQueueStatus RegisterWindowMessageA SetTimer ScreenToClient KillTimer SetForegroundWindow

gdi32

RemoveFontResourceExW CreateRectRgnIndirect AddFontResourceExW AddFontMemResourceEx CreateSolidBrush SelectClipRgn SetStretchBltMode GetObjectA GetOutlineTextMetricsW GetTextMetricsA GetCharABCWidthsFloatW DeleteObject SetBrushOrgEx GetTextExtentPoint32W TextOutW DeleteDC CreateFontW EnumFontFamiliesExW CreateCompatibleDC CreateDIBSection SelectObject CreatePalette SelectPalette SetBkMode SetTextColor GetGlyphOutlineW StretchDIBits RemoveFontMemResourceEx GetStockObject CreateFontA

comdlg32

GetSaveFileNameA GetOpenFileNameA

advapi32

LookupAccountSidW RegCloseKey RevertToSelf RegQueryValueExW AdjustTokenPrivileges LookupPrivilegeValueA GetSecurityDescriptorOwner ImpersonateLoggedOnUser IsValidSid OpenProcessToken DuplicateTokenEx RegSetValueExW GetUserNameA RegDeleteKeyW RegCreateKeyExW RegOpenKeyExW

shell32

DragQueryFileW SHBrowseForFolderW ShellExecuteW SHChangeNotify SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetFolderPathW SHGetMalloc DragQueryFileA DragFinish DragAcceptFiles

ole32

CoUninitialize CoTaskMemAlloc CoInitialize CoTaskMemFree CoFreeUnusedLibraries PropVariantClear CoInitializeEx CoCreateInstance

wininet

InternetOpenUrlW InternetSetFilePointer InternetReadFile InternetAttemptConnect InternetOpenW InternetCloseHandle InternetQueryDataAvailable

gdiplus

GdipBitmapLockBits GdipGetImageWidth GdipCreateBitmapFromScan0 GdipCreateBitmapFromFile GdipFree GdipGetImageEncodersSize GdiplusStartup GdiplusShutdown GdipGetImageHeight GdipGetImagePixelFormat GdipSaveImageToFile GdipDisposeImage GdipAlloc GdipBitmapUnlockBits GdipCloneImage GdipGetImageEncoders

mf

MFCreateVideoRendererActivate MFCreateAudioRendererActivate MFCreateVideoRenderer MFCreateMediaSession MFCreateTopologyNode MFGetService MFCreateTopology

mfplat

MFCreateMediaType MFShutdown MFCreateSourceResolver MFStartup MFFrameRateToAverageTimePerFrame MFCreateMFByteStreamOnStream MFCreateFile

evr

MFCreateVideoSampleFromSurface

dxva2

DXVA2CreateDirect3DDeviceManager9

dsound

ord11

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

497KB

Virtual Size

496KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

26KB

Virtual Size

722KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

98KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

176KB

Virtual Size

175KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

5ab4d7193745e89e6c6edb235a849c33073f85a02a6c466ad7123064df3b6021

d3d9

dinput8

winmm

imm32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

wininet

gdiplus

mf

mfplat

evr

dxva2

dsound

generic