2ce350a0ee70f8fe4f761be3a0385625c5fe7b705aaf17a03095b980e9866db4

Sharing

Copy URL Twitter E-mail

General

Target
2ce350a0ee70f8fe4f761be3a0385625c5fe7b705aaf17a03095b980e9866db4
Size 1.7MB
Sample260808-khhazace53
SHA256 2ce350a0ee70f8fe4f761be3a0385625c5fe7b705aaf17a03095b980e9866db4
MD5 dd29fac9652563ada0f4b0e1094b69ce
SHA1 3b5f28f8871fa0b86f6afa069e8118149698959d
SHA512 c52c64cdffeb77f0607e13a584604ce7f2dc7bb58500df30225f071d26568baadc288531b874be9399f0c30a590467f6443f14061fafd68dd28dd9d77e9a58bc
SSDEEP 12288:8wBU/HHvGsvVpG0hHOx+2zGAihWbwPGeJ7J563m9iuRkm8dNLx6m1M/7pQcX6BCA:8fvHvGsPhOg2iAiwc756mRzvd4dxP
TLSH
T1E2853B04F65268E2E9228274189BE7BE1B397F338266CF47D7447D8A2D33BD32D55206
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ce350a0ee70f8fe4f761be3a0385625c5fe7b705aaf17a03095b980e9866db4

File Explorer

2ce350a0ee70f8fe4f761be3a0385625c5fe7b705aaf17a03095b980e9866db4

.dll 1.7MB

2ce350a0ee70f8fe4f761be3a0385625c5fe7b705aaf17a03095b980e9866db4

IMPHASH 2ecd236b5e99a478d0a8dcf1f3b6dd52
SHA256 2ce350a0ee70f8fe4f761be3a0385625c5fe7b705aaf17a03095b980e9866db4
MD5 dd29fac9652563ada0f4b0e1094b69ce
SHA1 3b5f28f8871fa0b86f6afa069e8118149698959d
SHA512 c52c64cdffeb77f0607e13a584604ce7f2dc7bb58500df30225f071d26568baadc288531b874be9399f0c30a590467f6443f14061fafd68dd28dd9d77e9a58bc
SSDEEP 12288:8wBU/HHvGsvVpG0hHOx+2zGAihWbwPGeJ7J563m9iuRkm8dNLx6m1M/7pQcX6BCA:8fvHvGsPhOg2iAiwc756mRzvd4dxP
TLSH
T1E2853B04F65268E2E9228274189BE7BE1B397F338266CF47D7447D8A2D33BD32D55206
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

91744

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegCreateKeyExW RegCreateKeyW RegOpenKeyA RegOpenKeyExW RegQueryValueExA RegQueryValueExW RegSetValueExW

gdi32

BitBlt CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateFontIndirectW CreatePatternBrush CreatePen CreatePenIndirect CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateSolidBrush DPtoLP DeleteDC DeleteObject ExcludeClipRect ExtCreatePen ExtCreateRegion ExtTextOutW FillRgn FrameRgn GdiAlphaBlend GetBkColor GetBkMode GetClipBox GetClipRgn GetCurrentObject GetDIBColorTable GetDIBits GetDeviceCaps GetLayout GetNearestColor GetObjectW GetPixel GetStockObject GetTextColor GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextExtentPointW GetTextMetricsW IntersectClipRect LineTo MoveToEx OffsetWindowOrgEx PatBlt PolyPolyline Polygon RectVisible Rectangle SelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetDIBColorTable SetDIBits SetPixel SetPolyFillMode SetTextAlign SetTextColor SetViewportOrgEx SetWindowOrgEx StretchBlt StretchDIBits TextOutW

kernel32

DelayLoadFailureHook FindResourceA GetModuleHandleW GetProcAddress GlobalAddAtomW GlobalDeleteAtom IsBadCodePtr IsBadStringPtrA IsBadStringPtrW IsBadWritePtr LocalSize RaiseException ResolveDelayLoadedAPI RtlUnwind

kernelbase

CloseHandle CompareFileTime CompareStringA CompareStringW CreateEventW CreateThread DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection FileTimeToSystemTime FindResourceW FreeResource GetDateFormatW GetLocalTime GetLocaleInfoW GetThreadLocale GetTickCount GlobalAlloc GlobalFree HeapAlloc HeapFree HeapReAlloc InitializeCriticalSectionEx LeaveCriticalSection LoadResource LocalAlloc LocalFree LocalReAlloc LockResource MulDiv MultiByteToWideChar SetEvent SizeofResource StrCmpIW StrCmpNIW SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte lstrcmpW lstrcmpiW

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _assert _strdup _wcsicmp _wcsnicmp floor free fwrite getenv isprint iswalnum memcpy memmove memset qsort strcat strchr strcmp strcpy strcspn strlen wcschr wcsncmp wcsstr wcstol

user32

AdjustWindowRect AdjustWindowRectEx AppendMenuW BeginDeferWindowPos BeginPaint CallWindowProcA CallWindowProcW CheckMenuItem ChildWindowFromPoint ClientToScreen CopyIcon CopyImage CopyRect CreateCaret CreateDialogIndirectParamA CreateDialogIndirectParamW CreateIconIndirect CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcW DeferWindowPos DestroyCaret DestroyCursor DestroyIcon DestroyWindow DialogBoxParamW DispatchMessageW DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawTextA DrawTextW EnableScrollBar EnableWindow EndDeferWindowPos EndDialog EndPaint FillRect FrameRect GetActiveWindow GetAsyncKeyState GetCapture GetClassLongW GetClassNameW GetClientRect GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgCtrlID GetDlgItem GetDoubleClickTime GetDpiForWindow GetFocus GetIconInfo GetKeyNameTextW GetKeyState GetMenuState GetMessagePos GetMessageTime GetMessageW GetMonitorInfoW GetNextDlgTabItem GetParent GetPropW GetScrollInfo GetScrollPos GetScrollRange GetSysColor GetSysColorBrush GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongW GetWindowRect GetWindowRgn GetWindowTextA GetWindowTextLengthA GetWindowTextLengthW GetWindowTextW IntersectRect InvalidateRect InvalidateRgn IsChild IsDialogMessageW IsWindow IsWindowEnabled IsWindowUnicode IsWindowVisible KillTimer LoadBitmapW LoadCursorW LoadIconW LoadImageA LoadImageW LoadStringW MapDialogRect MapVirtualKeyW MapWindowPoints MonitorFromRect MoveWindow NotifyWinEvent PeekMessageW PostMessageW PostQuitMessage RedrawWindow RegisterClassW RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient ScrollWindow ScrollWindowEx SendDlgItemMessageW SendMessageA SendMessageW SetCapture SetCaretPos SetCursor SetFocus SetParent SetPropW SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongA SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextA SetWindowTextW ShowCaret ShowScrollBar ShowWindow SubtractRect SystemParametersInfoW TrackMouseEvent TrackPopupMenu TranslateMessage UnionRect UnregisterClassW UpdateWindow ValidateRect WindowFromPoint wsprintfW

AddMRUStringW CreateMRUListW CreateMappedBitmap CreatePropertySheetPage CreatePropertySheetPageA CreatePropertySheetPageW CreateStatusWindow CreateStatusWindowA CreateStatusWindowW CreateToolbar CreateToolbarEx CreateUpDownControl DPA_Clone DPA_Create DPA_CreateEx DPA_DeleteAllPtrs DPA_DeletePtr DPA_Destroy DPA_DestroyCallback DPA_EnumCallback DPA_GetPtr DPA_GetPtrIndex DPA_Grow DPA_InsertPtr DPA_Search DPA_SetPtr DPA_Sort DSA_Create DSA_DeleteAllItems DSA_DeleteItem DSA_Destroy DSA_DestroyCallback DSA_EnumCallback DSA_GetItem DSA_GetItemPtr DSA_InsertItem DSA_SetItem DefSubclassProc DestroyPropertySheetPage DllGetVersion DrawInsert DrawStatusText DrawStatusTextA DrawStatusTextW EnumMRUListW FlatSB_EnableScrollBar FlatSB_GetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollProp FlatSB_GetScrollRange FlatSB_SetScrollInfo FlatSB_SetScrollPos FlatSB_SetScrollProp FlatSB_SetScrollRange FlatSB_ShowScrollBar GetEffectiveClientRect GetMUILanguage HIMAGELIST_QueryInterface ImageList_Add ImageList_AddIcon ImageList_AddMasked ImageList_BeginDrag ImageList_Copy ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_DrawIndirect ImageList_Duplicate ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetFlags ImageList_GetIcon ImageList_GetIconSize ImageList_GetImageCount ImageList_GetImageInfo ImageList_GetImageRect ImageList_LoadImage ImageList_LoadImageA ImageList_LoadImageW ImageList_Merge ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetFilter ImageList_SetFlags ImageList_SetIconSize ImageList_SetImageCount ImageList_SetOverlayImage ImageList_Write InitCommonControls InitCommonControlsEx InitMUILanguage InitializeFlatSB LBItemFromPt MakeDragList MenuHelp PropertySheet PropertySheetA PropertySheetW RegisterClassNameW RemoveWindowSubclass SetWindowSubclass ShowHideMenuCtl UninitializeFlatSB _TrackMouseEvent

Name

.text

Size

692KB

Virtual Size

689KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

608B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

128KB

Virtual Size

127KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

324KB

Virtual Size

322KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2ce350a0ee70f8fe4f761be3a0385625c5fe7b705aaf17a03095b980e9866db4

advapi32

gdi32

kernel32

kernelbase

ntdll

ucrtbase

user32

generic