bd6e6c4e194d127cd5be0301670f747583ad3c2ac48a259404587bc472c8f765

Sharing

Copy URL Twitter E-mail

General

Target
bd6e6c4e194d127cd5be0301670f747583ad3c2ac48a259404587bc472c8f765
Size 1.2MB
Sample260809-ghv1aa1hjc
SHA256 bd6e6c4e194d127cd5be0301670f747583ad3c2ac48a259404587bc472c8f765
MD5 ceff0cb2f21fd31a54dec05b92b72751
SHA1 1d56388c46de3043a824d2955e5de17e8d0d7931
SHA512 7929dd7fb41df84b976e59b99c67b5b0d0f121d7d15162a02879b2a5f3b9863e8d684b73457a6805ab19ce976046b15fddb54235b77c047c8b190334eb9dca51
SSDEEP 24576:dWfl9jkjJ9ITjqrU6qAYWKSREBT+///7fTJ2//y1BOMmqL:kflhe9IT2YWKSREBK3zTJ2//VMmqL
TLSH
T147551113B7F5C0F7D66240310F829F79B6B2F5D48E22598367E48A1E1EB2D828137B65
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd6e6c4e194d127cd5be0301670f747583ad3c2ac48a259404587bc472c8f765

File Explorer

bd6e6c4e194d127cd5be0301670f747583ad3c2ac48a259404587bc472c8f765

.exe 1.2MB

bd6e6c4e194d127cd5be0301670f747583ad3c2ac48a259404587bc472c8f765

IMPHASH 64541e7021740252284e5e89f9c30553
SHA256 bd6e6c4e194d127cd5be0301670f747583ad3c2ac48a259404587bc472c8f765
MD5 ceff0cb2f21fd31a54dec05b92b72751
SHA1 1d56388c46de3043a824d2955e5de17e8d0d7931
SHA512 7929dd7fb41df84b976e59b99c67b5b0d0f121d7d15162a02879b2a5f3b9863e8d684b73457a6805ab19ce976046b15fddb54235b77c047c8b190334eb9dca51
SSDEEP 24576:dWfl9jkjJ9ITjqrU6qAYWKSREBT+///7fTJ2//y1BOMmqL:kflhe9IT2YWKSREBK3zTJ2//VMmqL
TLSH
T147551113B7F5C0F7D66240310F829F79B6B2F5D48E22598367E48A1E1EB2D828137B65
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

102565

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RaiseException HeapFree CreateDirectoryA HeapAlloc GetStartupInfoA GetCommandLineA ExitProcess HeapReAlloc HeapSize GetACP GetTimeZoneInformation SetHandleCount GetStdHandle GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc ExitThread FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetStdHandle IsBadReadPtr IsBadCodePtr IsValidLocale IsValidCodePage GetLocaleInfoA EnumSystemLocalesA GetUserDefaultLCID CompareStringA CompareStringW SetEnvironmentVariableA GetLocaleInfoW CreateThread RtlUnwind GetFileTime SetCurrentDirectoryA GetProfileStringA InterlockedExchange GetFileAttributesA GetTickCount FileTimeToLocalFileTime FileTimeToSystemTime GetFullPathNameA GetVolumeInformationA SetEndOfFile UnlockFile LockFile FlushFileBuffers GetCurrentProcess DuplicateHandle SetErrorMode GetThreadLocale GetOEMCP GetCPInfo SizeofResource GetProcessVersion WritePrivateProfileStringA GlobalFlags TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc lstrcpynA MulDiv SetLastError FormatMessageA LocalFree MultiByteToWideChar WideCharToMultiByte InterlockedIncrement lstrlenA LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA GetModuleHandleA GetProcAddress GlobalUnlock GlobalFree LockResource FindResourceA LoadResource ResumeThread GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId OpenProcess TerminateProcess Module32First CreateToolhelp32Snapshot Process32First Process32Next SetFilePointer WriteFile CreateFileA GetFileSize ReadFile InterlockedDecrement GetCurrentDirectoryA MoveFileA Sleep GetLastError CreateProcessA CloseHandle DeleteFileA CopyFileA SetFileAttributesA FindFirstFileA FindClose GetModuleFileNameA GetLongPathNameA IsBadWritePtr GetDiskFreeSpaceExA

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem SetRect CopyAcceleratorTableA CharNextA InflateRect GetSysColorBrush PtInRect GetClassNameA GetDesktopWindow LoadCursorA GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC ClientToScreen DestroyMenu LoadStringA MapDialogRect SetWindowContextHelpId GetDC ReleaseDC ShowWindow MoveWindow IsDialogMessageA SendDlgItemMessageA MapWindowPoints GetSysColor SetFocus AdjustWindowRectEx ScreenToClient CopyRect GetTopWindow IsChild GetCapture wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID EnableWindow LoadIconA SendMessageA AppendMenuA GetSystemMenu DrawIcon GetClientRect UnregisterClassA GetWindowTextLengthA GetWindowTextA GetDlgCtrlID CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime RegisterClipboardFormatA CharUpperA InvalidateRect UpdateWindow GetMessagePos GetForegroundWindow SetForegroundWindow GetWindow SetWindowLongA SetWindowPos RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA IsWindowUnicode GetSystemMetrics IsIconic MessageBoxA PostMessageA PostQuitMessage SetCursor GetWindowLongA IsWindowEnabled GetLastActivePopup GetParent SetWindowsHookExA GetCursorPos PeekMessageA IsWindowVisible ValidateRect CallNextHookEx GetKeyState GetActiveWindow DispatchMessageA TranslateMessage GetMessageA GetNextDlgTabItem GetFocus EnableMenuItem CheckMenuItem SetMenuItemBitmaps ModifyMenuA GetMenuState LoadBitmapA GetMenuCheckMarkDimensions WinHelpA GetWindowPlacement GetWindowRect EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamA DestroyWindow GetDlgItem SetWindowTextA

gdi32

PtVisible RectVisible TextOutA ExtTextOutA Escape DPtoLP GetTextColor GetBkColor LPtoDP CreateSolidBrush GetWindowExtEx GetViewportExtEx GetDeviceCaps DeleteObject GetMapMode CreateBitmap IntersectClipRect ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetBkMode GetStockObject SelectObject RestoreDC SaveDC DeleteDC PatBlt GetObjectA SetBkColor GetTextExtentPointA BitBlt CreateCompatibleDC CreateDIBitmap SetTextColor GetClipBox

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

SHBrowseForFolderA SHGetPathFromIDListA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries OleUninitialize CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoCreateInstance OleRun CoInitialize CoUninitialize CoRegisterMessageFilter CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard OleInitialize

olepro32

ord253

oleaut32

SysFreeString SysAllocStringLen VariantClear VariantTimeToSystemTime VariantCopy VariantChangeType SysAllocString SysAllocStringByteLen SysStringLen GetErrorInfo

Sharing

General

Malware Config

Signatures

File Explorer

bd6e6c4e194d127cd5be0301670f747583ad3c2ac48a259404587bc472c8f765

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

generic