ce08567dbaf9896d7ae0caa0041bf60159c279d05b4b542f21646a1297624c0e

Sharing

Copy URL Twitter E-mail

General

Target
ce08567dbaf9896d7ae0caa0041bf60159c279d05b4b542f21646a1297624c0e
Size 4.2MB
Sample260809-tbvr6a1dkd
SHA256 ce08567dbaf9896d7ae0caa0041bf60159c279d05b4b542f21646a1297624c0e
MD5 18a9b9325c842a569baa694707f86706
SHA1 d256a7b7d5d0704198b5391b96360add80fec3f4
SHA512 f601430bd991cae0bdb84c9fd5ce858338786936c5fe708904edca92e8f86b5951f850709e223392c0ff21cf32dcbaa5662e30527e9b6a76c65aad718cb0c45d
SSDEEP 49152:Da18ll9wJZu01kR6pEbK/FoaODS4CREFC+TARpA8kkzDJ7KCbBI6:218ll9wa0G6pEe/OHS4CndpA1khK1
TLSH
T1A6168D12E18173E1D7500A7002E263F5E678DE265E258AB3B79CFDFE6F31251BE22119
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce08567dbaf9896d7ae0caa0041bf60159c279d05b4b542f21646a1297624c0e

File Explorer

ce08567dbaf9896d7ae0caa0041bf60159c279d05b4b542f21646a1297624c0e

.exe 4.2MB

ce08567dbaf9896d7ae0caa0041bf60159c279d05b4b542f21646a1297624c0e

IMPHASH 5550d9f5bbb8ac3faca66a0d90649d54
SHA256 ce08567dbaf9896d7ae0caa0041bf60159c279d05b4b542f21646a1297624c0e
MD5 18a9b9325c842a569baa694707f86706
SHA1 d256a7b7d5d0704198b5391b96360add80fec3f4
SHA512 f601430bd991cae0bdb84c9fd5ce858338786936c5fe708904edca92e8f86b5951f850709e223392c0ff21cf32dcbaa5662e30527e9b6a76c65aad718cb0c45d
SSDEEP 49152:Da18ll9wJZu01kR6pEbK/FoaODS4CREFC+TARpA8kkzDJ7KCbBI6:218ll9wa0G6pEe/OHS4CndpA1khK1
TLSH
T1A6168D12E18173E1D7500A7002E263F5E678DE265E258AB3B79CFDFE6F31251BE22119
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4825088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

iphlpapi

GetAdaptersInfo

winmm

midiOutUnprepareHeader midiStreamOpen midiStreamProperty midiOutPrepareHeader midiStreamOut midiStreamClose midiStreamStop waveOutOpen waveOutGetNumDevs waveOutClose waveOutReset waveOutPause waveOutWrite waveOutPrepareHeader waveOutUnprepareHeader PlaySoundA midiStreamRestart midiOutReset

ws2_32

closesocket send select WSACleanup WSAStartup gethostbyname WSAAsyncSelect htons inet_addr accept getpeername recv connect ioctlsocket recvfrom setsockopt socket inet_ntoa

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA AVIStreamGetFrame

kernel32

FileTimeToLocalFileTime lstrcpynA DuplicateHandle FlushFileBuffers LockFile UnlockFile SetEndOfFile FormatMessageA lstrcmpiA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA lstrcmpA LocalAlloc TlsAlloc GlobalHandle TlsFree TlsSetValue LocalReAlloc TlsGetValue GetFileTime GlobalFlags GetProfileIntA SetErrorMode GetProcessVersion GetCPInfo GetOEMCP GetStartupInfoA RtlUnwind GetSystemTime GetLocalTime RaiseException HeapSize GetACP SetStdHandle GetFileType UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree SetEnvironmentVariableA LCMapStringA LCMapStringW VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW CompareStringA CompareStringW IsBadReadPtr IsBadCodePtr IsProcessorFeaturePresent LocalFree InterlockedDecrement InterlockedIncrement Beep FileTimeToSystemTime SetThreadAffinityMask GetCurrentThread SetProcessAffinityMask GetProcessAffinityMask GetSystemInfo GetVersion GetTimeZoneInformation SetLastError GetSystemDirectoryA LoadLibraryExA GetWindowsDirectoryA TerminateProcess GetCurrentProcess GetFileSize SetFilePointer CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA WriteFile WaitForMultipleObjects CreateFileA DeviceIoControl SetEvent FindResourceA LoadResource LockResource ReadFile lstrlenW GetModuleFileNameA WideCharToMultiByte MultiByteToWideChar GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA lstrlenA WinExec lstrcpyA FindNextFileA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc GetUserDefaultLCID GetFullPathNameA FreeLibrary LoadLibraryA GetLastError GetVersionExA WritePrivateProfileStringA GetPrivateProfileStringA GetComputerNameA CreateThread CreateEventA Sleep GlobalAlloc GlobalLock GlobalUnlock GetTempPathA FindFirstFileA FindClose SetFileAttributesA GetFileAttributesA DeleteFileA CopyFileA GetCurrentDirectoryA SetCurrentDirectoryA GetVolumeInformationA GetModuleHandleA GetProcAddress MulDiv GetCommandLineA GetTickCount CreateProcessA WaitForSingleObject CloseHandle InterlockedExchange VirtualProtect VirtualQuery InterlockedCompareExchange GetStringTypeExA

user32

SendDlgItemMessageA MapWindowPoints AdjustWindowRectEx ScrollWindow GetScrollInfo SetScrollInfo ShowScrollBar GetScrollPos RegisterClassA GetClassLongA RemovePropA GetMessageTime GetLastActivePopup RegisterWindowMessageA GetWindowPlacement EndDialog CreateDialogIndirectParamA DestroyWindow EndPaint BeginPaint CharUpperA GetWindowTextLengthA UnregisterHotKey RegisterHotKey CreateWindowExA CreateIconIndirect GetIconInfo CopyIcon LoadStringA GetForegroundWindow GetDoubleClickTime ClipCursor GetNextDlgTabItem SetWindowTextA GetMenuItemCount GetMenuItemID GetMenuStringA GetMenuState GetTabbedTextExtentA DrawStateA GrayStringA TabbedTextOutA WindowFromDC EnumChildWindows GetWindowDC UnhookWindowsHookEx CallNextHookEx SetWindowsHookExA FrameRect GetPropA MoveWindow CallWindowProcA SetPropA DrawTextA UnregisterClassA GetWindowTextA FindWindowExA GetDlgItem GetClassNameA GetDesktopWindow LoadIconA TranslateMessage DrawFrameControl DrawEdge DrawFocusRect WindowFromPoint GetMessageA DispatchMessageA SetRectEmpty RegisterClipboardFormatA CreateIconFromResourceEx CreateIconFromResource DrawIconEx CreatePopupMenu ModifyMenuA CreateMenu CreateAcceleratorTableA GetDlgCtrlID GetSubMenu EnableMenuItem ClientToScreen EnumDisplaySettingsA LoadImageA SystemParametersInfoA ShowWindow IsWindowEnabled TranslateAcceleratorA GetKeyState CopyAcceleratorTableA PostQuitMessage IsZoomed GetClassInfoA DefWindowProcA GetSystemMenu DeleteMenu GetMenu SetMenu PeekMessageA IsIconic SetFocus GetActiveWindow GetWindow DestroyAcceleratorTable SetWindowRgn ScreenToClient ChildWindowFromPointEx CopyRect LoadBitmapA WinHelpA KillTimer SetTimer ReleaseCapture GetCapture SetCapture GetScrollRange SetScrollRange SetScrollPos SetRect InflateRect IntersectRect DestroyIcon PtInRect OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA GetSysColor SetActiveWindow SetCursorPos LoadCursorA SetCursor GetDC FillRect InvertRect IsRectEmpty ReleaseDC IsChild TrackPopupMenu DestroyMenu SetForegroundWindow GetWindowRect EqualRect UpdateWindow ValidateRect InvalidateRect GetClientRect GetFocus GetParent GetTopWindow PostMessageA IsWindow SetParent DestroyCursor SendMessageA SetWindowPos MessageBeep MessageBoxA GetCursorPos GetSystemMetrics IsClipboardFormatAvailable EmptyClipboard SetClipboardData OpenClipboard GetClipboardData CloseClipboard wsprintfA WaitForInputIdle GetSysColorBrush wvsprintfA GetMenuCheckMarkDimensions SetMenuItemBitmaps CheckMenuItem IsDialogMessageA ScrollWindowEx AppendMenuA GetMessagePos GetCursor

gdi32

CreateRectRgn FillRgn CreateSolidBrush CreateFontIndirectA GetStockObject CombineRgn GetObjectA EndPage EndDoc PatBlt DeleteDC SetBkMode SetTextColor SetWindowOrgEx SaveDC RestoreDC CreatePenIndirect PtVisible RectVisible TextOutA ExtTextOutA Escape SetDIBitsToDevice StartDocA CreateFontA GetTextMetricsA AbortDoc SetBrushOrgEx FrameRgn StartPage LineTo MoveToEx TranslateCharsetInfo SetPolyFillMode SetROP2 SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetClipBox ExcludeClipRect ExtSelectClipRgn StretchBlt GetViewportExtEx CopyMetaFileA SelectPalette RealizePalette GetDIBits GetWindowExtEx GetViewportOrgEx GetWindowOrgEx BeginPath EndPath PathToRegion CreateEllipticRgn CreateRoundRectRgn GetTextColor GetBkMode GetBkColor GetROP2 GetStretchBltMode GetPolyFillMode CreateCompatibleBitmap CreateDCA CreateBrushIndirect CreateBitmap CreatePatternBrush SelectObject CreatePen BitBlt GetPixel CreateCompatibleDC SetPixelV Ellipse Rectangle LPtoDP DPtoLP OffsetRgn SetBkColor CreateRectRgnIndirect CreateDIBSection SetPixel SetStretchBltMode GetClipRgn CreatePolygonRgn SelectClipRgn DeleteObject CreateDIBitmap GetCurrentObject RoundRect GetSystemPaletteEntries GetTextExtentPoint32A GetDeviceCaps CreatePalette

msimg32

GradientFill

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

comdlg32

GetFileTitleA PrintDlgA GetSaveFileNameA GetOpenFileNameA ChooseFontA ChooseColorA

advapi32

RegCreateKeyExA GetUserNameA RegOpenKeyA GetSidIdentifierAuthority GetSidSubAuthorityCount GetSidSubAuthority RegQueryValueA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey LookupAccountNameA

shell32

DragFinish DragAcceptFiles SHGetSpecialFolderPathA Shell_NotifyIconA ShellExecuteA DragQueryFileA

ole32

OleRun CoCreateInstance CreateStreamOnHGlobal CoTaskMemAlloc OleDuplicateData RevokeDragDrop CoLockObjectExternal DoDragDrop OleGetClipboard OleIsCurrentClipboard OleFlushClipboard OleSetClipboard CoTaskMemFree ReleaseStgMedium CLSIDFromProgID CoUninitialize CoSetProxyBlanket CoInitializeSecurity CoInitialize OleInitialize OleUninitialize CLSIDFromString

oleaut32

LHashValOfNameSys RegisterTypeLi SafeArrayPutElement SafeArrayCreate SafeArrayDestroy SysAllocString VariantInit VariantCopyInd SafeArrayGetElement SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound VariantClear OleCreatePictureIndirect VarDateFromStr UnRegisterTypeLi LoadTypeLi VariantChangeType

comctl32

ImageList_SetBkColor ImageList_GetImageCount ImageList_GetImageInfo ImageList_GetIcon ImageList_Duplicate ImageList_DrawIndirect ImageList_Draw ImageList_Read ord17 _TrackMouseEvent ImageList_AddMasked ImageList_Add ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_EndDrag

generic

count=9, id=11, version=8047,

count=6, id=10, version=8047,

count=5, id=12, version=7291,

count=44, id=19, version=8022,

count=1, id=28, version=9178,

count=117, id=29, version=9178,

count=9, id=95, version=2067,

count=49, id=14, version=7299,

count=208, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=30, id=19, version=8034,

count=768, id=1, productName=Unmarked objects,

count=3, id=93, version=2179,

count=7, id=18, version=8444,

count=120, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=160, id=11, productName=VS98 (6.0) build 8168, version=8168,

count=46, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=67, productName=Unmarked objects (old),

count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,