0c485721d28f00861a62cf13479823b1dea252a0fde465df3e11a520400b1777

Sharing

Copy URL Twitter E-mail

General

Target
0c485721d28f00861a62cf13479823b1dea252a0fde465df3e11a520400b1777
Size 1.5MB
Sample260810-ffg5zaeb59
SHA256 0c485721d28f00861a62cf13479823b1dea252a0fde465df3e11a520400b1777
MD5 b2e8f70d003af82488ffa36284251a11
SHA1 6e93625f548549419e8fd11a2a417a5bea512eae
SHA512 727257a5b3ffe978dc9eaed64433932d2fb958699e9ea445be47b23178c8857608cc3ab1fafcbd34a4d24fd13b374ffddb750742f71bf5f94307f25a9191063c
SSDEEP 24576:YsUYUzHMdq04/JGbTS7/vS63PT8RdsRQJFlJNQL/CQN41:/UBzHMkGqr4Rd3zfNQL/VN
TLSH
T1F6757E227965B972D4B101B0ABFF67DE9A1DAD210764C1CF63C8197E89394D33A32387
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c485721d28f00861a62cf13479823b1dea252a0fde465df3e11a520400b1777

File Explorer

0c485721d28f00861a62cf13479823b1dea252a0fde465df3e11a520400b1777

.exe 1.5MB

0c485721d28f00861a62cf13479823b1dea252a0fde465df3e11a520400b1777

IMPHASH f7397df2cfae2262a5e9fee4bfc65ccf
SHA256 0c485721d28f00861a62cf13479823b1dea252a0fde465df3e11a520400b1777
MD5 b2e8f70d003af82488ffa36284251a11
SHA1 6e93625f548549419e8fd11a2a417a5bea512eae
SHA512 727257a5b3ffe978dc9eaed64433932d2fb958699e9ea445be47b23178c8857608cc3ab1fafcbd34a4d24fd13b374ffddb750742f71bf5f94307f25a9191063c
SSDEEP 24576:YsUYUzHMdq04/JGbTS7/vS63PT8RdsRQJFlJNQL/CQN41:/UBzHMkGqr4Rd3zfNQL/VN
TLSH
T1F6757E227965B972D4B101B0ABFF67DE9A1DAD210764C1CF63C8197E89394D33A32387
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

658906

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\001_WorkCode\LdsWanOA\Release\LdsWanOA.pdb

webview2loader

CreateCoreWebView2EnvironmentWithOptions

kernel32

FindNextFileW SetEndOfFile SetFilePointer WriteFile CreateFileMappingW MapViewOfFile UnmapViewOfFile Sleep ResumeThread GetLocalTime GetVersion GlobalAlloc GlobalUnlock GlobalLock GlobalFree GetTempFileNameW WriteConsoleW ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW SetFilePointerEx LCMapStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc IsBadReadPtr GetStdHandle FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer RtlUnwind CreateFileMappingA FindNextFileA FindFirstFileA FindClose CreateFileA InitializeSListHead GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter IsProcessorFeaturePresent GetSystemTimeAsFileTime GetLocaleInfoEx LocalFree QueryPerformanceCounter SleepConditionVariableSRW WakeAllConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive FormatMessageA InitOnceExecuteOnce GetExitCodeThread InitOnceBeginInitialize InitOnceComplete lstrcpynW GetFileSize lstrcmpW FreeResource ExitProcess GetACP MulDiv GetTickCount RaiseException MoveFileExW ResetEvent DeleteFileW GetTickCount64 CreateFileW GetTempPathW ReadFile SetEvent MultiByteToWideChar CreateEventW WaitForMultipleObjects FreeLibrary DeleteCriticalSection HeapDestroy DecodePointer FindResourceW LoadResource FindResourceExW LoadLibraryW HeapReAlloc LockResource HeapSize InitializeCriticalSection LeaveCriticalSection GetModuleFileNameW EnterCriticalSection SizeofResource GetFileAttributesW IsDebuggerPresent DebugBreak WideCharToMultiByte GetModuleHandleW GetProcessHeap GetCurrentProcessId CreateMutexExW GetProcAddress HeapAlloc CloseHandle OpenSemaphoreW WaitForSingleObjectEx OutputDebugStringW GetLastError FormatMessageW ReleaseMutex GetCurrentThreadId WaitForSingleObject InitializeCriticalSectionEx GetModuleHandleExW ReleaseSemaphore SetLastError HeapFree CreateSemaphoreExW GetModuleFileNameA GetFileType

user32

GetClientRect IsZoomed GetMessagePos PeekMessageW CallWindowProcW GetWindowDC IsWindowEnabled FindWindowExW InvalidateRgn CreateAcceleratorTableW RegisterClassW RegisterClassExW GetClassInfoExW EnableWindow IsWindow ShowWindow SendMessageW MessageBoxW DestroyWindow PostMessageW MapWindowPoints PtInRect TrackMouseEvent ClientToScreen GetMonitorInfoW ScreenToClient MonitorFromWindow SetWindowPos GetWindowRect ReleaseDC InvalidateRect KillTimer MoveWindow SetTimer GetDC SetProcessDpiAwarenessContext EqualRect CharNextW ReleaseCapture SetCursor LoadCursorW GetMessageW TranslateMessage DispatchMessageW CreateWindowExW IsChild UpdateLayeredWindow IsWindowVisible SetFocus GetFocus GetKeyState SetCapture BeginPaint EndPaint GetUpdateRect GetCursorPos CreateCaret GetCaretBlinkTime SetCaretPos IntersectRect UnionRect IsRectEmpty GetWindowLongW SetWindowLongW GetParent GetClassNameW GetWindow CopyRect wvsprintfW InflateRect OffsetRect DefWindowProcW GetWindowTextLengthW GetWindowTextW SetWindowTextW GetSysColor ShowCaret HideCaret FillRect DrawFocusRect GetDlgCtrlID GetIconInfo DrawIconEx DestroyIcon SetRect DrawTextW CharPrevW MonitorFromPoint RemovePropW SetForegroundWindow SetWindowRgn IsIconic SystemParametersInfoW LoadImageW GetPropW SetPropW PostQuitMessage

gdi32

SetBkMode SetBkColor ExtSelectClipRgn SelectClipRgn GetClipBox StretchBlt CreateRectRgnIndirect CombineRgn GetDeviceCaps CreateDIBSection CreateRoundRectRgn SetWindowOrgEx GetObjectW GetTextMetricsW SaveDC RestoreDC Rectangle GetStockObject DeleteObject DeleteDC CreatePen CreateFontIndirectW CreateCompatibleDC CreateCompatibleBitmap BitBlt SelectObject GetTextExtentPoint32W SetStretchBltMode SetTextColor SetDIBColorTable TextOutW ExtTextOutW CreateSolidBrush CreateDCW GetDIBits SetDIBitsToDevice GetCharABCWidthsW GetTextColor

advapi32

CryptHashData RegSetValueExW RegQueryValueExW RegOpenKeyExW RegCreateKeyW RegCloseKey CryptAcquireContextW CryptCreateHash CryptGetHashParam CryptDestroyHash CryptReleaseContext

shell32

ShellExecuteExW SHCreateDirectoryExW SHGetKnownFolderPath

ole32

CreateStreamOnHGlobal OleLockRunning CLSIDFromString CoCreateInstance CoTaskMemAlloc CoTaskMemFree CLSIDFromProgID

oleaut32

VariantInit VariantClear SysAllocString SafeArrayCreate SafeArrayPutElement

shlwapi

PathAppendW SHAutoComplete PathRemoveFileSpecW PathFileExistsW StrStrIW PathFindFileNameW

comctl32

ImageList_GetIconSize ord17 _TrackMouseEvent ImageList_DrawEx InitCommonControlsEx

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

gdiplus

GdipAlloc GdipFree GdipCreatePath GdipGetPropertyItem GdipGetPropertyItemSize GdipImageSelectActiveFrame GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipLoadImageFromStreamICM GdipGetImageEncoders GdipGetImageEncodersSize GdipDrawImagePointsI GdipFillPath GdipGraphicsClear GdipCloneBitmapAreaI GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStream GdipSaveImageToFile GdipCreateTexture GdipClosePathFigure GdipDrawImageRectRectI GdipDrawImageRectI GdipSetInterpolationMode GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromFile GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdipLoadImageFromFile GdipDrawEllipseI GdipAddPathArc GdipFillEllipseI GdipDrawPath GdipDrawRectangleI GdipDrawLineI GdipSetSmoothingMode GdipDeleteGraphics GdipCreateFromHDC GdipSetPenDashStyle GdipSetPenMode GdipDeletePen GdipCreatePen1 GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdipAddPathArcI GdipAddPathLineI GdipDeletePath

msimg32

AlphaBlend GradientFill

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

260KB

Virtual Size

260KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

33KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

93KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0c485721d28f00861a62cf13479823b1dea252a0fde465df3e11a520400b1777

webview2loader

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

version

gdiplus

msimg32

generic