0ad93908dfb1eb94341d8120a836024c0a7653586afea14b651d237e30faf3fe

Sharing

Copy URL Twitter E-mail

General

Target
0ad93908dfb1eb94341d8120a836024c0a7653586afea14b651d237e30faf3fe
Size 620KB
Sample260812-db6xestyfv
SHA256 0ad93908dfb1eb94341d8120a836024c0a7653586afea14b651d237e30faf3fe
MD5 433591da72615444696c5560df80eb2f
SHA1 ec8d5885521e94d515cea538bb87eca8fed08ee1
SHA512 d4e8b6d8355c6cc92597aeb5e751bd53cfe1edbaa56be1114e849180d611bd18526d4455b67f1981e5e7e326e327acb7ce6f5b24f55886fe09046c84d5da076d
SSDEEP 12288:tAHA0Io8uXQNixIy1IN4MBfnQ1n+wYac5Ah++W7KHA6:WINGoBPQ1n+Dn5g+0d
TLSH
T129D45B12E583F473C89B1A78207FA378D66E6614811B5D9E5B61FFA02F875803F8D21B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ad93908dfb1eb94341d8120a836024c0a7653586afea14b651d237e30faf3fe

File Explorer

0ad93908dfb1eb94341d8120a836024c0a7653586afea14b651d237e30faf3fe

.dll 620KB

0ad93908dfb1eb94341d8120a836024c0a7653586afea14b651d237e30faf3fe

IMPHASH 3f99961f412735cd9875993f387783b8
SHA256 0ad93908dfb1eb94341d8120a836024c0a7653586afea14b651d237e30faf3fe
MD5 433591da72615444696c5560df80eb2f
SHA1 ec8d5885521e94d515cea538bb87eca8fed08ee1
SHA512 d4e8b6d8355c6cc92597aeb5e751bd53cfe1edbaa56be1114e849180d611bd18526d4455b67f1981e5e7e326e327acb7ce6f5b24f55886fe09046c84d5da076d
SSDEEP 12288:tAHA0Io8uXQNixIy1IN4MBfnQ1n+wYac5Ah++W7KHA6:WINGoBPQ1n+Dn5g+0d
TLSH
T129D45B12E583F473C89B1A78207FA378D66E6614811B5D9E5B61FFA02F875803F8D21B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47664

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegEnumValueW RegOpenKeyA RegOpenKeyW RegQueryValueExW

kernel32

CloseHandle ConvertDefaultLocale CreateFileA CreateFileMappingA CreateFileMappingW CreateFileW DelayLoadFailureHook DisableThreadLibraryCalls EnterCriticalSection FindResourceW FreeLibrary GetACP GetCPInfo GetFileSize GetFileSizeEx GetLocaleInfoW GetModuleHandleW GetOEMCP GetProcAddress GetProfileStringW GetStringTypeW GetSystemDirectoryW GetTickCount GetVersion GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc HeapSize IsBadStringPtrA IsBadStringPtrW IsDBCSLeadByte IsDBCSLeadByteEx IsValidLocale LeaveCriticalSection LoadLibraryW LoadResource LockResource MapViewOfFile MulDiv MultiByteToWideChar RaiseException ReadFile ResolveDelayLoadedAPI UnmapViewOfFile WideCharToMultiByte WriteFile

ntdll

RtlCreateUnicodeStringFromAsciiz RtlDosPathNameToNtPathName_U RtlFreeUnicodeString _vsnprintf

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _assert _strdup _wcsicmp _wcsnicmp bsearch calloc floor free fwrite getenv iswdigit malloc memchr memcmp memcpy memmove memset qsort realloc strchr strcmp strcpy strcspn strlen strnlen strrchr wcschr wcscpy wcslen

user32

GetDpiForSystem

win32u

NtGdiAbortDoc NtGdiAbortPath NtGdiAddFontMemResourceEx NtGdiAddFontResourceW NtGdiAlphaBlend NtGdiAngleArc NtGdiArcInternal NtGdiBeginPath NtGdiBitBlt NtGdiCancelDC NtGdiCloseFigure NtGdiCombineRgn NtGdiComputeXformCoefficients NtGdiCreateBitmap NtGdiCreateClientObj NtGdiCreateCompatibleBitmap NtGdiCreateCompatibleDC NtGdiCreateDIBBrush NtGdiCreateDIBSection NtGdiCreateDIBitmapInternal NtGdiCreateEllipticRgn NtGdiCreateHalftonePalette NtGdiCreateHatchBrushInternal NtGdiCreateMetafileDC NtGdiCreatePaletteInternal NtGdiCreatePatternBrushInternal NtGdiCreatePen NtGdiCreateRectRgn NtGdiCreateRoundRectRgn NtGdiCreateSolidBrush NtGdiDeleteClientObj NtGdiDeleteObjectApp NtGdiDescribePixelFormat NtGdiDoPalette NtGdiDrawStream NtGdiEllipse NtGdiEndDoc NtGdiEndPage NtGdiEndPath NtGdiEnumFonts NtGdiEqualRgn NtGdiExcludeClipRect NtGdiExtCreatePen NtGdiExtCreateRegion NtGdiExtEscape NtGdiExtFloodFill NtGdiExtGetObjectW NtGdiExtSelectClipRgn NtGdiExtTextOutW NtGdiFillPath NtGdiFillRgn NtGdiFlattenPath NtGdiFlush NtGdiFontIsLinked NtGdiFrameRgn NtGdiGetAndSetDCDword NtGdiGetAppClipBox NtGdiGetBitmapBits NtGdiGetBitmapDimension NtGdiGetBoundsRect NtGdiGetCharABCWidthsW NtGdiGetCharWidthInfo NtGdiGetCharWidthW NtGdiGetColorAdjustment NtGdiGetDCObject NtGdiGetDIBitsInternal NtGdiGetDeviceCaps NtGdiGetDeviceGammaRamp NtGdiGetFontData NtGdiGetFontFileData NtGdiGetFontFileInfo NtGdiGetFontUnicodeRanges NtGdiGetGlyphIndicesW NtGdiGetGlyphOutline NtGdiGetKerningPairs NtGdiGetMiterLimit NtGdiGetNearestColor NtGdiGetNearestPaletteIndex NtGdiGetOutlineTextMetricsInternalW NtGdiGetPath NtGdiGetPixel NtGdiGetRandomRgn NtGdiGetRasterizerCaps NtGdiGetRealizationInfo NtGdiGetRegionData NtGdiGetRgnBox NtGdiGetSpoolMessage NtGdiGetSystemPaletteUse NtGdiGetTextCharsetInfo NtGdiGetTextExtentExW NtGdiGetTextFaceW NtGdiGetTextMetricsW NtGdiGetTransform NtGdiGradientFill NtGdiHfontCreate NtGdiIcmBrushInfo NtGdiInitSpool NtGdiIntersectClipRect NtGdiInvertRgn NtGdiLineTo NtGdiMakeFontDir NtGdiMaskBlt NtGdiModifyWorldTransform NtGdiMoveTo NtGdiOffsetClipRgn NtGdiOffsetRgn NtGdiOpenDCW NtGdiPatBlt NtGdiPathToRegion NtGdiPlgBlt NtGdiPolyDraw NtGdiPolyPolyDraw NtGdiPtInRegion NtGdiPtVisible NtGdiRectInRegion NtGdiRectVisible NtGdiRectangle NtGdiRemoveFontMemResourceEx NtGdiRemoveFontResourceW NtGdiResetDC NtGdiResizePalette NtGdiRestoreDC NtGdiRoundRect NtGdiSaveDC NtGdiScaleViewportExtEx NtGdiScaleWindowExtEx NtGdiSelectBitmap NtGdiSelectBrush NtGdiSelectClipPath NtGdiSelectFont NtGdiSelectPen NtGdiSetBitmapBits NtGdiSetBitmapDimension NtGdiSetBoundsRect NtGdiSetColorAdjustment NtGdiSetDIBitsToDeviceInternal NtGdiSetDeviceGammaRamp NtGdiSetLayout NtGdiSetMagicColors NtGdiSetMetaRgn NtGdiSetMiterLimit NtGdiSetPixel NtGdiSetPixelFormat NtGdiSetRectRgn NtGdiSetSystemPaletteUse NtGdiSetTextJustification NtGdiSetVirtualResolution NtGdiStartDoc NtGdiStartPage NtGdiStretchBlt NtGdiStretchDIBitsInternal NtGdiStrokeAndFillPath NtGdiStrokePath NtGdiSwapBuffers NtGdiTransformPoints NtGdiTransparentBlt NtGdiUnrealizeObject NtGdiUpdateColors NtGdiWidenPath NtUserCallHwndParam NtUserCallOneParam NtUserRealizePalette NtUserSelectPalette

AbortDoc AbortPath AddFontMemResourceEx AddFontResourceA AddFontResourceExA AddFontResourceExW AddFontResourceTracking AddFontResourceW AngleArc AnimatePalette Arc ArcTo BeginPath BitBlt ByeByeGDI CancelDC CheckColorsInGamut ChoosePixelFormat Chord CloseEnhMetaFile CloseFigure CloseMetaFile ColorCorrectPalette ColorMatchToTarget CombineRgn CombineTransform CopyEnhMetaFileA CopyEnhMetaFileW CopyMetaFileA CopyMetaFileW CreateBitmap CreateBitmapIndirect CreateBrushIndirect CreateColorSpaceA CreateColorSpaceW CreateCompatibleBitmap CreateCompatibleDC CreateDCA CreateDCW CreateDIBPatternBrush CreateDIBPatternBrushPt CreateDIBSection CreateDIBitmap CreateDiscardableBitmap CreateEllipticRgn CreateEllipticRgnIndirect CreateEnhMetaFileA CreateEnhMetaFileW CreateFontA CreateFontIndirectA CreateFontIndirectExA CreateFontIndirectExW CreateFontIndirectW CreateFontW CreateHalftonePalette CreateHatchBrush CreateICA CreateICW CreateMetaFileA CreateMetaFileW CreatePalette CreatePatternBrush CreatePen CreatePenIndirect CreatePolyPolygonRgn CreatePolygonRgn CreateRectRgn CreateRectRgnIndirect CreateRoundRectRgn CreateScalableFontResourceA CreateScalableFontResourceW CreateSolidBrush D3DKMTAcquireKeyedMutex D3DKMTAcquireKeyedMutex2 D3DKMTCheckOcclusion D3DKMTCheckVidPnExclusiveOwnership D3DKMTCloseAdapter D3DKMTCreateAllocation D3DKMTCreateAllocation2 D3DKMTCreateDCFromMemory D3DKMTCreateDevice D3DKMTCreateKeyedMutex D3DKMTCreateKeyedMutex2 D3DKMTCreateSynchronizationObject D3DKMTCreateSynchronizationObject2 D3DKMTDestroyAllocation D3DKMTDestroyAllocation2 D3DKMTDestroyDCFromMemory D3DKMTDestroyDevice D3DKMTDestroyKeyedMutex D3DKMTDestroySynchronizationObject D3DKMTEnumAdapters D3DKMTEnumAdapters2 D3DKMTEscape D3DKMTGetProcessSchedulingPriorityClass D3DKMTOpenAdapterFromDeviceName D3DKMTOpenAdapterFromGdiDisplayName D3DKMTOpenAdapterFromHdc D3DKMTOpenAdapterFromLuid D3DKMTOpenKeyedMutex D3DKMTOpenKeyedMutex2 D3DKMTOpenKeyedMutexFromNtHandle D3DKMTOpenNtHandleFromName D3DKMTOpenResource D3DKMTOpenResource2 D3DKMTOpenResourceFromNtHandle D3DKMTOpenSyncObjectFromNtHandle D3DKMTOpenSyncObjectFromNtHandle2 D3DKMTOpenSyncObjectNtHandleFromName D3DKMTOpenSynchronizationObject D3DKMTQueryAdapterInfo D3DKMTQueryResourceInfo D3DKMTQueryResourceInfoFromNtHandle D3DKMTQueryStatistics D3DKMTQueryVideoMemoryInfo D3DKMTReleaseKeyedMutex D3DKMTReleaseKeyedMutex2 D3DKMTSetProcessSchedulingPriorityClass D3DKMTSetQueuedLimit D3DKMTSetVidPnSourceOwner D3DKMTShareObjects D3DKMTSignalSynchronizationObjectFromCpu D3DKMTWaitForSynchronizationObjectFromCpu DPtoLP DeleteColorSpace DeleteDC DeleteEnhMetaFile DeleteMetaFile DeleteObject DescribePixelFormat DeviceCapabilitiesEx DeviceCapabilitiesExA DeviceCapabilitiesExW DrawEscape DwmCreatedBitmapRemotingOutput Ellipse EnableEUDC EndDoc EndPage EndPath EnumEnhMetaFile EnumFontFamiliesA EnumFontFamiliesExA EnumFontFamiliesExW EnumFontFamiliesW EnumFontsA EnumFontsW EnumICMProfilesA EnumICMProfilesW EnumMetaFile EnumObjects EqualRgn Escape ExcludeClipRect ExtCreatePen ExtCreateRegion ExtEscape ExtFloodFill ExtSelectClipRgn ExtTextOutA ExtTextOutW FillPath FillRgn FixBrushOrgEx FlattenPath FloodFill FontIsLinked FrameRgn FreeImageColorMatcher GdiAlphaBlend GdiAssociateObject GdiCleanCacheDC GdiComment GdiConvertAndCheckDC GdiConvertBitmap GdiConvertBrush GdiConvertDC GdiConvertEnhMetaFile GdiConvertFont GdiConvertMetaFilePict GdiConvertPalette GdiConvertRegion GdiConvertToDevmodeW GdiCreateLocalBitmap GdiCreateLocalBrush GdiCreateLocalEnhMetaFile GdiCreateLocalFont GdiCreateLocalMetaFilePict GdiCreateLocalPalette GdiCreateLocalRegion GdiDciBeginAccess GdiDciCreateOffscreenSurface GdiDciCreateOverlaySurface GdiDciCreatePrimarySurface GdiDciDestroySurface GdiDciDrawSurface GdiDciEndAccess GdiDciEnumSurface GdiDciInitialize GdiDciSetClipList GdiDciSetDestination GdiDeleteLocalDC GdiDeleteLocalObject GdiDeleteSpoolFileHandle GdiDescribePixelFormat GdiDllInitialize GdiDrawStream GdiEntry13 GdiFlush GdiGetBatchLimit GdiGetCharDimensions GdiGetCodePage GdiGetDevmodeForPage GdiGetLocalBitmap GdiGetLocalBrush GdiGetLocalDC GdiGetLocalFont GdiGetSpoolFileHandle GdiGetSpoolMessage GdiGradientFill GdiInitSpool GdiInitializeLanguagePack GdiIsMetaFileDC GdiIsMetaPrintDC GdiIsPlayMetafileDC GdiPlayDCScript GdiPlayJournal GdiPlayScript GdiRealizationInfo GdiReleaseLocalDC GdiSetAttrs GdiSetBatchLimit GdiSetPixelFormat GdiSetServerAttr GdiSwapBuffers GdiTransparentBlt GdiWinWatchClose GdiWinWatchDidStatusChange GdiWinWatchGetClipList GdiWinWatchOpen GetArcDirection GetAspectRatioFilterEx GetBitmapBits GetBitmapDimensionEx GetBkColor GetBkMode GetBoundsRect GetBrushOrgEx GetCharABCWidthsA GetCharABCWidthsFloatA GetCharABCWidthsFloatW GetCharABCWidthsI GetCharABCWidthsW GetCharWidth32A GetCharWidth32W GetCharWidthA GetCharWidthFloatA GetCharWidthFloatW GetCharWidthI GetCharWidthInfo GetCharWidthW GetCharWidthWOW GetCharacterPlacementA GetCharacterPlacementW GetClipBox GetClipRgn GetColorAdjustment GetColorSpace GetCurrentObject GetCurrentPositionEx GetDCBrushColor GetDCOrgEx GetDCPenColor GetDIBColorTable GetDIBits GetDeviceCaps GetDeviceGammaRamp GetETM GetEnhMetaFileA GetEnhMetaFileBits GetEnhMetaFileDescriptionA GetEnhMetaFileDescriptionW GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetEnhMetaFilePixelFormat GetEnhMetaFileW GetFontData GetFontFileData GetFontFileInfo GetFontLanguageInfo GetFontRealizationInfo GetFontResourceInfo GetFontResourceInfoW GetFontUnicodeRanges GetGlyphIndicesA GetGlyphIndicesW GetGlyphOutline GetGlyphOutlineA GetGlyphOutlineW GetGlyphOutlineWow GetGraphicsMode GetICMProfileA GetICMProfileW GetKerningPairs GetKerningPairsA GetKerningPairsW GetLayout GetLogColorSpaceA GetLogColorSpaceW GetMapMode GetMetaFileA GetMetaFileBitsEx GetMetaFileW GetMetaRgn GetMiterLimit GetNearestColor GetNearestPaletteIndex GetObjectA GetObjectType GetObjectW GetOutlineTextMetricsA GetOutlineTextMetricsW GetPaletteEntries GetPath GetPixel GetPixelFormat GetPolyFillMode GetROP2 GetRandomRgn GetRasterizerCaps GetRegionData GetRelAbs GetRgnBox GetStockObject GetStretchBltMode GetSystemPaletteEntries GetSystemPaletteUse GetTextAlign GetTextCharacterExtra GetTextCharset GetTextCharsetInfo GetTextColor GetTextExtentExPointA GetTextExtentExPointI GetTextExtentExPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextExtentPointI GetTextExtentPointW GetTextFaceA GetTextFaceW GetTextMetricsA GetTextMetricsW GetTransform GetViewportExtEx GetViewportOrgEx GetWinMetaFileBits GetWindowExtEx GetWindowOrgEx GetWorldTransform IntersectClipRect InvertRgn LPtoDP LineDDA LineTo LoadImageColorMatcherA LoadImageColorMatcherW MaskBlt MirrorRgn ModifyWorldTransform MoveToEx NamedEscape OffsetClipRgn OffsetRgn OffsetViewportOrgEx OffsetWindowOrgEx PaintRgn PatBlt PathToRegion Pie PlayEnhMetaFile PlayEnhMetaFileRecord PlayMetaFile PlayMetaFileRecord PlgBlt PolyBezier PolyBezierTo PolyDraw PolyPolygon PolyPolyline PolyTextOutA PolyTextOutW Polygon Polyline PolylineTo PtInRegion PtVisible RealizePalette RectInRegion RectVisible Rectangle RemoveFontMemResourceEx RemoveFontResourceA RemoveFontResourceExA RemoveFontResourceExW RemoveFontResourceTracking RemoveFontResourceW ResetDCA ResetDCW ResizePalette RestoreDC RoundRect SaveDC ScaleViewportExtEx ScaleWindowExtEx ScriptApplyDigitSubstitution ScriptApplyLogicalWidth ScriptBreak ScriptCPtoX ScriptCacheGetHeight ScriptFreeCache ScriptGetCMap ScriptGetFontAlternateGlyphs ScriptGetFontFeatureTags ScriptGetFontLanguageTags ScriptGetFontProperties ScriptGetFontScriptTags ScriptGetGlyphABCWidth ScriptGetLogicalWidths ScriptGetProperties ScriptIsComplex ScriptItemize ScriptItemizeOpenType ScriptJustify ScriptLayout ScriptPlace ScriptPlaceOpenType ScriptRecordDigitSubstitution ScriptShape ScriptShapeOpenType ScriptStringAnalyse ScriptStringCPtoX ScriptStringFree ScriptStringGetLogicalWidths ScriptStringGetOrder ScriptStringOut ScriptStringValidate ScriptStringXtoCP ScriptString_pLogAttr ScriptString_pSize ScriptString_pcOutChars ScriptTextOut ScriptXtoCP SelectBrushLocal SelectClipPath SelectClipRgn SelectFontLocal SelectObject SelectPalette SetAbortProc SetArcDirection SetBitmapBits SetBitmapDimensionEx SetBkColor SetBkMode SetBoundsRect SetBrushOrgEx SetColorAdjustment SetColorSpace SetDCBrushColor SetDCPenColor SetDIBColorTable SetDIBits SetDIBitsToDevice SetDeviceGammaRamp SetEnhMetaFileBits SetFontEnumeration SetGraphicsMode SetICMMode SetICMProfileA SetICMProfileW SetLayout SetMagicColors SetMapMode SetMapperFlags SetMetaFileBitsEx SetMetaRgn SetMiterLimit SetObjectOwner SetPaletteEntries SetPixel SetPixelFormat SetPixelV SetPolyFillMode SetROP2 SetRectRgn SetRelAbs SetStretchBltMode SetSystemPaletteUse SetTextAlign SetTextCharacterExtra SetTextColor SetTextJustification SetViewportExtEx SetViewportOrgEx SetVirtualResolution SetWinMetaFileBits SetWindowExtEx SetWindowOrgEx SetWorldTransform StartDocA StartDocW StartPage StretchBlt StretchDIBits StrokeAndFillPath StrokePath SwapBuffers TextOutA TextOutW TranslateCharsetInfo UnloadNetworkFonts UnrealizeObject UpdateColors UpdateICMRegKey UpdateICMRegKeyA UpdateICMRegKeyW WidenPath gdiPlaySpoolStream pfnRealizePalette pfnSelectPalette pstackConnect

Name

.text

Size

328KB

Virtual Size

325KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

72KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

88KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

40KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

20KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

28KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0ad93908dfb1eb94341d8120a836024c0a7653586afea14b651d237e30faf3fe

advapi32

kernel32

ntdll

ucrtbase

user32

win32u

generic