66012dc833ef5879b2717cae6572fbb8f0694b01c5e23f4ffabd6242d2a8adca

Sharing

Copy URL Twitter E-mail

General

Target
66012dc833ef5879b2717cae6572fbb8f0694b01c5e23f4ffabd6242d2a8adca
Size 3.6MB
Sample260813-rbb9psbd83
SHA256 66012dc833ef5879b2717cae6572fbb8f0694b01c5e23f4ffabd6242d2a8adca
MD5 3d7b36a8786bd9f5c3944d80a3354ec7
SHA1 78f6909c7d93198da24e2fbd36a5cc7e64fabf44
SHA512 2394ea0fe38a1df8b13e0a8dcb758dd86db164dfefc3498fa772c6e3765c4cf3aed8fc1fb6adbe4a8e8e3591c379ffc7facdd8034aa35b451f93327bdd51e6e4
SSDEEP 49152:CtV8k/jME+F7aGsbbKnjQdYn0zXzeOWncCxSm7sszbYyvK8k6+cb/PL+mtCkdUe/:CtKA+F7OKYoxSenTLT1J
TLSH
T1A9067C92F19B94BCE40DC470834656776A22788F0B25B9FF02D0A5393F6A7E05F3971A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66012dc833ef5879b2717cae6572fbb8f0694b01c5e23f4ffabd6242d2a8adca

File Explorer

66012dc833ef5879b2717cae6572fbb8f0694b01c5e23f4ffabd6242d2a8adca

.exe 3.6MB

66012dc833ef5879b2717cae6572fbb8f0694b01c5e23f4ffabd6242d2a8adca

IMPHASH 1ebd2a82e5f9c274c530e3700b0dcd2e
SHA256 66012dc833ef5879b2717cae6572fbb8f0694b01c5e23f4ffabd6242d2a8adca
MD5 3d7b36a8786bd9f5c3944d80a3354ec7
SHA1 78f6909c7d93198da24e2fbd36a5cc7e64fabf44
SHA512 2394ea0fe38a1df8b13e0a8dcb758dd86db164dfefc3498fa772c6e3765c4cf3aed8fc1fb6adbe4a8e8e3591c379ffc7facdd8034aa35b451f93327bdd51e6e4
SSDEEP 49152:CtV8k/jME+F7aGsbbKnjQdYn0zXzeOWncCxSm7sszbYyvK8k6+cb/PL+mtCkdUe/:CtKA+F7OKYoxSenTLT1J
TLSH
T1A9067C92F19B94BCE40DC470834656776A22788F0B25B9FF02D0A5393F6A7E05F3971A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2387516

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

sc_windows.pdb

user32

SetWindowTextW SetPropW SetWindowLongPtrW FindWindowW SetFocus UnregisterHotKey GetWindow FillRect GetSysColorBrush SendMessageW IsChild BringWindowToTop IsWindow DestroyMenu TrackPopupMenu GetCursorPos AppendMenuW CreatePopupMenu PostMessageW SetCapture ReleaseCapture CallWindowProcW ValidateRect AdjustWindowRectEx GetSystemMetricsForDpi GetDpiForWindow GetWindowLongW GetClientRect GetPropW SetClipboardData CloseClipboard EmptyClipboard OpenClipboard ReleaseDC GetDC GetDlgCtrlID GetParent EnumChildWindows IsIconic GetClassNameW GetWindowTextW GetWindowRect EnumWindows DispatchMessageW TranslateMessage GetMessageW CreateWindowExW RegisterClassW TrackMouseEvent UpdateWindow InvalidateRect SetWindowPos SetForegroundWindow RegisterHotKey RemovePropW LoadIconW SetCursor LoadCursorW LoadImageW DestroyWindow EndPaint BeginPaint DefWindowProcW GetKeyState MessageBoxW GetSystemMetrics PostQuitMessage SetTimer ShowWindow IsWindowVisible KillTimer GetWindowLongPtrW

kernel32

SetThreadStackGuarantee GetCurrentThread HeapReAlloc FormatMessageW LoadLibraryExA SwitchToThread Sleep SetWaitableTimer GetModuleHandleW GetModuleFileNameW GetModuleHandleA ReleaseMutex GetCurrentProcessId GetProcAddress LoadLibraryA WaitForSingleObjectEx GetCurrentThreadId WaitForMultipleObjects CloseHandle UnmapViewOfFile MapViewOfFile GetCurrentProcess SetLastError DuplicateHandle VirtualProtect HeapAlloc GlobalUnlock GlobalLock GlobalAlloc SleepEx GetExitCodeProcess WaitForSingleObject IsProcessorFeaturePresent HeapFree GetProcessHeap GetLastError TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetFileInformationByHandleEx GetFileInformationByHandle CreateFileW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime FindClose FindFirstFileExW GetFullPathNameW CreateDirectoryW GetEnvironmentVariableW WideCharToMultiByte CreateMutexA lstrlenW GetCurrentDirectoryW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WriteConsoleW MultiByteToWideChar GetConsoleOutputCP GetConsoleMode GetStdHandle GetOverlappedResult GetFinalPathNameByHandleW SetEnvironmentVariableW WriteFileEx ReadFileEx CreateFileMappingW GetSystemInfo AddVectoredExceptionHandler SetFileInformationByHandle DeleteFileW CreateThread QueryPerformanceCounter QueryPerformanceFrequency CreateWaitableTimerExW CreateEventW CancelIo ReadFile CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetEnvironmentStringsW FreeEnvironmentStringsW GetFileAttributesW GetTempPathW

ole32

CoInitializeEx CoInitialize CoCreateInstance CoUninitialize

shell32

Shell_NotifyIconW

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness

oleaut32

SysFreeString SysStringLen GetErrorInfo

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

gdi32

GetDIBits DeleteObject CreateSolidBrush SetBkColor SetTextColor SetBkMode GetStockObject CreateDIBSection DeleteDC BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC CreateFontW GetCurrentObject

dwmapi

DwmSetWindowAttribute DwmIsCompositionEnabled DwmExtendFrameIntoClientArea DwmDefWindowProc

d2d1

D2D1CreateFactory

dwrite

DWriteCreateFactory

comctl32

InitCommonControlsEx

comdlg32

ChooseFontW ChooseColorW GetSaveFileNameW

uxtheme

SetWindowTheme

ntdll

RtlNtStatusToDosError NtReadFile NtOpenFile NtCreateNamedPipeFile NtWriteFile

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

bcryptprimitives

ProcessPrng

vcruntime140

__current_exception_context memmove __CxxFrameHandler3 memset memcmp memcpy __C_specific_handler __current_exception _CxxThrowException

api-ms-win-crt-math-l1-1-0

fmodf acosf atan2f __setusermatherr tanf acos truncf fmod sin cos atan2 log2 tan floorf ceilf round roundf pow powf ceil floor sinf cosf

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-runtime-l1-1-0

_crt_atexit terminate _exit exit _register_onexit_function __p___argc _initterm_e _initterm _get_initial_narrow_environment __p___argv _cexit _initialize_narrow_environment _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv _set_app_type _initialize_onexit_table _seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

66012dc833ef5879b2717cae6572fbb8f0694b01c5e23f4ffabd6242d2a8adca

user32

kernel32

ole32

shell32

api-ms-win-shcore-scaling-l1-1-1

oleaut32

api-ms-win-core-synch-l1-2-0

gdi32

dwmapi

d2d1

dwrite

comctl32

comdlg32

uxtheme

ntdll

api-ms-win-core-winrt-error-l1-1-0

bcryptprimitives

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic