c3d01222bb4b9b2d43402f5547858d8fde6ee4a018904adad1b146d502938c49

Sharing

Copy URL Twitter E-mail

General

Target
c3d01222bb4b9b2d43402f5547858d8fde6ee4a018904adad1b146d502938c49
Size 516KB
Sample260814-aekltazzbs
SHA256 c3d01222bb4b9b2d43402f5547858d8fde6ee4a018904adad1b146d502938c49
MD5 8ddc5bbb75dcea13281b701c0da3c7f6
SHA1 c672a8090fceaf5455fee86ab7321b59cafe3358
SHA512 4d852df69a0f16e6ee83b6ab16678117705fbce33a4f79345b86dd85ac029676a020dd4271815902f49f966a945bb860a6af00fe578a4786063130666ab8d038
SSDEEP 6144:9HiKLXAVFVWGNRg0HuwKHH6DT9ylW+rmlCWem29Sr5vsf:9HiUXgj3K0HunAmW+7
TLSH
T1B4B41817E65672BBC09EC63651A39330B6F6B08143145ACF7394DE356CE6BC03A7E268
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3d01222bb4b9b2d43402f5547858d8fde6ee4a018904adad1b146d502938c49

File Explorer

c3d01222bb4b9b2d43402f5547858d8fde6ee4a018904adad1b146d502938c49

.dll 516KB

c3d01222bb4b9b2d43402f5547858d8fde6ee4a018904adad1b146d502938c49

IMPHASH 6688b607e3646a848d1ba06fe3dbec9a
SHA256 c3d01222bb4b9b2d43402f5547858d8fde6ee4a018904adad1b146d502938c49
MD5 8ddc5bbb75dcea13281b701c0da3c7f6
SHA1 c672a8090fceaf5455fee86ab7321b59cafe3358
SHA512 4d852df69a0f16e6ee83b6ab16678117705fbce33a4f79345b86dd85ac029676a020dd4271815902f49f966a945bb860a6af00fe578a4786063130666ab8d038
SSDEEP 6144:9HiKLXAVFVWGNRg0HuwKHH6DT9ylW+rmlCWem29Sr5vsf:9HiUXgj3K0HunAmW+7
TLSH
T1B4B41817E65672BBC09EC63651A39330B6F6B08143145ACF7394DE356CE6BC03A7E268
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

319440

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

user32

GetDpiForSystem

advapi32

RegCloseKey RegEnumValueW RegOpenKeyA RegOpenKeyW RegQueryValueExW

win32u

NtGdiAbortDoc NtGdiAbortPath NtGdiAddFontMemResourceEx NtGdiAddFontResourceW NtGdiAlphaBlend NtGdiAngleArc NtGdiArcInternal NtGdiBeginPath NtGdiBitBlt NtGdiCancelDC NtGdiCloseFigure NtGdiCombineRgn NtGdiComputeXformCoefficients NtGdiCreateBitmap NtGdiCreateClientObj NtGdiCreateCompatibleBitmap NtGdiCreateCompatibleDC NtGdiCreateDIBBrush NtGdiCreateDIBSection NtGdiCreateDIBitmapInternal NtGdiCreateEllipticRgn NtGdiCreateHalftonePalette NtGdiCreateHatchBrushInternal NtGdiCreateMetafileDC NtGdiCreatePaletteInternal NtGdiCreatePatternBrushInternal NtGdiCreatePen NtGdiCreateRectRgn NtGdiCreateRoundRectRgn NtGdiCreateSolidBrush NtGdiDeleteClientObj NtGdiDeleteObjectApp NtGdiDescribePixelFormat NtGdiDoPalette NtGdiDrawStream NtGdiEllipse NtGdiEndDoc NtGdiEndPage NtGdiEndPath NtGdiEnumFonts NtGdiEqualRgn NtGdiExcludeClipRect NtGdiExtCreatePen NtGdiExtCreateRegion NtGdiExtEscape NtGdiExtFloodFill NtGdiExtGetObjectW NtGdiExtSelectClipRgn NtGdiExtTextOutW NtGdiFillPath NtGdiFillRgn NtGdiFlattenPath NtGdiFlush NtGdiFontIsLinked NtGdiFrameRgn NtGdiGetAndSetDCDword NtGdiGetAppClipBox NtGdiGetBitmapBits NtGdiGetBitmapDimension NtGdiGetBoundsRect NtGdiGetCharABCWidthsW NtGdiGetCharWidthInfo NtGdiGetCharWidthW NtGdiGetColorAdjustment NtGdiGetDCObject NtGdiGetDIBitsInternal NtGdiGetDeviceCaps NtGdiGetDeviceGammaRamp NtGdiGetFontData NtGdiGetFontFileData NtGdiGetFontFileInfo NtGdiGetFontUnicodeRanges NtGdiGetGlyphIndicesW NtGdiGetGlyphOutline NtGdiGetKerningPairs NtGdiGetMiterLimit NtGdiGetNearestColor NtGdiGetNearestPaletteIndex NtGdiGetOutlineTextMetricsInternalW NtGdiGetPath NtGdiGetPixel NtGdiGetRandomRgn NtGdiGetRasterizerCaps NtGdiGetRealizationInfo NtGdiGetRegionData NtGdiGetRgnBox NtGdiGetSpoolMessage NtGdiGetSystemPaletteUse NtGdiGetTextCharsetInfo NtGdiGetTextExtentExW NtGdiGetTextFaceW NtGdiGetTextMetricsW NtGdiGetTransform NtGdiGradientFill NtGdiHfontCreate NtGdiIcmBrushInfo NtGdiInitSpool NtGdiIntersectClipRect NtGdiInvertRgn NtGdiLineTo NtGdiMakeFontDir NtGdiMaskBlt NtGdiModifyWorldTransform NtGdiMoveTo NtGdiOffsetClipRgn NtGdiOffsetRgn NtGdiOpenDCW NtGdiPatBlt NtGdiPathToRegion NtGdiPlgBlt NtGdiPolyDraw NtGdiPolyPolyDraw NtGdiPtInRegion NtGdiPtVisible NtGdiRectInRegion NtGdiRectVisible NtGdiRectangle NtGdiRemoveFontMemResourceEx NtGdiRemoveFontResourceW NtGdiResetDC NtGdiResizePalette NtGdiRestoreDC NtGdiRoundRect NtGdiSaveDC NtGdiScaleViewportExtEx NtGdiScaleWindowExtEx NtGdiSelectBitmap NtGdiSelectBrush NtGdiSelectClipPath NtGdiSelectFont NtGdiSelectPen NtGdiSetBitmapBits NtGdiSetBitmapDimension NtGdiSetBoundsRect NtGdiSetColorAdjustment NtGdiSetDIBitsToDeviceInternal NtGdiSetDeviceGammaRamp NtGdiSetLayout NtGdiSetMagicColors NtGdiSetMetaRgn NtGdiSetMiterLimit NtGdiSetPixel NtGdiSetPixelFormat NtGdiSetRectRgn NtGdiSetSystemPaletteUse NtGdiSetTextJustification NtGdiSetVirtualResolution NtGdiStartDoc NtGdiStartPage NtGdiStretchBlt NtGdiStretchDIBitsInternal NtGdiStrokeAndFillPath NtGdiStrokePath NtGdiSwapBuffers NtGdiTransformPoints NtGdiTransparentBlt NtGdiUnrealizeObject NtGdiUpdateColors NtGdiWidenPath NtUserCallHwndParam NtUserCallOneParam NtUserRealizePalette NtUserSelectPalette

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _assert _strdup _wcsicmp _wcsnicmp bsearch calloc floor free fwrite getenv iswdigit malloc memchr memcmp memcpy memmove memset qsort realloc strchr strcmp strcpy strcspn strlen strnlen strrchr wcscat wcschr wcscpy wcslen

kernel32

CloseHandle ConvertDefaultLocale CreateFileA CreateFileMappingA CreateFileMappingW CreateFileW DelayLoadFailureHook DisableThreadLibraryCalls EnterCriticalSection FindResourceW FreeLibrary GetACP GetCPInfo GetFileSize GetFileSizeEx GetLocaleInfoW GetModuleHandleW GetOEMCP GetProcAddress GetProfileStringW GetStringTypeW GetSystemDirectoryW GetTickCount GetVersion GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc HeapSize IsBadStringPtrA IsBadStringPtrW IsDBCSLeadByte IsDBCSLeadByteEx IsValidLocale LeaveCriticalSection LoadLibraryW LoadResource LockResource MapViewOfFile MulDiv MultiByteToWideChar RaiseException ReadFile ResolveDelayLoadedAPI UnmapViewOfFile WideCharToMultiByte WriteFile __chkstk

ntdll

RtlCreateUnicodeStringFromAsciiz RtlDosPathNameToNtPathName_U RtlFreeUnicodeString _vsnprintf

AbortDoc AbortPath AddFontMemResourceEx AddFontResourceA AddFontResourceExA AddFontResourceExW AddFontResourceTracking AddFontResourceW AngleArc AnimatePalette Arc ArcTo BeginPath BitBlt ByeByeGDI CancelDC CheckColorsInGamut ChoosePixelFormat Chord CloseEnhMetaFile CloseFigure CloseMetaFile ColorCorrectPalette ColorMatchToTarget CombineRgn CombineTransform CopyEnhMetaFileA CopyEnhMetaFileW CopyMetaFileA CopyMetaFileW CreateBitmap CreateBitmapIndirect CreateBrushIndirect CreateColorSpaceA CreateColorSpaceW CreateCompatibleBitmap CreateCompatibleDC CreateDCA CreateDCW CreateDIBPatternBrush CreateDIBPatternBrushPt CreateDIBSection CreateDIBitmap CreateDiscardableBitmap CreateEllipticRgn CreateEllipticRgnIndirect CreateEnhMetaFileA CreateEnhMetaFileW CreateFontA CreateFontIndirectA CreateFontIndirectExA CreateFontIndirectExW CreateFontIndirectW CreateFontW CreateHalftonePalette CreateHatchBrush CreateICA CreateICW CreateMetaFileA CreateMetaFileW CreatePalette CreatePatternBrush CreatePen CreatePenIndirect CreatePolyPolygonRgn CreatePolygonRgn CreateRectRgn CreateRectRgnIndirect CreateRoundRectRgn CreateScalableFontResourceA CreateScalableFontResourceW CreateSolidBrush D3DKMTAcquireKeyedMutex D3DKMTAcquireKeyedMutex2 D3DKMTCheckOcclusion D3DKMTCheckVidPnExclusiveOwnership D3DKMTCloseAdapter D3DKMTCreateAllocation D3DKMTCreateAllocation2 D3DKMTCreateDCFromMemory D3DKMTCreateDevice D3DKMTCreateKeyedMutex D3DKMTCreateKeyedMutex2 D3DKMTCreateSynchronizationObject D3DKMTCreateSynchronizationObject2 D3DKMTDestroyAllocation D3DKMTDestroyAllocation2 D3DKMTDestroyDCFromMemory D3DKMTDestroyDevice D3DKMTDestroyKeyedMutex D3DKMTDestroySynchronizationObject D3DKMTEnumAdapters D3DKMTEnumAdapters2 D3DKMTEscape D3DKMTOpenAdapterFromDeviceName D3DKMTOpenAdapterFromGdiDisplayName D3DKMTOpenAdapterFromHdc D3DKMTOpenAdapterFromLuid D3DKMTOpenKeyedMutex D3DKMTOpenKeyedMutex2 D3DKMTOpenKeyedMutexFromNtHandle D3DKMTOpenNtHandleFromName D3DKMTOpenResource D3DKMTOpenResource2 D3DKMTOpenResourceFromNtHandle D3DKMTOpenSyncObjectFromNtHandle D3DKMTOpenSyncObjectFromNtHandle2 D3DKMTOpenSyncObjectNtHandleFromName D3DKMTOpenSynchronizationObject D3DKMTQueryAdapterInfo D3DKMTQueryResourceInfo D3DKMTQueryResourceInfoFromNtHandle D3DKMTQueryStatistics D3DKMTQueryVideoMemoryInfo D3DKMTReleaseKeyedMutex D3DKMTReleaseKeyedMutex2 D3DKMTSetQueuedLimit D3DKMTSetVidPnSourceOwner D3DKMTShareObjects D3DKMTSignalSynchronizationObjectFromCpu D3DKMTWaitForSynchronizationObjectFromCpu DPtoLP DeleteColorSpace DeleteDC DeleteEnhMetaFile DeleteMetaFile DeleteObject DescribePixelFormat DeviceCapabilitiesEx DeviceCapabilitiesExA DeviceCapabilitiesExW DrawEscape DwmCreatedBitmapRemotingOutput Ellipse EnableEUDC EndDoc EndPage EndPath EnumEnhMetaFile EnumFontFamiliesA EnumFontFamiliesExA EnumFontFamiliesExW EnumFontFamiliesW EnumFontsA EnumFontsW EnumICMProfilesA EnumICMProfilesW EnumMetaFile EnumObjects EqualRgn Escape ExcludeClipRect ExtCreatePen ExtCreateRegion ExtEscape ExtFloodFill ExtSelectClipRgn ExtTextOutA ExtTextOutW FillPath FillRgn FixBrushOrgEx FlattenPath FloodFill FontIsLinked FrameRgn FreeImageColorMatcher GdiAlphaBlend GdiAssociateObject GdiCleanCacheDC GdiComment GdiConvertAndCheckDC GdiConvertBitmap GdiConvertBrush GdiConvertDC GdiConvertEnhMetaFile GdiConvertFont GdiConvertMetaFilePict GdiConvertPalette GdiConvertRegion GdiConvertToDevmodeW GdiCreateLocalBitmap GdiCreateLocalBrush GdiCreateLocalEnhMetaFile GdiCreateLocalFont GdiCreateLocalMetaFilePict GdiCreateLocalPalette GdiCreateLocalRegion GdiDciBeginAccess GdiDciCreateOffscreenSurface GdiDciCreateOverlaySurface GdiDciCreatePrimarySurface GdiDciDestroySurface GdiDciDrawSurface GdiDciEndAccess GdiDciEnumSurface GdiDciInitialize GdiDciSetClipList GdiDciSetDestination GdiDeleteLocalDC GdiDeleteLocalObject GdiDeleteSpoolFileHandle GdiDescribePixelFormat GdiDllInitialize GdiDrawStream GdiEntry13 GdiFlush GdiGetBatchLimit GdiGetCharDimensions GdiGetCodePage GdiGetDevmodeForPage GdiGetLocalBitmap GdiGetLocalBrush GdiGetLocalDC GdiGetLocalFont GdiGetSpoolFileHandle GdiGetSpoolMessage GdiGradientFill GdiInitSpool GdiInitializeLanguagePack GdiIsMetaFileDC GdiIsMetaPrintDC GdiIsPlayMetafileDC GdiPlayDCScript GdiPlayJournal GdiPlayScript GdiRealizationInfo GdiReleaseLocalDC GdiSetAttrs GdiSetBatchLimit GdiSetPixelFormat GdiSetServerAttr GdiSwapBuffers GdiTransparentBlt GdiWinWatchClose GdiWinWatchDidStatusChange GdiWinWatchGetClipList GdiWinWatchOpen GetArcDirection GetAspectRatioFilterEx GetBitmapBits GetBitmapDimensionEx GetBkColor GetBkMode GetBoundsRect GetBrushOrgEx GetCharABCWidthsA GetCharABCWidthsFloatA GetCharABCWidthsFloatW GetCharABCWidthsI GetCharABCWidthsW GetCharWidth32A GetCharWidth32W GetCharWidthA GetCharWidthFloatA GetCharWidthFloatW GetCharWidthI GetCharWidthInfo GetCharWidthW GetCharWidthWOW GetCharacterPlacementA GetCharacterPlacementW GetClipBox GetClipRgn GetColorAdjustment GetColorSpace GetCurrentObject GetCurrentPositionEx GetDCBrushColor GetDCOrgEx GetDCPenColor GetDIBColorTable GetDIBits GetDeviceCaps GetDeviceGammaRamp GetETM GetEnhMetaFileA GetEnhMetaFileBits GetEnhMetaFileDescriptionA GetEnhMetaFileDescriptionW GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetEnhMetaFilePixelFormat GetEnhMetaFileW GetFontData GetFontFileData GetFontFileInfo GetFontLanguageInfo GetFontRealizationInfo GetFontResourceInfo GetFontResourceInfoW GetFontUnicodeRanges GetGlyphIndicesA GetGlyphIndicesW GetGlyphOutline GetGlyphOutlineA GetGlyphOutlineW GetGlyphOutlineWow GetGraphicsMode GetICMProfileA GetICMProfileW GetKerningPairs GetKerningPairsA GetKerningPairsW GetLayout GetLogColorSpaceA GetLogColorSpaceW GetMapMode GetMetaFileA GetMetaFileBitsEx GetMetaFileW GetMetaRgn GetMiterLimit GetNearestColor GetNearestPaletteIndex GetObjectA GetObjectType GetObjectW GetOutlineTextMetricsA GetOutlineTextMetricsW GetPaletteEntries GetPath GetPixel GetPixelFormat GetPolyFillMode GetROP2 GetRandomRgn GetRasterizerCaps GetRegionData GetRelAbs GetRgnBox GetStockObject GetStretchBltMode GetSystemPaletteEntries GetSystemPaletteUse GetTextAlign GetTextCharacterExtra GetTextCharset GetTextCharsetInfo GetTextColor GetTextExtentExPointA GetTextExtentExPointI GetTextExtentExPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextExtentPointI GetTextExtentPointW GetTextFaceA GetTextFaceW GetTextMetricsA GetTextMetricsW GetTransform GetViewportExtEx GetViewportOrgEx GetWinMetaFileBits GetWindowExtEx GetWindowOrgEx GetWorldTransform IntersectClipRect InvertRgn LPtoDP LineDDA LineTo LoadImageColorMatcherA LoadImageColorMatcherW MaskBlt MirrorRgn ModifyWorldTransform MoveToEx NamedEscape OffsetClipRgn OffsetRgn OffsetViewportOrgEx OffsetWindowOrgEx PaintRgn PatBlt PathToRegion Pie PlayEnhMetaFile PlayEnhMetaFileRecord PlayMetaFile PlayMetaFileRecord PlgBlt PolyBezier PolyBezierTo PolyDraw PolyPolygon PolyPolyline PolyTextOutA PolyTextOutW Polygon Polyline PolylineTo PtInRegion PtVisible RealizePalette RectInRegion RectVisible Rectangle RemoveFontMemResourceEx RemoveFontResourceA RemoveFontResourceExA RemoveFontResourceExW RemoveFontResourceTracking RemoveFontResourceW ResetDCA ResetDCW ResizePalette RestoreDC RoundRect SaveDC ScaleViewportExtEx ScaleWindowExtEx ScriptApplyDigitSubstitution ScriptApplyLogicalWidth ScriptBreak ScriptCPtoX ScriptCacheGetHeight ScriptFreeCache ScriptGetCMap ScriptGetFontAlternateGlyphs ScriptGetFontFeatureTags ScriptGetFontLanguageTags ScriptGetFontProperties ScriptGetFontScriptTags ScriptGetGlyphABCWidth ScriptGetLogicalWidths ScriptGetProperties ScriptIsComplex ScriptItemize ScriptItemizeOpenType ScriptJustify ScriptLayout ScriptPlace ScriptPlaceOpenType ScriptRecordDigitSubstitution ScriptShape ScriptShapeOpenType ScriptStringAnalyse ScriptStringCPtoX ScriptStringFree ScriptStringGetLogicalWidths ScriptStringGetOrder ScriptStringOut ScriptStringValidate ScriptStringXtoCP ScriptString_pLogAttr ScriptString_pSize ScriptString_pcOutChars ScriptTextOut ScriptXtoCP SelectBrushLocal SelectClipPath SelectClipRgn SelectFontLocal SelectObject SelectPalette SetAbortProc SetArcDirection SetBitmapBits SetBitmapDimensionEx SetBkColor SetBkMode SetBoundsRect SetBrushOrgEx SetColorAdjustment SetColorSpace SetDCBrushColor SetDCPenColor SetDIBColorTable SetDIBits SetDIBitsToDevice SetDeviceGammaRamp SetEnhMetaFileBits SetFontEnumeration SetGraphicsMode SetICMMode SetICMProfileA SetICMProfileW SetLayout SetMagicColors SetMapMode SetMapperFlags SetMetaFileBitsEx SetMetaRgn SetMiterLimit SetObjectOwner SetPaletteEntries SetPixel SetPixelFormat SetPixelV SetPolyFillMode SetROP2 SetRectRgn SetRelAbs SetStretchBltMode SetSystemPaletteUse SetTextAlign SetTextCharacterExtra SetTextColor SetTextJustification SetViewportExtEx SetViewportOrgEx SetVirtualResolution SetWinMetaFileBits SetWindowExtEx SetWindowOrgEx SetWorldTransform StartDocA StartDocW StartPage StretchBlt StretchDIBits StrokeAndFillPath StrokePath SwapBuffers TextOutA TextOutW TranslateCharsetInfo UnloadNetworkFonts UnrealizeObject UpdateColors UpdateICMRegKey UpdateICMRegKeyA UpdateICMRegKeyW WidenPath gdiPlaySpoolStream pfnRealizePalette pfnSelectPalette pstackConnect

Name

.text

Size

316KB

Virtual Size

312KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

148KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

16KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

20KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c3d01222bb4b9b2d43402f5547858d8fde6ee4a018904adad1b146d502938c49

user32

advapi32

win32u

ucrtbase

kernel32

ntdll

generic