30170a3c5800bf15d48023b16f1040aa98a5c912bde94661c37091ea2dfa02e4

Sharing

Copy URL Twitter E-mail

General

Target
30170a3c5800bf15d48023b16f1040aa98a5c912bde94661c37091ea2dfa02e4
Size 3.2MB
Sample260814-ewc1hsvbmg
SHA256 30170a3c5800bf15d48023b16f1040aa98a5c912bde94661c37091ea2dfa02e4
MD5 140582756a9fd82f4e104d733c47009c
SHA1 5699ad590544ec48be1c2ce34ffe6fe3a9e70aca
SHA512 3bd4c180a128a461bd8d38145fcfe78fb7c48264c723c700a47daa0567ac1a1c785c70d7851c8e0bd061c401abd6e312abeb6dbdbb7b0070608ba7480892c734
SSDEEP 49152:iSbkm4auHl7GU+M/WIKVTMAsqTCVbepvQryHNzW//Izi2B5OQdZKtgCUPGF9G7I+:iSbk3lf/ATMAsq51W//AO+KhUPGPpi
TLSH
T1F1F54A22B612C12BD4773BF48A67C9D45E61B9342422999733EB2F8F6B70B813D25707
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30170a3c5800bf15d48023b16f1040aa98a5c912bde94661c37091ea2dfa02e4

File Explorer

30170a3c5800bf15d48023b16f1040aa98a5c912bde94661c37091ea2dfa02e4

.exe 3.2MB

30170a3c5800bf15d48023b16f1040aa98a5c912bde94661c37091ea2dfa02e4

IMPHASH f4ef03dce01c5a47a65cbc6a1236fe73
SHA256 30170a3c5800bf15d48023b16f1040aa98a5c912bde94661c37091ea2dfa02e4
MD5 140582756a9fd82f4e104d733c47009c
SHA1 5699ad590544ec48be1c2ce34ffe6fe3a9e70aca
SHA512 3bd4c180a128a461bd8d38145fcfe78fb7c48264c723c700a47daa0567ac1a1c785c70d7851c8e0bd061c401abd6e312abeb6dbdbb7b0070608ba7480892c734
SSDEEP 49152:iSbkm4auHl7GU+M/WIKVTMAsqTCVbepvQryHNzW//Izi2B5OQdZKtgCUPGF9G7I+:iSbk3lf/ATMAsq51W//AO+KhUPGPpi
TLSH
T1F1F54A22B612C12BD4773BF48A67C9D45E61B9342422999733EB2F8F6B70B813D25707
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetStdHandle GetConsoleMode TlsGetValue GetLastError SetLastError GetTickCount ExitProcess GetStartupInfoA GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer SetEndOfFile GetSystemInfo LoadLibraryW LoadLibraryA GetProcAddress FreeLibrary FormatMessageW DeleteFileW CreateFileW GetFileAttributesW SetCurrentDirectoryW GetCurrentDirectoryW GetFullPathNameW GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection GetEnvironmentStringsW FreeEnvironmentStringsW RaiseException MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP RtlUnwind EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource GetEnvironmentStringsA FreeEnvironmentStringsA FormatMessageA LoadLibraryExA GlobalAddAtomA GetWindowsDirectoryA GetVersionExA CompareStringA GetLocaleInfoA GetDateFormatA EnumCalendarInfoA GetModuleFileNameW GetCommandLineW CompareStringW GetLocaleInfoW GetDateFormatW FindFirstFileExW GlobalAlloc GlobalReAlloc GlobalSize GlobalLock GlobalUnlock VirtualFree GetExitCodeProcess GlobalDeleteAtom DeviceIoControl FindClose MulDiv GetLocalTime PeekNamedPipe GetCPInfo GetThreadLocale SetThreadLocale GetUserDefaultLCID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen GetActiveObject SafeArrayCreate SafeArrayRedim SafeArrayGetUBound SafeArrayGetLBound SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetElement SafeArrayPutElement SafeArrayPtrOfIndex VariantChangeTypeEx VariantClear VariantCopy VariantInit

user32

MessageBoxA CharUpperBuffW CharLowerBuffW SendMessageA PostMessageA DefWindowProcA CallWindowProcA RegisterClassA UnregisterClassA GetClassInfoA CreateWindowExA RegisterClipboardFormatA GetClipboardFormatNameA CharToOemA CharUpperA CharUpperBuffA CharLowerA CharLowerBuffA GetMenuItemInfoA SetPropA GetPropA RemovePropA EnumPropsA GetWindowLongA SetWindowLongA SetClassLongA GetClassNameA LoadBitmapA LoadCursorA LoadIconA LoadImageA SystemParametersInfoA DispatchMessageW PeekMessageW SendMessageW DefWindowProcW CallWindowProcW RegisterClassW UnregisterClassW GetClassInfoW CreateWindowExW InsertMenuItemW GetMenuItemInfoW SetMenuItemInfoW DrawTextW DrawStateW SetWindowTextW GetWindowTextW GetWindowTextLengthW MessageBoxW GetWindowLongW SetWindowLongW TranslateMessage PostQuitMessage GetDoubleClickTime IsWindow IsMenu DestroyWindow ShowWindow ShowWindowAsync ShowOwnedPopups MoveWindow SetWindowPos GetWindowPlacement SetWindowPlacement BeginDeferWindowPos DeferWindowPos EndDeferWindowPos IsWindowVisible IsIconic BringWindowToTop IsZoomed OpenClipboard CloseClipboard SetClipboardData GetClipboardData CountClipboardFormats EnumClipboardFormats EmptyClipboard IsClipboardFormatAvailable SetFocus GetActiveWindow GetFocus GetKeyState GetCapture SetCapture ReleaseCapture MsgWaitForMultipleObjects SetTimer KillTimer EnableWindow IsWindowEnabled GetSystemMetrics GetMenu SetMenu DrawMenuBar GetSystemMenu CreateMenu CreatePopupMenu DestroyMenu EnableMenuItem GetSubMenu GetMenuItemCount RemoveMenu DeleteMenu UpdateWindow SetActiveWindow GetForegroundWindow SetForegroundWindow WindowFromDC GetDC GetDCEx GetWindowDC ReleaseDC BeginPaint EndPaint GetUpdateRect SetWindowRgn InvalidateRect InvalidateRgn RedrawWindow ScrollWindowEx ShowScrollBar EnableScrollBar GetClientRect GetWindowRect AdjustWindowRectEx MessageBeep SetCursorPos SetCursor GetCursorPos CreateCaret DestroyCaret HideCaret ShowCaret SetCaretPos GetCaretPos ClientToScreen ScreenToClient MapWindowPoints WindowFromPoint GetSysColor GetSysColorBrush SetSysColors DrawFocusRect FillRect FrameRect SetRect InflateRect IntersectRect OffsetRect GetDesktopWindow GetParent SetParent EnumThreadWindows GetTopWindow GetWindowThreadProcessId GetLastActivePopup GetWindow CallNextHookEx DestroyCursor DestroyIcon CopyImage CreateIconIndirect GetIconInfo SetScrollInfo GetScrollInfo DrawEdge DrawFrameControl TrackPopupMenuEx ChildWindowFromPointEx FlashWindowEx

gdi32

CreateFontIndirectA EnumFontFamiliesA GetCharABCWidthsA GetTextExtentPointA GetTextMetricsA GetObjectA ExtTextOutA CreateFontIndirectW EnumFontFamiliesExW GetCharABCWidthsW GetTextExtentPoint32W GetTextExtentExPointW GetObjectW TextOutW ExtTextOutW GetRandomRgn Arc BitBlt Chord CombineRgn CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBitmap CreateEllipticRgn CreatePen CreatePenIndirect CreatePatternBrush CreateRectRgn CreateRoundRectRgn CreateSolidBrush DeleteDC DeleteObject Ellipse EqualRgn ExcludeClipRect ExtCreateRegion ExtFloodFill FillRgn GetROP2 GetBkColor GetBitmapBits GetClipBox GetClipRgn GetCurrentObject GetDeviceCaps GetDIBits GetMapMode GetObjectType GetPixel GetRegionData GetRgnBox GetStockObject GetTextAlign GetTextColor GetViewportExtEx GetViewportOrgEx GetWindowExtEx GetWindowOrgEx IntersectClipRect LineTo MaskBlt OffsetRgn PatBlt Pie PaintRgn PtInRegion RectInRegion RectVisible Rectangle RestoreDC RealizePalette RoundRect SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetMapMode SetPixel SetPolyFillMode StretchBlt SetRectRgn SetROP2 SetStretchBltMode SetTextCharacterExtra SetTextColor SetTextAlign CreateDIBSection SetArcDirection ExtCreatePen MoveToEx CreatePolygonRgn DPtoLP LPtoDP Polygon Polyline PolyBezier SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx SetBrushOrgEx GetDCOrgEx

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

shell32

DragQueryFileA DragQueryFileW ShellExecuteW DragFinish DragAcceptFiles SHGetPathFromIDListW SHBrowseForFolderW

ole32

CoCreateGuid CoTaskMemFree OleInitialize OleUninitialize CoUninitialize CoCreateInstance CLSIDFromProgID CoInitialize CoTaskMemAlloc GetErrorInfo

comctl32

InitCommonControls ImageList_Create ImageList_Destroy ImageList_GetImageCount ImageList_SetImageCount ImageList_Add ImageList_Replace ImageList_AddMasked ImageList_DrawEx ImageList_DrawIndirect ImageList_Remove ImageList_Copy ImageList_BeginDrag ImageList_EndDrag ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock _TrackMouseEvent

shlwapi

AssocQueryStringW

comdlg32

ChooseColorA CommDlgExtendedError GetOpenFileNameW GetSaveFileNameW

Name

.text

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

121KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

691KB

Virtual Size

691KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

281KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

30170a3c5800bf15d48023b16f1040aa98a5c912bde94661c37091ea2dfa02e4

kernel32

oleaut32

user32

gdi32

version

shell32

ole32

comctl32

shlwapi

comdlg32

generic