7c24f5dd002df09b94b54751d491f8e4a0c3f8d607a61a6d753bcf7f91a7bf53

Sharing

Copy URL Twitter E-mail

General

Target
7c24f5dd002df09b94b54751d491f8e4a0c3f8d607a61a6d753bcf7f91a7bf53
Size 11.4MB
Sample260814-gr57lsff34
SHA256 7c24f5dd002df09b94b54751d491f8e4a0c3f8d607a61a6d753bcf7f91a7bf53
MD5 831f1b59dd8da893a4f9e3db523d7804
SHA1 607041aac2fc872a639c684e92732d548d77640f
SHA512 9663816d6337c20c8fa614c106c6dad775600652b7df2f00c675f8fa490a3d942f05ee4287a50911f7eeeb69babf599268509dadf6299023d830893be8ef3de7
SSDEEP 98304:Cw5kIPC7eNwIGFqRrzvZgSPwS8NyZLREsxm8F0aGY:/5kQXMARrzxXPwS88RJ3F/G
TLSH
T17AC69D57A3B105E8C5BBC078CA76BA03E771741803B05BEB26A085E56F27AE01E7F751
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c24f5dd002df09b94b54751d491f8e4a0c3f8d607a61a6d753bcf7f91a7bf53

File Explorer

7c24f5dd002df09b94b54751d491f8e4a0c3f8d607a61a6d753bcf7f91a7bf53

.exe 11.4MB

7c24f5dd002df09b94b54751d491f8e4a0c3f8d607a61a6d753bcf7f91a7bf53

IMPHASH 65b553e4005898db49d04f0330da4f18
SHA256 7c24f5dd002df09b94b54751d491f8e4a0c3f8d607a61a6d753bcf7f91a7bf53
MD5 831f1b59dd8da893a4f9e3db523d7804
SHA1 607041aac2fc872a639c684e92732d548d77640f
SHA512 9663816d6337c20c8fa614c106c6dad775600652b7df2f00c675f8fa490a3d942f05ee4287a50911f7eeeb69babf599268509dadf6299023d830893be8ef3de7
SSDEEP 98304:Cw5kIPC7eNwIGFqRrzvZgSPwS8NyZLREsxm8F0aGY:/5kQXMARrzxXPwS88RJ3F/G
TLSH
T17AC69D57A3B105E8C5BBC078CA76BA03E771741803B05BEB26A085E56F27AE01E7F751
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6957912

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wsock32

closesocket listen inet_ntoa bind accept htons connect ntohl WSACleanup WSAStartup socket setsockopt send recv ntohs WSAGetLastError

ws2_32

freeaddrinfo inet_pton getaddrinfo

shlwapi

ord12

ole32

CreateStreamOnHGlobal CoUninitialize CoCreateInstance CoInitialize GetHGlobalFromStream CoInitializeEx

kernel32

GetTimeFormatW GetCommandLineW GetCommandLineA GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapReAlloc ReadConsoleW GetStdHandle GetConsoleMode SetConsoleMode GetConsoleScreenBufferInfo GetLastError GetCurrentProcessId LocalFree FormatMessageA GetConsoleWindow CloseHandle ReleaseMutex CreateMutexA SetConsoleOutputCP Sleep GetCurrentThread GlobalAlloc GlobalSize GlobalUnlock GlobalLock GlobalFree MultiByteToWideChar WideCharToMultiByte FindClose FindFirstFileA FindNextFileA CreateFileW GetFileSizeEx ReadFile WriteFile InitOnceExecuteOnce SetFilePointerEx GetFileInformationByHandleEx InitializeCriticalSection EnterCriticalSection LeaveCriticalSection WaitForSingleObject DeleteCriticalSection FreeLibrary GetProcAddress LoadLibraryA QueryPerformanceCounter QueryPerformanceFrequency TlsAlloc TlsGetValue TlsSetValue TlsFree VerSetConditionMask GetModuleHandleExW FormatMessageW GetStartupInfoW GetModuleHandleW SetThreadExecutionState GetNativeSystemInfo ReleaseSemaphore CreateSemaphoreA DebugBreak DeleteFileW CreateFile2 LocalAlloc lstrlenA ReplaceFileW HeapAlloc HeapFree GetProcessHeap InitializeCriticalSectionEx InitializeConditionVariable WakeConditionVariable SleepConditionVariableCS WaitForSingleObjectEx SetThreadPriority CompareStringW InitOnceBeginInitialize InitOnceComplete GetModuleFileNameW ExitProcess GetConsoleOutputCP FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW InitializeCriticalSectionAndSpinCount RtlUnwind SetLastError RtlUnwindEx IsDebuggerPresent InitializeSListHead TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer GetSystemTimeAsFileTime IsProcessorFeaturePresent CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns GetTimeZoneInformation GetExitCodeThread SwitchToThread GetTickCount64 AreFileApisANSI GetFullPathNameW GetFinalPathNameByHandleW GetFileAttributesExW FindNextFileW FindFirstFileExW FindFirstFileW GetLocaleInfoEx SleepConditionVariableSRW GetCurrentThreadId TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive RaiseException RtlPcToFileHeader LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetFileType HeapSize SetStdHandle IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW WakeAllConditionVariable SetEndOfFile

user32

RegisterRawInputDevices GetRawInputData MonitorFromWindow SystemParametersInfoW DisplayConfigGetDeviceInfo QueryDisplayConfig GetDisplayConfigBufferSizes CreateIconIndirect LoadImageW LoadCursorW GetClassLongPtrW SetWindowLongW GetWindowLongW PtInRect OffsetRect SetRect ClipCursor WindowFromPoint ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos AdjustWindowRectEx GetWindowRect GetClientRect SetWindowTextW RemovePropW GetPropW SetPropW SetForegroundWindow GetSystemMetrics MsgWaitForMultipleObjects ReleaseCapture SetCapture GetKeyState GetActiveWindow SetFocus IsZoomed GetRawInputDeviceInfoA SetWindowPlacement GetWindowPlacement SetWindowPos MoveWindow FlashWindow SetLayeredWindowAttributes GetLayeredWindowAttributes WaitMessage PostMessageW SendMessageW GetMessageTime TrackMouseEvent EnumDisplayMonitors GetMonitorInfoW EnumDisplayDevicesW EnumDisplaySettingsExW EnumDisplaySettingsW ChangeDisplaySettingsExW ReleaseDC GetDC SetProcessDPIAware DestroyIcon MapVirtualKeyW ToUnicode DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW DefWindowProcW UnregisterDeviceNotification RegisterDeviceNotificationW PeekMessageW DispatchMessageW TranslateMessage IsClipboardFormatAvailable EmptyClipboard RegisterClipboardFormatA GetClipboardData SetClipboardData CloseClipboard OpenClipboard GetWindowThreadProcessId IsWindowVisible ShowWindow GetRawInputDeviceList ChangeWindowMessageFilterEx IsIconic BringWindowToTop

gdi32

CreateRectRgn CreateBitmap SetDeviceGammaRamp DeleteObject GetDeviceCaps DeleteDC CreateDCW CreateDIBSection DescribePixelFormat ChoosePixelFormat SetPixelFormat GetDeviceGammaRamp SwapBuffers

shell32

DragQueryPoint DragFinish DragAcceptFiles DragQueryFileW

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

ImpersonateAnonymousToken RevertToSelf

JxlColorEncodingSetToLinearSRGB JxlColorEncodingSetToSRGB JxlDecoderCloseInput JxlDecoderCreate JxlDecoderDestroy JxlDecoderExtraChannelBufferSize JxlDecoderFlushImage JxlDecoderGetBasicInfo JxlDecoderGetBoxSizeContents JxlDecoderGetBoxSizeRaw JxlDecoderGetBoxType JxlDecoderGetColorAsEncodedProfile JxlDecoderGetColorAsICCProfile JxlDecoderGetExtraChannelBlendInfo JxlDecoderGetExtraChannelInfo JxlDecoderGetExtraChannelName JxlDecoderGetFrameHeader JxlDecoderGetFrameName JxlDecoderGetICCProfileSize JxlDecoderGetIntendedDownsamplingRatio JxlDecoderImageOutBufferSize JxlDecoderPreviewOutBufferSize JxlDecoderProcessInput JxlDecoderReleaseBoxBuffer JxlDecoderReleaseInput JxlDecoderReleaseJPEGBuffer JxlDecoderReset JxlDecoderRewind JxlDecoderSetBoxBuffer JxlDecoderSetCms JxlDecoderSetCoalescing JxlDecoderSetDecompressBoxes JxlDecoderSetDesiredIntensityTarget JxlDecoderSetExtraChannelBuffer JxlDecoderSetImageOutBitDepth JxlDecoderSetImageOutBuffer JxlDecoderSetImageOutCallback JxlDecoderSetInput JxlDecoderSetJPEGBuffer JxlDecoderSetKeepOrientation JxlDecoderSetMultithreadedImageOutCallback JxlDecoderSetOutputColorProfile JxlDecoderSetParallelRunner JxlDecoderSetPreferredColorProfile JxlDecoderSetPreviewOutBuffer JxlDecoderSetProgressiveDetail JxlDecoderSetRenderSpotcolors JxlDecoderSetUnpremultiplyAlpha JxlDecoderSizeHintBasicInfo JxlDecoderSkipCurrentFrame JxlDecoderSkipFrames JxlDecoderSubscribeEvents JxlDecoderVersion JxlEncoderAddBox JxlEncoderAddChunkedFrame JxlEncoderAddImageFrame JxlEncoderAddJPEGFrame JxlEncoderAllowExpertOptions JxlEncoderCloseBoxes JxlEncoderCloseFrames JxlEncoderCloseInput JxlEncoderCollectStats JxlEncoderCreate JxlEncoderDestroy JxlEncoderDistanceFromQuality JxlEncoderFlushInput JxlEncoderFrameSettingsCreate JxlEncoderFrameSettingsSetFloatOption JxlEncoderFrameSettingsSetOption JxlEncoderGetError JxlEncoderGetRequiredCodestreamLevel JxlEncoderInitBasicInfo JxlEncoderInitBlendInfo JxlEncoderInitExtraChannelInfo JxlEncoderInitFrameHeader JxlEncoderProcessOutput JxlEncoderReset JxlEncoderSetBasicInfo JxlEncoderSetCms JxlEncoderSetCodestreamLevel JxlEncoderSetColorEncoding JxlEncoderSetDebugImageCallback JxlEncoderSetExtraChannelBlendInfo JxlEncoderSetExtraChannelBuffer JxlEncoderSetExtraChannelDistance JxlEncoderSetExtraChannelInfo JxlEncoderSetExtraChannelName JxlEncoderSetFrameBitDepth JxlEncoderSetFrameDistance JxlEncoderSetFrameHeader JxlEncoderSetFrameLossless JxlEncoderSetFrameName JxlEncoderSetICCProfile JxlEncoderSetOutputProcessor JxlEncoderSetParallelRunner JxlEncoderSetUpsamplingMode JxlEncoderStatsCreate JxlEncoderStatsDestroy JxlEncoderStatsGet JxlEncoderStatsMerge JxlEncoderStoreJPEGMetadata JxlEncoderUseBoxes JxlEncoderUseContainer JxlEncoderVersion JxlSignatureCheck

Name

.text

Size

7.1MB

Virtual Size

7.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

111KB

Virtual Size

860KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

287KB

Virtual Size

286KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

116KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

7c24f5dd002df09b94b54751d491f8e4a0c3f8d607a61a6d753bcf7f91a7bf53

wsock32

ws2_32

shlwapi

ole32

kernel32

user32

gdi32

shell32

comdlg32

advapi32

generic