d8dd238dcfccb39f793debbf9cf17bc5fc8b062e45fc94975a145e5113025ebc

Sharing

Copy URL Twitter E-mail

General

Target
d8dd238dcfccb39f793debbf9cf17bc5fc8b062e45fc94975a145e5113025ebc
Size 5.4MB
Sample260820-p8jc6scq21
SHA256 d8dd238dcfccb39f793debbf9cf17bc5fc8b062e45fc94975a145e5113025ebc
MD5 a4c115799c8ff851702309a3f630b0f7
SHA1 f9bb663a6f06db916c00ebfda9c6ac8d1f0ca911
SHA512 a1676a560b12071ae7f2651e125dee1c415ef301da1c66caadb6a74c468ae2e696d25e2cd1d4507155a7611a3e0d18edcba31de4d630264069c103c9d7e6f724
SSDEEP 98304:6PXMikPbqhV5QGO4rgsI+Vymec6tBc6kz/3ec6tF46HD3ec6tF46rp3ec6tF46rH:66bq/uBEQmec6tBc6A/3ec6tF46j3ecI
TLSH
T1AD465CBBB5328B98C0DAC9B4209797A26F307C1408B5538272CE171F5F77D406DAA99F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8dd238dcfccb39f793debbf9cf17bc5fc8b062e45fc94975a145e5113025ebc

File Explorer

d8dd238dcfccb39f793debbf9cf17bc5fc8b062e45fc94975a145e5113025ebc

.exe 5.4MB

d8dd238dcfccb39f793debbf9cf17bc5fc8b062e45fc94975a145e5113025ebc

IMPHASH efd1bc755912408fee16a44a3161ee7b
SHA256 d8dd238dcfccb39f793debbf9cf17bc5fc8b062e45fc94975a145e5113025ebc
MD5 a4c115799c8ff851702309a3f630b0f7
SHA1 f9bb663a6f06db916c00ebfda9c6ac8d1f0ca911
SHA512 a1676a560b12071ae7f2651e125dee1c415ef301da1c66caadb6a74c468ae2e696d25e2cd1d4507155a7611a3e0d18edcba31de4d630264069c103c9d7e6f724
SSDEEP 98304:6PXMikPbqhV5QGO4rgsI+Vymec6tBc6kz/3ec6tF46HD3ec6tF46rp3ec6tF46rH:66bq/uBEQmec6tBc6A/3ec6tF46j3ecI
TLSH
T1AD465CBBB5328B98C0DAC9B4209797A26F307C1408B5538272CE171F5F77D406DAA99F
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetStdHandle GetConsoleMode TlsGetValue GetLastError SetLastError RaiseException GetTickCount ExitProcess GetStartupInfoA GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer SetEndOfFile GetSystemInfo LoadLibraryW LoadLibraryA GetProcAddress FreeLibrary FormatMessageW DeleteFileW CreateFileW GetFileAttributesW RemoveDirectoryW SetCurrentDirectoryW GetCurrentDirectoryW GetFullPathNameW SetEnvironmentVariableW GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority GetCurrentThread OpenThread IsDebuggerPresent CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection GetEnvironmentStringsW FreeEnvironmentStringsW MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind RtlUnwindEx EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource FormatMessageA GlobalAddAtomA GetWindowsDirectoryA GetVersionExA CompareStringA GetLocaleInfoA GetDateFormatA EnumCalendarInfoA GetModuleFileNameW GetModuleHandleW GetCommandLineW FindNextFileW CompareStringW GetLocaleInfoW GetDateFormatW FindFirstFileExW GlobalAlloc GlobalReAlloc GlobalSize GlobalLock GlobalUnlock GetExitCodeProcess GlobalDeleteAtom DeviceIoControl FindClose MulDiv GetLocalTime FileTimeToLocalFileTime FileTimeToSystemTime FileTimeToDosDateTime PeekNamedPipe GetCPInfo GetThreadLocale SetThreadLocale GetUserDefaultLCID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen VariantChangeTypeEx VariantClear VariantCopy VariantInit SafeArrayAccessData SafeArrayCreate SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayRedim SafeArrayUnaccessData

user32

MessageBoxA CharUpperBuffW CharLowerBuffW RegisterWindowMessageA SendMessageA PostMessageA DefWindowProcA CallWindowProcA RegisterClassA UnregisterClassA GetClassInfoA RegisterClassExA GetClassInfoExA CreateWindowExA RegisterClipboardFormatA GetClipboardFormatNameA CharToOemA CharUpperA CharUpperBuffA CharLowerA CharLowerBuffA GetMenuItemInfoA SetPropA GetPropA RemovePropA EnumPropsA GetWindowLongA GetClassLongA SetClassLongPtrA FindWindowA FindWindowExA GetClassNameA LoadBitmapA LoadCursorA LoadIconA LoadImageA SystemParametersInfoA DispatchMessageW PeekMessageW SendMessageW DefWindowProcW CallWindowProcW RegisterClassW UnregisterClassW GetClassInfoW CreateWindowExW InsertMenuItemW GetMenuItemInfoW SetMenuItemInfoW DrawTextW DrawStateW SetWindowTextW GetWindowTextW GetWindowTextLengthW MessageBoxW GetWindowLongPtrW SetWindowLongPtrW DefFrameProcW DefMDIChildProcW TranslateMessage GetDoubleClickTime IsWindow IsMenu DestroyWindow ShowWindow ShowWindowAsync MoveWindow SetWindowPos GetWindowPlacement SetWindowPlacement BeginDeferWindowPos DeferWindowPos EndDeferWindowPos IsWindowVisible IsIconic BringWindowToTop IsZoomed OpenClipboard CloseClipboard SetClipboardData GetClipboardData CountClipboardFormats EnumClipboardFormats EmptyClipboard IsClipboardFormatAvailable SetFocus GetActiveWindow GetFocus GetKeyState GetCapture SetCapture ReleaseCapture MsgWaitForMultipleObjects SetTimer KillTimer EnableWindow IsWindowEnabled GetSystemMetrics GetMenu SetMenu DrawMenuBar GetSystemMenu CreateMenu CreatePopupMenu DestroyMenu EnableMenuItem GetSubMenu GetMenuItemCount RemoveMenu DeleteMenu GetMenuItemRect UpdateWindow SetActiveWindow GetForegroundWindow SetForegroundWindow WindowFromDC GetDC GetDCEx GetWindowDC ReleaseDC BeginPaint EndPaint GetUpdateRect SetWindowRgn InvalidateRect InvalidateRgn RedrawWindow ScrollWindowEx ShowScrollBar EnableScrollBar GetClientRect GetWindowRect AdjustWindowRectEx MessageBeep SetCursorPos SetCursor GetCursorPos CreateCaret DestroyCaret HideCaret ShowCaret SetCaretPos GetCaretPos ClientToScreen ScreenToClient MapWindowPoints WindowFromPoint GetSysColor GetSysColorBrush SetSysColors DrawFocusRect FillRect FrameRect SetRect InflateRect IntersectRect UnionRect OffsetRect GetDesktopWindow GetParent SetParent EnumChildWindows EnumThreadWindows GetTopWindow GetWindowThreadProcessId GetLastActivePopup GetWindow CallNextHookEx DestroyCursor DestroyIcon CopyImage CreateIconIndirect GetIconInfo SetScrollInfo GetScrollInfo TranslateMDISysAccel DrawEdge DrawFrameControl TrackPopupMenuEx ChildWindowFromPointEx DrawIconEx FlashWindowEx

ole32

CoTaskMemFree OleInitialize OleUninitialize CoInitializeEx CoUninitialize CoInitialize CoTaskMemAlloc GetErrorInfo

shlwapi

AssocQueryStringW

advapi32

RegQueryInfoKeyA RegQueryValueExW RegCreateKeyExW RegEnumKeyExW RegOpenKeyExW RegCloseKey RegFlushKey

gdi32

AddFontResourceA CreateFontIndirectA EnumFontFamiliesA GetCharABCWidthsA GetTextExtentPointA GetTextMetricsA GetObjectA ExtTextOutA CreateFontIndirectW EnumFontFamiliesExW GetCharABCWidthsW GetTextExtentPoint32W GetTextExtentExPointW GetObjectW TextOutW ExtTextOutW GetRandomRgn Arc BitBlt Chord CombineRgn CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBitmap CreateEllipticRgn CreatePen CreatePenIndirect CreatePatternBrush CreateRectRgn CreateRoundRectRgn CreateSolidBrush DeleteDC DeleteObject Ellipse EqualRgn ExcludeClipRect ExtCreateRegion ExtFloodFill FillRgn GetROP2 GetBkColor GetBitmapBits GetClipBox GetClipRgn GetCurrentObject GetDeviceCaps GetDIBits GetMapMode GetObjectType GetPixel GetRegionData GetRgnBox GetStockObject GetTextAlign GetTextColor GetViewportExtEx GetViewportOrgEx GetWindowExtEx GetWindowOrgEx IntersectClipRect LineTo MaskBlt OffsetRgn PatBlt Pie PaintRgn PtInRegion RectInRegion RectVisible Rectangle RestoreDC RealizePalette RoundRect SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetMapMode SetPixel SetPolyFillMode StretchBlt SetRectRgn StretchDIBits SetROP2 SetStretchBltMode SetTextCharacterExtra SetTextColor SetTextAlign CreateDIBSection SetArcDirection ExtCreatePen MoveToEx CreatePolygonRgn DPtoLP LPtoDP Polygon Polyline PolyBezier SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx SetBrushOrgEx GetDCOrgEx

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

shell32

DragQueryFileA Shell_NotifyIconA DragQueryFileW ShellExecuteW Shell_NotifyIconW DragFinish DragAcceptFiles GetCurrentProcessExplicitAppUserModelID

comctl32

InitCommonControls ImageList_Create ImageList_Destroy ImageList_GetImageCount ImageList_SetImageCount ImageList_Add ImageList_Replace ImageList_AddMasked ImageList_DrawEx ImageList_DrawIndirect ImageList_Remove ImageList_Copy ImageList_BeginDrag ImageList_EndDrag ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock _TrackMouseEvent SetWindowSubclass RemoveWindowSubclass DefSubclassProc

wininet

InternetOpenA InternetCloseHandle InternetOpenUrlA InternetReadFile InternetGetConnectedState

Name

.text

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

153KB

Virtual Size

153KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

190KB

Virtual Size

190KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

d8dd238dcfccb39f793debbf9cf17bc5fc8b062e45fc94975a145e5113025ebc

kernel32

oleaut32

user32

ole32

shlwapi

advapi32

gdi32

version

shell32

comctl32

wininet

generic