0122a9d31755d6cea80e483b17f1824f637e5f3a6be5234bad1a34910d9f741c

Sharing

Copy URL Twitter E-mail

General

Target
0122a9d31755d6cea80e483b17f1824f637e5f3a6be5234bad1a34910d9f741c
Size 6.9MB
Sample260821-phebjazdkh
SHA256 0122a9d31755d6cea80e483b17f1824f637e5f3a6be5234bad1a34910d9f741c
MD5 c4b59e8a9f3e716e47f9b72c246939b5
SHA1 020d70465bf89d3526d4e0926bf93806db9af010
SHA512 9a95abc13b125c6fa8fc62d843df65ae423ed2235deb72b9fa1125f9fd51368bf74015e6d13b044f671f720bae33bd83f3473108cd7e88a9e433ecdac7a0e7ae
SSDEEP 196608:O+8gV+7kox9M238xm6SoFBQoam0iWFRQQDJx1n:O+dVMk2DsxPYLFiWFRFp
TLSH
T1867612117A90813AD9AE02F2967DBBBE156DBE7A076040C773C42DBE5D306C22B3571B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0122a9d31755d6cea80e483b17f1824f637e5f3a6be5234bad1a34910d9f741c

File Explorer

0122a9d31755d6cea80e483b17f1824f637e5f3a6be5234bad1a34910d9f741c

.dll 6.9MB

0122a9d31755d6cea80e483b17f1824f637e5f3a6be5234bad1a34910d9f741c

IMPHASH 758581010563771412b81c97f2122481
SHA256 0122a9d31755d6cea80e483b17f1824f637e5f3a6be5234bad1a34910d9f741c
MD5 c4b59e8a9f3e716e47f9b72c246939b5
SHA1 020d70465bf89d3526d4e0926bf93806db9af010
SHA512 9a95abc13b125c6fa8fc62d843df65ae423ed2235deb72b9fa1125f9fd51368bf74015e6d13b044f671f720bae33bd83f3473108cd7e88a9e433ecdac7a0e7ae
SSDEEP 196608:O+8gV+7kox9M238xm6SoFBQoam0iWFRQQDJx1n:O+dVMk2DsxPYLFiWFRFp
TLSH
T1867612117A90813AD9AE02F2967DBBBE156DBE7A076040C773C42DBE5D306C22B3571B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

931657

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\src\_LdsCode\sem\sem_inst\bin\Release\ExtInterface.pdb

kernel32

GetModuleFileNameW FreeLibrary FindResourceExW GetLocalTime GetCurrentProcess WaitForMultipleObjects Sleep CreateEventW WaitForSingleObject LoadResource DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection WideCharToMultiByte LockResource InitializeCriticalSection GetProcessHeap HeapSize HeapFree SizeofResource FindResourceW LoadLibraryW MoveFileExW MultiByteToWideChar CreateMutexW GetModuleHandleW ResumeThread ResetEvent LoadLibraryExW GetVersion IsProcessorFeaturePresent VirtualFree VirtualAlloc WriteFile SetFilePointer ReadFile GetFileSize CreateFileW CreateFileA FindNextFileW FindClose FormatMessageW LocalFree MoveFileW GetProcAddress lstrcpynW GetWindowsDirectoryW GetStartupInfoW CreateProcessW GetTempPathW SetFileAttributesW RemoveDirectoryW GetFileAttributesW DeleteFileW SetEvent WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapReAlloc HeapAlloc HeapDestroy GetLastError CloseHandle DecodePointer IsDebuggerPresent OutputDebugStringW RaiseException InitOnceBeginInitialize InitOnceComplete FormatMessageA GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId GetLocaleInfoEx WaitForSingleObjectEx GetExitCodeThread FindFirstFileExW DeviceIoControl SleepConditionVariableSRW EncodePointer LCMapStringEx QueryPerformanceCounter WakeAllConditionVariable InitOnceExecuteOnce GetSystemTimeAsFileTime CompareStringEx GetCPInfo ReleaseMutex GetCurrentProcessId FlushFileBuffers SetLastError InitializeCriticalSectionAndSpinCount lstrcpyW lstrlenW GetACP MulDiv GetTickCount ExitProcess FreeResource IsBadReadPtr lstrcmpW SetEndOfFile CreateFileMappingW MapViewOfFile UnmapViewOfFile GlobalAlloc GlobalUnlock GlobalLock GlobalFree GetTempFileNameW GetFileSizeEx UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess InitializeSListHead GetStdHandle GetSystemWindowsDirectoryW GetVersionExW lstrcmpA GetFileType GetModuleHandleA FindFirstFileA FindNextFileA CreateFileMappingA InterlockedFlushSList RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW SetFilePointerEx GetConsoleOutputCP GetConsoleMode GetTimeZoneInformation GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW SetStdHandle IsValidCodePage GetOEMCP GetCommandLineA

user32

GetWindow MonitorFromWindow DefWindowProcW CallWindowProcW RegisterClassW RegisterClassExW GetClassInfoExW EnableWindow SetPropW GetPropW LoadImageW IsIconic SetWindowRgn MessageBoxW RemovePropW CharPrevW DrawTextW SetRect GetParent GetIconInfo GetMessagePos GetDlgCtrlID DrawFocusRect FillRect HideCaret ShowCaret ClientToScreen GetSysColor GetWindowDC GetWindowTextW GetWindowTextLengthW CreateAcceleratorTableW InvalidateRgn FindWindowExW IsWindowEnabled GetProcessWindowStation GetUserObjectInformationW MessageBoxA SetWindowLongW GetWindowLongW IsRectEmpty SetCapture GetKeyState IntersectRect MapWindowPoints ScreenToClient SetCaretPos GetCaretBlinkTime wsprintfW GetClassNameW CreateCaret GetClientRect InvalidateRect GetUpdateRect EndPaint BeginPaint DrawIconEx ReleaseCapture GetFocus SetFocus wvsprintfW SetCursor InflateRect UnionRect OffsetRect LoadCursorW GetDC ReleaseDC CharNextW IsZoomed UpdateLayeredWindow DestroyWindow IsChild CreateWindowExW SendMessageW DispatchMessageW MonitorFromPoint GetCursorPos MoveWindow LoadIconW SetWindowTextW SetForegroundWindow IsWindowVisible ShowWindow PostQuitMessage SystemParametersInfoW KillTimer SetTimer DestroyIcon FindWindowW IsWindow SetWindowPos RegisterWindowMessageW EnumDisplayMonitors GetMonitorInfoW PtInRect CopyRect GetWindowRect PostMessageW TranslateMessage GetMessageW

advapi32

RegSetValueExW RegisterEventSourceA DeregisterEventSource RegEnumKeyExW RegCreateKeyExW GetTokenInformation OpenProcessToken RegGetValueW RegOpenKeyExW RegCloseKey RegQueryValueExW RegCreateKeyW ReportEventA

shell32

SHGetKnownFolderPath ShellExecuteW SHGetSpecialFolderPathW ord165 Shell_NotifyIconW ShellExecuteExW SHFileOperationW

ole32

CoCreateGuid CLSIDFromString CLSIDFromProgID OleLockRunning OleUninitialize OleInitialize CoInitialize CoUninitialize CoTaskMemFree CoCreateInstance CreateStreamOnHGlobal CoSetProxyBlanket CoInitializeSecurity CoInitializeEx

oleaut32

SysStringLen VariantClear VariantInit SafeArrayPutElement SafeArrayCreate SysAllocString SysAllocStringLen SysFreeString

shlwapi

PathFileExistsW PathRemoveExtensionW PathAppendW PathCombineW PathRemoveFileSpecW StrStrIW SHAutoComplete StrCmpNIW StrTrimA StrStrIA StrCmpIW PathFindFileNameW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

gdiplus

GdipDrawImageRectI GdipLoadImageFromStreamICM GdipGetImagePixelFormat GdipLoadImageFromFile GdipDrawEllipseI GdipImageGetFrameDimensionsCount GdipGetImageEncoders GdipGetImageEncodersSize GdipDrawImageRectRectI GdipImageGetFrameDimensionsList GdipDrawImagePointsI GdipFillPath GdipImageGetFrameCount GdipImageSelectActiveFrame GdipGetPropertyItemSize GdiplusStartup GdipGraphicsClear GdipAddPathArc GdipDeleteGraphics GdipSetInterpolationMode GdipAlloc GdipFree GdipCreatePath GdipDeletePath GdipAddPathLineI GdipAddPathArcI GdipCloneBrush GdipDeleteBrush GdipCreateSolidFill GdipCreatePen1 GdipDeletePen GdipSetPenMode GdipSetPenDashStyle GdipCreateFromHDC GdipGetPropertyItem GdipSetSmoothingMode GdipDrawLineI GdipDrawRectangleI GdipDrawPath GdipFillEllipseI GdipClosePathFigure GdipCreateTexture GdipCloneImage GdipDisposeImage GdipSaveImageToFile GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipCreateBitmapFromStream GdipCreateBitmapFromFile GdipCreateBitmapFromScan0 GdipCreateHBITMAPFromBitmap GdipCloneBitmapAreaI GdipBitmapLockBits GdipBitmapUnlockBits

iphlpapi

GetAdaptersInfo

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileW URLDownloadToCacheFileW

msimg32

AlphaBlend GradientFill

comctl32

_TrackMouseEvent ImageList_DrawEx ImageList_GetIconSize InitCommonControlsEx ord17

gdi32

CreateCompatibleBitmap BitBlt GetDeviceCaps CreateCompatibleDC CreateFontIndirectW CreatePen DeleteDC DeleteObject GetStockObject Rectangle RestoreDC SaveDC SelectObject GetTextMetricsW GetObjectW SetWindowOrgEx CreateRoundRectRgn GetTextExtentPoint32W CreateDIBSection CombineRgn CreateRectRgnIndirect GetCharABCWidthsW GetClipBox SelectClipRgn ExtSelectClipRgn SetBkColor SetBkMode StretchBlt SetStretchBltMode SetTextColor SetDIBColorTable TextOutW ExtTextOutW CreateSolidBrush GetTextColor CreateDCW GetDIBits SetDIBitsToDevice

generic

count=39, id=259, version=30795,

count=202, id=261, version=30795,

count=11, id=260, version=27054,

count=3, productName=Unmarked objects (old),

count=21, id=260, version=35211,

count=11, id=261, productName=VS2017 v15.7.5 build 26433, version=26433,

count=20, id=260, version=35207,

count=1, id=260, version=35213,

count=75, id=261, version=27054,

count=13, id=261, version=35213,

count=5, id=265, version=35228,

count=1, id=261, version=35211,

count=27, id=259, version=35207,

count=100, id=261, version=35207,

count=49, id=260, version=30795,

count=35, id=257, version=30795,

count=520, id=1, productName=Unmarked objects,

count=47, id=260, version=35228,

count=16, id=261, version=35228,

count=1, id=256, version=35228,

count=1, id=255, version=35228,

count=1, id=151,

count=1, id=258, version=35228,