c5d91ffb0b78e2c1ee74567f6ba4aab59470daa4771e4a54899bb613c6fe7e81

Sharing

Copy URL Twitter E-mail

General

Target
c5d91ffb0b78e2c1ee74567f6ba4aab59470daa4771e4a54899bb613c6fe7e81
Size 1.5MB
Sample260822-wcd7xaxcqa
SHA256 c5d91ffb0b78e2c1ee74567f6ba4aab59470daa4771e4a54899bb613c6fe7e81
MD5 7a5ce8af7cdcf1cccb34da5e7c31fd42
SHA1 9e928f6fae1ce456c402eed051a87e0ffe25fea7
SHA512 72c1b6f677dd51bb03d39c6d9eee99d28bdcea755a8558976d31b1fa06470a7e37bc7fe1afeb680a761c0947d8d52a7dd55a11045bf7cf3d6f4d7332b85ef8b2
SSDEEP 24576:ZhvJxoh3ufOKmmMJj8ssh4209X3/qwkHua:/Jxoh3uxmm87k4209WHua
TLSH
T143654B51E543A253E10F43B418FEE729B7706E20B7679AD3A748BDBC0EB03D26934A15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5d91ffb0b78e2c1ee74567f6ba4aab59470daa4771e4a54899bb613c6fe7e81

File Explorer

c5d91ffb0b78e2c1ee74567f6ba4aab59470daa4771e4a54899bb613c6fe7e81

.dll 1.5MB

c5d91ffb0b78e2c1ee74567f6ba4aab59470daa4771e4a54899bb613c6fe7e81

IMPHASH eaa398ef0eab1d3972cc1b9542fd8771
SHA256 c5d91ffb0b78e2c1ee74567f6ba4aab59470daa4771e4a54899bb613c6fe7e81
MD5 7a5ce8af7cdcf1cccb34da5e7c31fd42
SHA1 9e928f6fae1ce456c402eed051a87e0ffe25fea7
SHA512 72c1b6f677dd51bb03d39c6d9eee99d28bdcea755a8558976d31b1fa06470a7e37bc7fe1afeb680a761c0947d8d52a7dd55a11045bf7cf3d6f4d7332b85ef8b2
SSDEEP 24576:ZhvJxoh3ufOKmmMJj8ssh4209X3/qwkHua:/Jxoh3uxmm87k4209WHua
TLSH
T143654B51E543A253E10F43B418FEE729B7706E20B7679AD3A748BDBC0EB03D26934A15
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

609248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

AdjustWindowRect AdjustWindowRectEx AppendMenuW BeginDeferWindowPos BeginPaint CallWindowProcA CallWindowProcW CharLowerBuffW CharLowerW CharUpperBuffW CharUpperW CheckMenuItem ChildWindowFromPoint ClientToScreen CloseClipboard CopyIcon CopyImage CopyRect CreateCaret CreateDialogIndirectParamA CreateDialogIndirectParamW CreateIconIndirect CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcW DeferWindowPos DeleteMenu DestroyCaret DestroyCursor DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamW DialogBoxParamW DispatchMessageW DragDetect DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawStateW DrawTextA DrawTextW EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndDeferWindowPos EndDialog EndPaint EnumChildWindows FillRect FrameRect GetActiveWindow GetAsyncKeyState GetCapture GetCaretPos GetClassLongW GetClassNameW GetClientRect GetClipboardData GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgCtrlID GetDlgItem GetDoubleClickTime GetDpiForWindow GetFocus GetGUIThreadInfo GetIconInfo GetKeyNameTextW GetKeyState GetMenuState GetMessagePos GetMessageTime GetMessageW GetMonitorInfoW GetNextDlgGroupItem GetNextDlgTabItem GetParent GetPropW GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongW GetWindowRect GetWindowRgn GetWindowTextA GetWindowTextLengthA GetWindowTextLengthW GetWindowTextW InternalGetWindowText IntersectRect InvalidateRect InvalidateRgn InvertRect IsChild IsClipboardFormatAvailable IsDialogMessageW IsWindow IsWindowEnabled IsWindowUnicode IsWindowVisible KillSystemTimer KillTimer LoadBitmapW LoadCursorW LoadIconW LoadImageA LoadImageW LoadMenuA LoadStringW MapDialogRect MapVirtualKeyW MapWindowPoints MonitorFromRect MonitorFromWindow MoveWindow NotifyWinEvent OpenClipboard PeekMessageW PostMessageW PostQuitMessage RedrawWindow RegisterClassW RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient ScrollWindow ScrollWindowEx SendDlgItemMessageW SendMessageA SendMessageW SetCapture SetCaretPos SetClipboardData SetCursor SetFocus SetParent SetPropW SetScrollInfo SetScrollPos SetScrollRange SetSystemTimer SetTimer SetWindowLongA SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextA SetWindowTextW ShowCaret ShowScrollBar ShowWindow SubtractRect SystemParametersInfoW TabbedTextOutW TrackMouseEvent TrackPopupMenu TranslateMessage UnionRect UnregisterClassA UnregisterClassW UpdateWindow WindowFromPoint wsprintfW

gdi32

BitBlt CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateFontIndirectW CreatePatternBrush CreatePen CreatePenIndirect CreatePolygonRgn CreateRectRgn CreateRectRgnIndirect CreateRoundRectRgn CreateSolidBrush DPtoLP DeleteDC DeleteObject ExcludeClipRect ExtCreatePen ExtCreateRegion ExtSelectClipRgn ExtTextOutW FillRgn FrameRgn GdiAlphaBlend GdiGetCharDimensions GdiGetCodePage GetBkColor GetBkMode GetCharABCWidthsW GetCharWidthInfo GetCharWidthW GetClipBox GetClipRgn GetCurrentObject GetDIBColorTable GetDIBits GetDeviceCaps GetLayout GetNearestColor GetObjectType GetObjectW GetPixel GetStockObject GetTextCharsetInfo GetTextColor GetTextExtentExPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextExtentPointW GetTextMetricsW IntersectClipRect LineTo MoveToEx OffsetWindowOrgEx PatBlt PlayEnhMetaFile PolyPolyline Polygon RectVisible Rectangle ScriptBreak ScriptStringAnalyse ScriptStringCPtoX ScriptStringFree ScriptStringGetLogicalWidths ScriptStringOut ScriptStringXtoCP ScriptString_pSize ScriptString_pcOutChars SelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetDIBColorTable SetDIBits SetPixel SetPolyFillMode SetRectRgn SetTextAlign SetTextColor SetViewportOrgEx SetWindowOrgEx StretchBlt StretchDIBits TextOutW

advapi32

RegCloseKey RegCreateKeyExW RegCreateKeyW RegOpenKeyA RegOpenKeyExW RegQueryValueExA RegQueryValueExW RegSetValueExW

imm32

ImmGetCompositionStringW ImmGetContext ImmReleaseContext ImmSetCompositionFontW ImmSetCompositionWindow

kernelbase

CloseHandle CompareFileTime CompareStringA CompareStringW CreateEventW CreateThread DelayLoadFailureHook DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FindResourceW FreeResource GetDateFormatW GetDriveTypeW GetLocalTime GetLocaleInfoW GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetThreadLocale GetTickCount GetUserDefaultLCID GetVersion GlobalAlloc GlobalFree HeapAlloc HeapFree HeapReAlloc InitializeCriticalSectionEx IsValidLocale LeaveCriticalSection LoadLibraryW LoadResource LocalAlloc LocalFree LocalLock LocalReAlloc LocalUnlock LockResource MulDiv MultiByteToWideChar RaiseException ResolveDelayLoadedAPI SetEvent SizeofResource StrCmpIW StrCmpNIW SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte lstrcmpW lstrcmpiW

oleaut32

SysAllocString SysAllocStringLen

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _assert _strdup _wcsdup _wcsicmp _wcsnicmp floor free fwrite getenv isprint iswalnum memcpy memmove memset qsort strcat strchr strcmp strcpy strcspn strlen wcschr wcsncmp wcsrchr wcsstr wcstol

kernel32

FindResourceA GlobalAddAtomW GlobalDeleteAtom GlobalLock GlobalUnlock IsBadCodePtr IsBadStringPtrA IsBadStringPtrW IsBadWritePtr LocalSize RtlUnwind

ntdll

_chkstk _vsnprintf

AddMRUStringW CreateMRUListW CreateMappedBitmap CreatePropertySheetPage CreatePropertySheetPageA CreatePropertySheetPageW CreateStatusWindow CreateStatusWindowA CreateStatusWindowW CreateToolbar CreateToolbarEx CreateUpDownControl DPA_Clone DPA_Create DPA_CreateEx DPA_DeleteAllPtrs DPA_DeletePtr DPA_Destroy DPA_DestroyCallback DPA_EnumCallback DPA_GetPtr DPA_GetPtrIndex DPA_GetSize DPA_Grow DPA_InsertPtr DPA_Search DPA_SetPtr DPA_Sort DSA_Clone DSA_Create DSA_DeleteAllItems DSA_DeleteItem DSA_Destroy DSA_DestroyCallback DSA_EnumCallback DSA_GetItem DSA_GetItemPtr DSA_GetSize DSA_InsertItem DSA_SetItem DefSubclassProc DestroyPropertySheetPage DllGetVersion DllInstall DrawInsert DrawShadowText DrawStatusText DrawStatusTextA DrawStatusTextW EnumMRUListW FlatSB_EnableScrollBar FlatSB_GetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollProp FlatSB_GetScrollRange FlatSB_SetScrollInfo FlatSB_SetScrollPos FlatSB_SetScrollProp FlatSB_SetScrollRange FlatSB_ShowScrollBar GetEffectiveClientRect GetMUILanguage GetWindowSubclass HIMAGELIST_QueryInterface ImageList_Add ImageList_AddIcon ImageList_AddMasked ImageList_BeginDrag ImageList_CoCreateInstance ImageList_Copy ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_DrawIndirect ImageList_Duplicate ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetFlags ImageList_GetIcon ImageList_GetIconSize ImageList_GetImageCount ImageList_GetImageInfo ImageList_GetImageRect ImageList_LoadImage ImageList_LoadImageA ImageList_LoadImageW ImageList_Merge ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetFilter ImageList_SetFlags ImageList_SetIconSize ImageList_SetImageCount ImageList_SetOverlayImage ImageList_Write ImageList_WriteEx InitCommonControls InitCommonControlsEx InitMUILanguage InitializeFlatSB LBItemFromPt LoadIconMetric LoadIconWithScaleDown MakeDragList MenuHelp PropertySheet PropertySheetA PropertySheetW RegisterClassNameW RemoveWindowSubclass SetWindowSubclass ShowHideMenuCtl TaskDialog TaskDialogIndirect UninitializeFlatSB _TrackMouseEvent

Name

.text

Size

596KB

Virtual Size

595KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

168KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.eh_fram

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rodata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

324KB

Virtual Size

323KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

56KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c5d91ffb0b78e2c1ee74567f6ba4aab59470daa4771e4a54899bb613c6fe7e81

user32

gdi32

advapi32

imm32

kernelbase

oleaut32

ucrtbase

kernel32

ntdll

generic