4e64de4c0f667fd109c5d11e0f8dcac6a428f0cf11f8abd7c5797195ab08a2f1

Sharing

Copy URL Twitter E-mail

General

Target
4e64de4c0f667fd109c5d11e0f8dcac6a428f0cf11f8abd7c5797195ab08a2f1
Size 2.2MB
Sample260825-js2a6aycph
SHA256 4e64de4c0f667fd109c5d11e0f8dcac6a428f0cf11f8abd7c5797195ab08a2f1
MD5 339ba70e3c9b5adfc16847ac17633fab
SHA1 da6c37b9353ffdf71d0d87f5757cbcf655755462
SHA512 9539cb516e520aecd896de5359e9749c516267b63180002ef5a6686d27429cb18c139f8345e408b10dfb219c5923764b4ea11a8364785b536dad123b72044556
SSDEEP 49152:Boa86h/Ra3N/9VFyOqVzADUmdclfYM1O4Ol2sfNE:z+DmzPfYCOfK
TLSH
T1FAB57B26FD41C036E02617309D2BB731B87ABB68AA2A464B73D46B0D5F747D07D462CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e64de4c0f667fd109c5d11e0f8dcac6a428f0cf11f8abd7c5797195ab08a2f1

File Explorer

4e64de4c0f667fd109c5d11e0f8dcac6a428f0cf11f8abd7c5797195ab08a2f1

.exe 2.2MB

4e64de4c0f667fd109c5d11e0f8dcac6a428f0cf11f8abd7c5797195ab08a2f1

IMPHASH e87ac255866b2fdffbd0c3da2598949e
SHA256 4e64de4c0f667fd109c5d11e0f8dcac6a428f0cf11f8abd7c5797195ab08a2f1
MD5 339ba70e3c9b5adfc16847ac17633fab
SHA1 da6c37b9353ffdf71d0d87f5757cbcf655755462
SHA512 9539cb516e520aecd896de5359e9749c516267b63180002ef5a6686d27429cb18c139f8345e408b10dfb219c5923764b4ea11a8364785b536dad123b72044556
SSDEEP 49152:Boa86h/Ra3N/9VFyOqVzADUmdclfYM1O4Ol2sfNE:z+DmzPfYCOfK
TLSH
T1FAB57B26FD41C036E02617309D2BB731B87ABB68AA2A464B73D46B0D5F747D07D462CB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

shell32

ShellExecuteExA ShellExecuteA SHGetSpecialFolderPathA SHGetPathFromIDListA SHGetMalloc SHGetDesktopFolder SHFileOperationA SHBrowseForFolderA

eboot

ord49 ord41 ord42 ord51 ord50 ord43 ord44 ord14 ord101 ord4 ord3 ord5 ord6 ord62 ord65 ord61

flashtoollib

ord129 ord130 ord133 ord134 ord45 ord5 ord4 ord187 ord186 ord173 ord60 ord25 ord26 ord28 ord27 ord32 ord33 ord119 ord30 ord126 ord13 ord117 ord120 ord14 ord118 ord205 ord16 ord144 ord253 ord75 ord15 ord92 ord18 ord51 ord21 ord50 ord24 ord137 ord82 ord236 ord149 ord206 ord84 ord145 ord259 ord260 ord294 ord147 ord151 ord150 ord153 ord290 ord300 ord165 ord166 ord164 ord99 ord197 ord196 ord152 ord101 ord113 ord207 ord266 ord167 ord183 ord295 ord39 ord34 ord40 ord35 ord204 ord48 ord106 ord215 ord188 ord189 ord192 ord193 ord104

sla_challenge

ord3 ord4

des

_ReadDataFromFile@16 _WriteDataToFile@16

spmeta_dll

ord75 ord74 ord71 ord4 ord7 ord82 ord76 ord2

err_report

Generate_ErrReport

setupapi

SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetClassDevsA SetupDiGetDeviceInstanceIdA SetupDiGetDeviceRegistryPropertyA SetupDiOpenDevRegKey

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateDirectoryW CreateEventA CreateFileA CreateFileMappingA CreateMutexA CreateSemaphoreA CreateThread DeleteCriticalSection DeleteFileA EnterCriticalSection EnumCalendarInfoA ExitProcess ExitThread FileTimeToDosDateTime FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindNextFileA FindResourceA FormatMessageA FreeLibrary FreeResource GetACP GetCPInfo GetCommandLineA GetComputerNameA GetCurrentDirectoryA GetCurrentProcessId GetCurrentThreadId GetDateFormatA GetDiskFreeSpaceA GetDriveTypeA GetEnvironmentStrings GetEnvironmentVariableA GetExitCodeProcess GetExitCodeThread GetFileAttributesA GetFileSize GetFileTime GetFileType GetFullPathNameA GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetPrivateProfileStringA GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeExA GetStringTypeW GetSystemDefaultLangID GetSystemInfo GetThreadLocale GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetVersion GetVersionExA GlobalAddAtomA GlobalAlloc GlobalDeleteAtom GlobalFindAtomA GlobalFree GlobalHandle GlobalLock GlobalReAlloc GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedExchange InterlockedIncrement IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadResource LocalAlloc LocalFree LockResource MapViewOfFile MulDiv MultiByteToWideChar OutputDebugStringA RaiseException ReadFile ReleaseSemaphore RemoveDirectoryA ResetEvent ResumeThread RtlUnwind SetConsoleCtrlHandler SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetErrorMode SetEvent SetFilePointer SetHandleCount SetLastError SetThreadLocale SizeofResource Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringA lstrcmpA lstrcpyA lstrcpynA lstrlenA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

comctl32

ImageList_Add ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIconSize ImageList_GetImageCount ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetIconSize ImageList_Write ord17

comdlg32

GetOpenFileNameA

gdi32

BitBlt CombineRgn CopyEnhMetaFileA CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateDIBitmap CreateFontIndirectA CreateHalftonePalette CreatePalette CreatePenIndirect CreateRectRgn CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject Ellipse ExcludeClipRect ExtCreatePen ExtTextOutA GetBitmapBits GetBrushOrgEx GetClipBox GetCurrentPositionEx GetDCOrgEx GetDIBColorTable GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetObjectA GetPaletteEntries GetPixel GetRgnBox GetStockObject GetSystemPaletteEntries GetTextExtentPoint32A GetTextExtentPointA GetTextMetricsA GetWinMetaFileBits GetWindowOrgEx IntersectClipRect LineTo MaskBlt MoveToEx PatBlt Pie PlayEnhMetaFile PolyPolyline Polyline RealizePalette RectVisible Rectangle RestoreDC RoundRect SaveDC SelectObject SelectPalette SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetEnhMetaFileBits SetMapMode SetPixel SetROP2 SetStretchBltMode SetTextColor SetViewportExtEx SetViewportOrgEx SetWinMetaFileBits SetWindowExtEx SetWindowOrgEx StretchBlt UnrealizeObject

user32

ActivateKeyboardLayout AdjustWindowRectEx BeginDeferWindowPos BeginPaint CallNextHookEx CallWindowProcA CharLowerA CharLowerBuffA CharNextA CharUpperBuffA CheckMenuItem ChildWindowFromPoint ClientToScreen CloseClipboard CreateIcon CreateMenu CreatePopupMenu CreateWindowExA DefFrameProcA DefMDIChildProcA DefWindowProcA DeferWindowPos DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawMenuBar DrawTextA EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndDeferWindowPos EndPaint EnumClipboardFormats EnumThreadWindows EnumWindows EqualRect FillRect FindWindowA FrameRect GetActiveWindow GetCapture GetCaretPos GetClassInfoA GetClassNameA GetClientRect GetClipboardData GetCursor GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextA GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardState GetKeyboardType GetLastActivePopup GetMenu GetMenuItemCount GetMenuItemID GetMenuItemInfoA GetMenuState GetMenuStringA GetMessagePos GetMessageTime GetParent GetPropA GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSystemMenu GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongA GetWindowPlacement GetWindowRect GetWindowTextA GetWindowThreadProcessId InflateRect InsertMenuA InsertMenuItemA IntersectRect InvalidateRect IsCharAlphaA IsCharAlphaNumericA IsChild IsDialogMessageA IsIconic IsRectEmpty IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapA LoadCursorA LoadIconA LoadKeyboardLayoutA LoadStringA MapVirtualKeyA MapWindowPoints MessageBeep MessageBoxA MsgWaitForMultipleObjects OemToCharA OffsetRect OpenClipboard PeekMessageA PostMessageA PostQuitMessage PtInRect RedrawWindow RegisterClassA RegisterClipboardFormatA RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollWindow ScrollWindowEx SendMessageA SetActiveWindow SetCapture SetClassLongA SetClipboardData SetCursor SetFocus SetForegroundWindow SetKeyboardState SetMenu SetMenuItemInfoA SetPropA SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongA SetWindowPlacement SetWindowPos SetWindowTextA SetWindowsHookExA ShowCursor ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoA TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnionRect UnregisterClassA UpdateWindow ValidateRect WaitMessage WinHelpA WindowFromPoint wsprintfA GetSysColor

ole32

CoCreateInstance CoGetMalloc CoInitialize CoUninitialize

oleaut32

GetErrorInfo SafeArrayAccessData SafeArrayCreate SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayRedim SafeArrayUnaccessData SysAllocStringLen SysFreeString SysReAllocStringLen SysStringLen VariantChangeType VariantClear VariantCopy VariantCopyInd VariantInit

@$xp$10TCCalendar @$xp$17TPerformanceGraph @$xp$27Cdiroutl@TCDirectoryOutline @$xp$7TCGauge @@Ccalendr@Finalize @@Ccalendr@Initialize @@Cdiroutl@Finalize @@Cdiroutl@Initialize @@Cgauges@Finalize @@Cgauges@Initialize @@Flashdownload@Finalize @@Flashdownload@Initialize @@Form_about@Finalize @@Form_about@Initialize @@Form_multiload@Finalize @@Form_multiload@Initialize @@Form_passwordsetting@Finalize @@Form_passwordsetting@Initialize @@Form_scatterfilelist@Finalize @@Form_scatterfilelist@Initialize @@Form_splash@Finalize @@Form_splash@Initialize @@Formchecksumprogress@Finalize @@Formchecksumprogress@Initialize @@Generateerrreport@Finalize @@Generateerrreport@Initialize @@Identityverify@Finalize @@Identityverify@Initialize @@Multiportflashdownloadtool@Finalize @@Multiportflashdownloadtool@Initialize @@Perfgrap@Finalize @@Perfgrap@Initialize @@Setbegincomport@Finalize @@Setbegincomport@Initialize @@Toolsettings@Finalize @@Toolsettings@Initialize @Cdiroutl@TCDirectoryOutline@ @Cdiroutl@TCDirectoryOutline@$bctr$qqrp18Classes@TComponent @Cdiroutl@TCDirectoryOutline@APointer @Cdiroutl@TCDirectoryOutline@AssignCaseProc$qqrv @Cdiroutl@TCDirectoryOutline@BuildOneLevel$qqrl @Cdiroutl@TCDirectoryOutline@BuildSubTree$qqrl @Cdiroutl@TCDirectoryOutline@BuildTree$qqrv @Cdiroutl@TCDirectoryOutline@Change$qqrv @Cdiroutl@TCDirectoryOutline@Click$qqrv @Cdiroutl@TCDirectoryOutline@CreateWnd$qqrv @Cdiroutl@TCDirectoryOutline@CurDir$qv @Cdiroutl@TCDirectoryOutline@DriveToInt$qqrc @Cdiroutl@TCDirectoryOutline@Expand$qqri @Cdiroutl@TCDirectoryOutline@ForceCase$qqrrx17System@AnsiString @Cdiroutl@TCDirectoryOutline@GetChildNamed$qqrrx17System@AnsiStringl @Cdiroutl@TCDirectoryOutline@InvalidIndex @Cdiroutl@TCDirectoryOutline@Loaded$qqrv @Cdiroutl@TCDirectoryOutline@RootIndex @Cdiroutl@TCDirectoryOutline@SetDirectory$qqr17System@AnsiString @Cdiroutl@TCDirectoryOutline@SetDrive$qqrc @Cdiroutl@TCDirectoryOutline@SetTextCase$qqr18Cdiroutl@TTextCase @Cdiroutl@TCDirectoryOutline@WalkTree$qqrrx17System@AnsiString @TCCalendar@ @TCCalendar@$bctr$qqrp18Classes@TComponent @TCCalendar@Change$qqrv @TCCalendar@ChangeMonth$qqri @TCCalendar@Click$qqrv @TCCalendar@DaysPerMonth$qqrii @TCCalendar@DaysThisMonth$qqrv @TCCalendar@Dispatch$qqrpv @TCCalendar@DrawCell$qqriirx11Types@TRect42System@%Set$t14Grids@Grids__3$iuc$0$iuc$2% @TCCalendar@GetCellText$qqrii @TCCalendar@GetDateElement$qqri @TCCalendar@IsLeapYear$qqri @TCCalendar@NextMonth$qqrv @TCCalendar@NextYear$qqrv @TCCalendar@PrevMonth$qqrv @TCCalendar@PrevYear$qqrv @TCCalendar@SeTCCalendarDate$qqr16System@TDateTime @TCCalendar@SelectCell$qqrii @TCCalendar@SetDateElement$qqrii @TCCalendar@SetStartOfWeek$qqrs @TCCalendar@SetUseCurrentDate$qqro @TCCalendar@StoreCalendarDate$qqrv @TCCalendar@UpdateCalendar$qqrv @TCCalendar@WMSize$qqrr16Messages@TWMSize @TCGauge@ @TCGauge@$bctr$qqrp18Classes@TComponent @TCGauge@AddProgress$qqrl @TCGauge@GetPercentDone$qqrv @TCGauge@Paint$qqrv @TCGauge@PaintAsBar$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintAsNeedle$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintAsNothing$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintAsPie$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintAsText$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintBackground$qqrp16Graphics@TBitmap @TCGauge@SeTCGaugeKind$qqr11TCGaugeKind @TCGauge@SetBackColor$qqr15Graphics@TColor @TCGauge@SetBorderStyle$qqr22Forms@TFormBorderStyle @TCGauge@SetForeColor$qqr15Graphics@TColor @TCGauge@SetMaxValue$qqrl @TCGauge@SetMinValue$qqrl @TCGauge@SetProgress$qqrl @TCGauge@SetShowText$qqro @TPerformanceGraph@ @TPerformanceGraph@$bctr$qqrp18Classes@TComponent @TPerformanceGraph@$bdtr$qqrv @TPerformanceGraph@DataPoint$qqr15Graphics@TColorl @TPerformanceGraph@DisplayPoints$qqrl @TPerformanceGraph@FirstY$qqrv @TPerformanceGraph@GetBandCount$qqrv @TPerformanceGraph@Initialize$qqrl @TPerformanceGraph@LastY$qqri @TPerformanceGraph@NextY$qqri @TPerformanceGraph@Paint$qqrv @TPerformanceGraph@PaintBar$qqr15Graphics@TColorll @TPerformanceGraph@PaintLine$qqr15Graphics@TColorll @TPerformanceGraph@ReallocHistory$qqrv @TPerformanceGraph@Replay$qqrv @TPerformanceGraph@RoundUp$qqrll @TPerformanceGraph@ScrollGraph$qqrv @TPerformanceGraph@SetBackColor$qqr15Graphics@TColor @TPerformanceGraph@SetForeColor$qqr15Graphics@TColor @TPerformanceGraph@SetGradient$qqrl @TPerformanceGraph@SetGraphKind$qqr10TGraphKind @TPerformanceGraph@SetGridSize$qqrl @TPerformanceGraph@SetGridlines$qqro @TPerformanceGraph@SetPenWidth$qqrl @TPerformanceGraph@SetScale$qqrl @TPerformanceGraph@SetStepSize$qqrl @TPerformanceGraph@ShiftY$qqrv @TPerformanceGraph@Update$qqrv _ErrorReportForm _Form_AboutMD _Form_ScatterFile _Form_tool_settings _Identity _PasswordSetting _Splash __GetExceptDLLinfo ___CPPdebugHook _dlgSetBeginComPort _formPCMemoryChecksum _frmMultiLoad

Name

.text

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

430KB

Virtual Size

460KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

13KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

91KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

172KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

4e64de4c0f667fd109c5d11e0f8dcac6a428f0cf11f8abd7c5797195ab08a2f1

shell32

eboot

flashtoollib

sla_challenge

des

spmeta_dll

err_report

setupapi

advapi32

kernel32

version

comctl32

comdlg32

gdi32

user32

ole32

oleaut32

generic