2aea9c2a60da8abc0cf0138c24a6919a7907d3ae3ebf4cc264ed5c3d4b6879fd

Sharing

Copy URL Twitter E-mail

General

Target
2aea9c2a60da8abc0cf0138c24a6919a7907d3ae3ebf4cc264ed5c3d4b6879fd
Size 7.1MB
Sample260826-vtp53atalf
SHA256 2aea9c2a60da8abc0cf0138c24a6919a7907d3ae3ebf4cc264ed5c3d4b6879fd
MD5 0aa96b66742b0eb9e46f87323998c897
SHA1 4cd2bb9ff71aad01f4e7c4f6e286c9d621f322a3
SHA512 7260e5a05fb4cc9350fff2570d2486f4a7c40243c7e63318d1251a969aae0014e97a995aacf39fad21001cf5f97e3593a9b7e6e3ca6b4b4dfa3138d6a77542d9
SSDEEP 196608:J7MLQfYVvnJ+7kox9M238xm6SoFBQoam0iWFRQQDJx1n:2V/JMk2DsxPYLFiWFRFp
TLSH
T1867612217505C23AD5AA02F1593DBBAF9A2D6E7807B404D7E3C41DBE5D704C3AB3262B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aea9c2a60da8abc0cf0138c24a6919a7907d3ae3ebf4cc264ed5c3d4b6879fd

File Explorer

2aea9c2a60da8abc0cf0138c24a6919a7907d3ae3ebf4cc264ed5c3d4b6879fd

.dll 7.1MB

2aea9c2a60da8abc0cf0138c24a6919a7907d3ae3ebf4cc264ed5c3d4b6879fd

IMPHASH 8c011280cb3af8f1e51575849ba215bd
SHA256 2aea9c2a60da8abc0cf0138c24a6919a7907d3ae3ebf4cc264ed5c3d4b6879fd
MD5 0aa96b66742b0eb9e46f87323998c897
SHA1 4cd2bb9ff71aad01f4e7c4f6e286c9d621f322a3
SHA512 7260e5a05fb4cc9350fff2570d2486f4a7c40243c7e63318d1251a969aae0014e97a995aacf39fad21001cf5f97e3593a9b7e6e3ca6b4b4dfa3138d6a77542d9
SSDEEP 196608:J7MLQfYVvnJ+7kox9M238xm6SoFBQoam0iWFRQQDJx1n:2V/JMk2DsxPYLFiWFRFp
TLSH
T1867612217505C23AD5AA02F1593DBBAF9A2D6E7807B404D7E3C41DBE5D704C3AB3262B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1031996

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\src\_LdsCode\sem\sem_inst\bin\Release\ExtInterface.pdb

kernel32

GetModuleFileNameW FreeLibrary FindResourceExW GetLocalTime GetCurrentProcess WaitForMultipleObjects Sleep CreateEventW WaitForSingleObject LockResource DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetModuleHandleW FindResourceW SizeofResource CreateMutexW SetThreadAffinityMask GetProcessHeap HeapSize HeapFree HeapReAlloc ResumeThread ReleaseSemaphore GetProcAddress LoadLibraryExW GetVersion IsProcessorFeaturePresent VirtualFree VirtualAlloc WriteFile SetFilePointer ReadFile GetFileSize CreateFileW CreateFileA FindNextFileW FindClose FormatMessageW LocalFree WideCharToMultiByte MoveFileW lstrcpynW GetWindowsDirectoryW GetStartupInfoW CreateProcessW GetTempPathW SetFileAttributesW ResetEvent LoadResource RemoveDirectoryW GetFileAttributesW DeleteFileW MultiByteToWideChar MoveFileExW LoadLibraryW SetEvent WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage HeapAlloc HeapDestroy GetLastError RaiseException CloseHandle DecodePointer IsDebuggerPresent OutputDebugStringW EncodePointer GetStringTypeW TryEnterCriticalSection GetCurrentThreadId DuplicateHandle WaitForSingleObjectEx SwitchToThread GetCurrentThread GetExitCodeThread FindFirstFileExW SetLastError DeviceIoControl ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo ReleaseMutex GetCurrentProcessId FlushFileBuffers lstrcpyW lstrlenW GetACP MulDiv ExitProcess FreeResource IsBadReadPtr lstrcmpW SetEndOfFile CreateFileMappingW MapViewOfFile UnmapViewOfFile GlobalAlloc GlobalUnlock GlobalLock GlobalFree GetTempFileNameW GetFileSizeEx UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess InitializeSListHead GetStdHandle CreateTimerQueue SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes FreeLibraryAndExitThread GetModuleHandleA GetVersionExW VirtualProtect InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx GetSystemWindowsDirectoryW lstrcmpA FindFirstFileA FindNextFileA CreateFileMappingA RtlUnwind ExitThread GetModuleHandleExW GetFileType SetFilePointerEx GetConsoleOutputCP GetConsoleMode GetTimeZoneInformation GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW SetStdHandle

user32

GetParent GetClassNameW GetWindow MonitorFromWindow DefWindowProcW CallWindowProcW RegisterClassW RegisterClassExW GetClassInfoExW EnableWindow SetPropW GetPropW LoadImageW IsIconic SetWindowRgn MessageBoxW RemovePropW CharPrevW GetWindowLongW SetRect DrawIconEx GetIconInfo GetMessagePos GetDlgCtrlID DrawFocusRect FillRect HideCaret ShowCaret ClientToScreen GetSysColor GetWindowDC GetWindowTextW GetWindowTextLengthW CreateAcceleratorTableW InvalidateRgn FindWindowExW IsWindowEnabled SetFocus CharNextW IsRectEmpty IntersectRect MapWindowPoints ScreenToClient SetCaretPos GetCaretBlinkTime SetWindowLongW CreateCaret GetClientRect InvalidateRect GetUpdateRect EndPaint BeginPaint ReleaseCapture SetCapture IsZoomed UpdateLayeredWindow GetKeyState DrawTextW wsprintfW wvsprintfW SetCursor InflateRect UnionRect OffsetRect GetFocus DestroyWindow LoadCursorW IsChild CreateWindowExW SendMessageW DispatchMessageW TranslateMessage GetDC GetCursorPos MoveWindow LoadIconW SetWindowTextW SetForegroundWindow IsWindowVisible ShowWindow PostQuitMessage SystemParametersInfoW KillTimer SetTimer DestroyIcon FindWindowW IsWindow SetWindowPos RegisterWindowMessageW EnumDisplayMonitors GetMonitorInfoW PtInRect CopyRect GetWindowRect PostMessageW ReleaseDC MonitorFromPoint GetMessageW

advapi32

RegCreateKeyExW GetTokenInformation OpenProcessToken RegSetValueExW RegCreateKeyW RegGetValueW RegOpenKeyExW RegCloseKey RegQueryValueExW RegEnumKeyExW

shell32

ShellExecuteExW ShellExecuteW Shell_NotifyIconW SHFileOperationW ord165 SHGetSpecialFolderPathW SHGetKnownFolderPath

ole32

OleUninitialize OleInitialize CoInitialize CoUninitialize CoTaskMemFree CoCreateGuid CoCreateInstance CreateStreamOnHGlobal CoSetProxyBlanket CoInitializeSecurity CoInitializeEx OleLockRunning CLSIDFromProgID CLSIDFromString

oleaut32

SysAllocString SysStringLen VariantClear VariantInit SafeArrayPutElement SafeArrayCreate SysAllocStringLen SysFreeString

shlwapi

PathFileExistsW PathFindFileNameW PathRemoveExtensionW PathAppendW PathCombineW PathRemoveFileSpecW SHAutoComplete StrCmpNIW StrTrimA StrStrIA StrCmpIW StrStrIW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

gdiplus

GdipLoadImageFromFile GdipGetPropertyItem GdipDrawImageRectI GdipGetPropertyItemSize GdipLoadImageFromStreamICM GdipGetImageEncoders GdipGetImageEncodersSize GdipDrawImageRectRectI GdipDrawImagePointsI GdipDrawEllipseI GdipGetImagePixelFormat GdipFillPath GdipImageSelectActiveFrame GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipAddPathArc GdipSetSmoothingMode GdiplusStartup GdipGraphicsClear GdipAlloc GdipFree GdipCreatePath GdipDeletePath GdipAddPathLineI GdipAddPathArcI GdipCloneBrush GdipDeleteBrush GdipCreateSolidFill GdipCreatePen1 GdipDeletePen GdipSetPenMode GdipSetPenDashStyle GdipCreateFromHDC GdipDeleteGraphics GdipSetInterpolationMode GdipDrawLineI GdipDrawRectangleI GdipDrawPath GdipFillEllipseI GdipClosePathFigure GdipCreateTexture GdipCloneImage GdipDisposeImage GdipSaveImageToFile GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipCreateBitmapFromStream GdipCreateBitmapFromFile GdipCreateBitmapFromScan0 GdipCreateHBITMAPFromBitmap GdipCloneBitmapAreaI GdipBitmapLockBits GdipBitmapUnlockBits GdipImageGetFrameCount

iphlpapi

GetAdaptersInfo

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileW URLDownloadToCacheFileW

msimg32

AlphaBlend GradientFill

comctl32

_TrackMouseEvent ImageList_DrawEx ImageList_GetIconSize InitCommonControlsEx ord17

gdi32

GetDeviceCaps BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateFontIndirectW CreatePen DeleteDC DeleteObject GetStockObject Rectangle RestoreDC SaveDC SelectObject GetTextMetricsW GetObjectW SetWindowOrgEx CreateRoundRectRgn GetTextExtentPoint32W CreateDIBSection CombineRgn CreateRectRgnIndirect GetCharABCWidthsW GetClipBox SelectClipRgn ExtSelectClipRgn SetBkColor SetBkMode StretchBlt SetStretchBltMode SetTextColor SetDIBColorTable TextOutW ExtTextOutW CreateSolidBrush GetTextColor CreateDCW GetDIBits SetDIBitsToDevice

generic

count=37, id=259, version=30795,

count=199, id=261, version=30795,

count=2, id=260, version=27034,

count=11, id=261, productName=VS2017 v15.7.5 build 26433, version=26433,

count=25, id=259, version=26706,

count=1, id=260, version=27050,

count=4, id=261, version=27050,

count=5, id=265, version=27054,

count=1, id=261, version=27053,

count=38, id=260, version=26706,

count=129, id=261, version=26706,

count=49, id=260, version=30795,

count=35, id=257, version=30795,

count=509, id=1, productName=Unmarked objects,

count=58, id=260, version=27054,

count=100, id=261, version=27054,

count=1, id=256, version=27054,

count=1, id=255, version=27054,

count=1, id=151,

count=1, id=258, version=27054,