8b57e75c7ce96d3f785e92f48c5283f19912fb1a932f7a275d43a520399102ca

Sharing

Copy URL Twitter E-mail

General

Target
8b57e75c7ce96d3f785e92f48c5283f19912fb1a932f7a275d43a520399102ca
Size 1.9MB
Sample260901-27hfpsygre
SHA256 8b57e75c7ce96d3f785e92f48c5283f19912fb1a932f7a275d43a520399102ca
MD5 5738ec2dead39b2df88712661b7307bd
SHA1 6f72c8a5ee7754e13a607d3e2688f39fd9b16037
SHA512 542ac1d3ea538c1d2d802bd75bfc62b52459ebad16cfe27cf36900a1c35667d4b7ac4353d10e44c802709c9001281d49f12a9703e86d582a1605293265563229
SSDEEP 24576:ATqU0OTAnd0wfDEIsY7DTB6dhzr1ixfdOmCBOuBJ6clj3w323u1P39r:0aOTA1wIsY7nodhzKfdOm+OuBh7kr
TLSH
T149954B19D9032BE2CF050973064FD3BA16B4B9A4B246CD4BDA887C75BC774742A4BB1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b57e75c7ce96d3f785e92f48c5283f19912fb1a932f7a275d43a520399102ca

File Explorer

8b57e75c7ce96d3f785e92f48c5283f19912fb1a932f7a275d43a520399102ca

.dll 1.9MB

8b57e75c7ce96d3f785e92f48c5283f19912fb1a932f7a275d43a520399102ca

IMPHASH 62f395e873ac9450b2c58cc411edcf95
SHA256 8b57e75c7ce96d3f785e92f48c5283f19912fb1a932f7a275d43a520399102ca
MD5 5738ec2dead39b2df88712661b7307bd
SHA1 6f72c8a5ee7754e13a607d3e2688f39fd9b16037
SHA512 542ac1d3ea538c1d2d802bd75bfc62b52459ebad16cfe27cf36900a1c35667d4b7ac4353d10e44c802709c9001281d49f12a9703e86d582a1605293265563229
SSDEEP 24576:ATqU0OTAnd0wfDEIsY7DTB6dhzr1ixfdOmCBOuBJ6clj3w323u1P39r:0aOTA1wIsY7nodhzKfdOm+OuBh7kr
TLSH
T149954B19D9032BE2CF050973064FD3BA16B4B9A4B246CD4BDA887C75BC774742A4BB1E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

732552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ntdll

DbgPrint vDbgPrintExWithPrefix

advapi32

RegCloseKey RegCreateKeyExW RegCreateKeyW RegOpenKeyA RegOpenKeyExW RegQueryValueExA RegQueryValueExW RegSetValueExW

kernel32

ActivateActCtx CloseHandle CompareFileTime CompareStringA CompareStringW CreateActCtxW CreateEventW CreateThread DeactivateActCtx DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FindResourceA FindResourceW FreeResource GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentVariableA GetLastError GetLocalTime GetLocaleInfoW GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetSystemTimeAsFileTime GetThreadLocale GetTickCount GetUserDefaultLCID GetVersion GetWindowsDirectoryW GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection IsBadCodePtr IsBadStringPtrA IsBadStringPtrW IsBadWritePtr IsDBCSLeadByte IsValidLocale LeaveCriticalSection LoadLibraryA LoadLibraryW LoadResource LocalAlloc LocalFree LocalLock LocalReAlloc LocalSize LocalUnlock LockResource MulDiv MultiByteToWideChar QueryPerformanceCounter RaiseException RtlUnwind SetEvent SetLastError SetUnhandledExceptionFilter SizeofResource Sleep SystemTimeToFileTime TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte lstrcatW lstrcmpW lstrcmpiW lstrcpyW lstrcpynA lstrcpynW lstrlenA lstrlenW

msvcrt

__dllonexit _amsg_exit _assert _initterm _iob _lock _onexit _snprintf _unlock _vsnprintf _wcsnicmp abort atoi bsearch calloc free fwrite isalnum iswctype memcmp memcpy memmove memset qsort sprintf strcat strchr strcmp strcpy strcspn strncmp towupper vfprintf wcschr wcscmp wcscspn wcslen wcsncmp wcsrchr wcsstr wcstol _wcsicmp

usp10

ScriptBreak ScriptStringAnalyse ScriptStringCPtoX ScriptStringFree ScriptStringGetLogicalWidths ScriptStringOut ScriptStringXtoCP ScriptString_pSize ScriptString_pcOutChars

gdi32

BitBlt CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateFontIndirectW CreatePatternBrush CreatePen CreatePenIndirect CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateSolidBrush DPtoLP DeleteDC DeleteObject ExcludeClipRect ExtCreatePen ExtCreateRegion ExtTextOutW FillRgn FrameRgn GdiAlphaBlend GdiFlush GdiGetCharDimensions GdiGetCodePage GetBkColor GetBkMode GetCharABCWidthsW GetCharWidthInfo GetCharWidthW GetClipBox GetClipRgn GetCurrentObject GetDIBColorTable GetDIBits GetDeviceCaps GetLayout GetNearestColor GetObjectType GetObjectW GetPixel GetStockObject GetTextCharsetInfo GetTextColor GetTextExtentExPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextExtentPointW GetTextMetricsW IntersectClipRect LineTo MoveToEx OffsetWindowOrgEx PatBlt PlayEnhMetaFile PolyPolyline Polygon RectVisible Rectangle SelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetDIBColorTable SetDIBits SetPixel SetPolyFillMode SetRectRgn SetTextAlign SetTextColor SetViewportOrgEx SetWindowOrgEx StretchBlt StretchDIBits TextOutW

imm32

ImmGetCompositionStringW ImmGetContext ImmIsIME ImmLockIMC ImmReleaseContext ImmSetCompositionFontW ImmSetCompositionWindow ImmUnlockIMC

user32

AdjustWindowRect AdjustWindowRectEx AppendMenuW BeginDeferWindowPos BeginPaint CallWindowProcA CallWindowProcW CharLowerBuffW CharLowerW CharNextA CharUpperBuffW CharUpperW CheckMenuItem ChildWindowFromPoint ClientToScreen CloseClipboard CopyIcon CopyImage CopyRect CreateCaret CreateDialogIndirectParamA CreateDialogIndirectParamW CreateIconIndirect CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcW DeferWindowPos DeleteMenu DestroyCaret DestroyCursor DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamW DialogBoxParamW DispatchMessageW DragDetect DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawStateW DrawTextW EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndDeferWindowPos EndDialog EndPaint EnumChildWindows EqualRect FillRect FrameRect GetActiveWindow GetAsyncKeyState GetCapture GetClassInfoExW GetClassLongW GetClassNameW GetClientRect GetClipboardData GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgCtrlID GetDlgItem GetDoubleClickTime GetFocus GetIconInfo GetKeyNameTextW GetKeyState GetKeyboardLayout GetMenuState GetMessagePos GetMessageTime GetMessageW GetMonitorInfoW GetNextDlgGroupItem GetNextDlgTabItem GetParent GetPropW GetScrollBarInfo GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongW GetWindowPlacement GetWindowRect GetWindowRgn GetWindowTextA GetWindowTextLengthA GetWindowTextLengthW GetWindowTextW InflateRect InternalGetWindowText IntersectRect InvalidateRect InvalidateRgn InvertRect IsChild IsClipboardFormatAvailable IsDialogMessageW IsIconic IsRectEmpty IsWindow IsWindowEnabled IsWindowUnicode IsWindowVisible KillSystemTimer KillTimer LoadBitmapW LoadCursorW LoadIconW LoadImageW LoadMenuA LoadStringW MapDialogRect MapVirtualKeyW MapWindowPoints MonitorFromRect MonitorFromWindow MoveWindow OffsetRect OpenClipboard PeekMessageW PostMessageW PostQuitMessage PtInRect RedrawWindow RegisterClassExW RegisterClassW RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient ScrollWindow ScrollWindowEx SendDlgItemMessageW SendMessageA SendMessageW SetCapture SetCaretPos SetClipboardData SetCursor SetFocus SetParent SetPropW SetRect SetRectEmpty SetScrollInfo SetScrollPos SetScrollRange SetSystemTimer SetTimer SetWindowLongA SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextA SetWindowTextW ShowCaret ShowScrollBar ShowWindow SubtractRect SystemParametersInfoW TabbedTextOutW TrackMouseEvent TrackPopupMenu TranslateMessage UnionRect UnregisterClassW UpdateWindow WindowFromPoint wsprintfW

AddMRUStringW CreateMRUListW CreateMappedBitmap CreatePropertySheetPage CreatePropertySheetPageA CreatePropertySheetPageW CreateStatusWindow CreateStatusWindowA CreateStatusWindowW CreateToolbar CreateToolbarEx CreateUpDownControl DPA_Create DPA_DeleteAllPtrs DPA_DeletePtr DPA_Destroy DPA_DestroyCallback DPA_EnumCallback DPA_GetPtr DPA_InsertPtr DPA_Search DPA_SetPtr DPA_Sort DSA_Create DSA_DeleteAllItems DSA_Destroy DSA_DestroyCallback DSA_GetItemPtr DSA_InsertItem DefSubclassProc DestroyPropertySheetPage DllGetVersion DllInstall DrawInsert DrawShadowText DrawStatusText DrawStatusTextA DrawStatusTextW EnumMRUListW FlatSB_EnableScrollBar FlatSB_GetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollProp FlatSB_GetScrollRange FlatSB_SetScrollInfo FlatSB_SetScrollPos FlatSB_SetScrollProp FlatSB_SetScrollRange FlatSB_ShowScrollBar FreeMRUList GetEffectiveClientRect GetMUILanguage GetWindowSubclass ImageList_Add ImageList_AddIcon ImageList_AddMasked ImageList_BeginDrag ImageList_Copy ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_DrawIndirect ImageList_Duplicate ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetFlags ImageList_GetIcon ImageList_GetIconSize ImageList_GetImageCount ImageList_GetImageInfo ImageList_GetImageRect ImageList_LoadImage ImageList_LoadImageA ImageList_LoadImageW ImageList_Merge ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetFilter ImageList_SetFlags ImageList_SetIconSize ImageList_SetImageCount ImageList_SetOverlayImage ImageList_Write InitCommonControls InitCommonControlsEx InitMUILanguage InitializeFlatSB LBItemFromPt MakeDragList MenuHelp PropertySheet PropertySheetA PropertySheetW RegisterClassNameW RemoveWindowSubclass SetWindowSubclass ShowHideMenuCtl Str_SetPtrW UninitializeFlatSB _TrackMouseEvent

Name

.text

Size

715KB

Virtual Size

715KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

740B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

75KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

241KB

Virtual Size

241KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rossym

Size

904KB

Virtual Size

904KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8b57e75c7ce96d3f785e92f48c5283f19912fb1a932f7a275d43a520399102ca

ntdll

advapi32

kernel32

msvcrt

usp10

gdi32

imm32

user32

generic