776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2[.]7z

Sharing

Copy URL Twitter E-mail

General

Target
776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2.7z
Size 308KB
Sample260901-y21tbaef39
SHA256 11188cf3e0257bfd1719e939a71fab6280c92bd2f246675ade3fd1c641c528ad
MD5 2fb46349889dfcdd34f45893ad6814f9
SHA1 736e970e296b493425f454105b3fa84949533846
SHA512 5bf5bd8efd19e609c7b6288a20c647da7a6d3206288f44e9136023b9130e98957bec36d5a8899bd4a052bb4ff134e2c0b44407b5d06e9859eed47fd867e78219
SSDEEP 6144:W7C42WfVu50+HCu/hu7p17V209zEpjj13BwY73/XzVFEOQIMsLp0rpdNE:We4ffVeMPTYpd3T3fzVdQai9dy
TLSH
T1D7642382866344D6F9CEA76F612001CF3F5FD74BBF563824F9416F919F118803A4A6BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2.exe

File Explorer

776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2.7z

.7z 308KB
776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2.exe

.exe 564KB

776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2.7z

SHA256 11188cf3e0257bfd1719e939a71fab6280c92bd2f246675ade3fd1c641c528ad
MD5 2fb46349889dfcdd34f45893ad6814f9
SHA1 736e970e296b493425f454105b3fa84949533846
SHA512 5bf5bd8efd19e609c7b6288a20c647da7a6d3206288f44e9136023b9130e98957bec36d5a8899bd4a052bb4ff134e2c0b44407b5d06e9859eed47fd867e78219
SSDEEP 6144:W7C42WfVu50+HCu/hu7p17V209zEpjj13BwY73/XzVFEOQIMsLp0rpdNE:We4ffVeMPTYpd3T3fzVdQai9dy
TLSH
T1D7642382866344D6F9CEA76F612001CF3F5FD74BBF563824F9416F919F118803A4A6BA
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2.exe

IMPHASH 50fa96e8bee8392937d77d1999426e98
SHA256 776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2
MD5 05c21bf3df38d5b8365db71d94dbca37
SHA1 b26796f41c9d265995a608adc51d604d7cb47851
SHA512 7e0f02b8477579524b237ff2d7260e22df7091efe609b5d96b2c89df2fc68cc9cc4ece7a067369994199d5ace033db95f1368bbad64e5dee4684a53ee88260e7
SSDEEP 12288:ZgdncS3vl2J8aN/EYA3lxI51aU0xLNoSrdhBWaCBKzfgE9AdORCjdza:Zgdnc6l+8m/ER7I51aU0RKSrdjWaqKzB
TLSH
T19FC4CE52736ADAF6F69620B00D94EF3518A4A9F53F3F0483BBD25D0EC438A841776726
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

137246

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

opengl32

glGenTextures glBindTexture glTexParameteri glTexImage2D glBegin glArrayElement

kernel32

GetStartupInfoA GetCommandLineA ExitProcess HeapAlloc HeapFree TerminateProcess RaiseException HeapReAlloc HeapSize GetACP GetTimeZoneInformation UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate RtlUnwind VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA FileTimeToLocalFileTime GetProfileStringA FileTimeToSystemTime SetErrorMode SystemTimeToFileTime LocalFileTimeToFileTime GetFileSize GetShortPathNameA GetThreadLocale GetStringTypeExA GetVolumeInformationA FindFirstFileA FindClose DeleteFileA MoveFileA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle GetOEMCP GetCPInfo GetProcessVersion GetCurrentDirectoryA TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalFree LocalAlloc SizeofResource GlobalFlags WideCharToMultiByte InterlockedDecrement InterlockedIncrement MulDiv SetLastError MultiByteToWideChar GetLastError GetDiskFreeSpaceA GetFileTime SetFileTime GetFullPathNameA GetTempFileNameA lstrcpynA GetFileAttributesA LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalFindAtomA VirtualProtect lstrcpyA GetModuleHandleA GetProcAddress lstrlenA WritePrivateProfileStringA GetPrivateProfileStringA GetPrivateProfileIntA GlobalAddAtomA CloseHandle GetModuleFileNameA GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId GlobalLock GlobalUnlock GlobalFree LockResource FindResourceA LoadResource VirtualFree

user32

AdjustWindowRectEx GetSysColor MapWindowPoints LoadIconA InvalidateRect SetRectEmpty LoadAcceleratorsA TranslateAcceleratorA ReleaseCapture GetDesktopWindow DestroyMenu LoadMenuA SetMenu ReuseDDElParam UnpackDDElParam BringWindowToTop ClientToScreen GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA IsZoomed PtInRect SetParent IsRectEmpty AppendMenuA DeleteMenu GetSystemMenu GetClassNameA InsertMenuA GetMenuStringA LoadCursorA GetSysColorBrush LoadStringA DestroyIcon CharUpperA SetTimer KillTimer WindowFromPoint SetRect InflateRect SetCapture InvertRect GetDCEx LockWindowUpdate GetTopWindow IsChild GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID DefWindowProcA CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA ScreenToClient GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow GetWindow RegisterWindowMessageA OffsetRect IntersectRect IsIconic GetWindowPlacement GetWindowRect wsprintfA SetFocus ShowWindow SetWindowPos SetWindowLongA GetDlgCtrlID GetWindowTextLengthA GetWindowTextA SetWindowTextA IsDialogMessageA SendDlgItemMessageA GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetMessageA TranslateMessage DispatchMessageA GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA GetLastActivePopup MessageBoxA SetCursor ShowOwnedPopups PostMessageA PostQuitMessage UpdateWindow UnregisterClassA HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA CharNextA GetNextDlgTabItem EndDialog GetActiveWindow SetActiveWindow IsWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetParent GetWindowLongA GetDlgItem IsWindowEnabled SendMessageA ReleaseDC GetDC EqualRect DeferWindowPos BeginDeferWindowPos CopyRect RemovePropA EndDeferWindowPos GetClientRect FillRect EnableWindow IsWindowUnicode SystemParametersInfoA

gdi32

SetBkMode SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx SelectClipRgn ExcludeClipRect IntersectClipRect SetTextAlign RestoreDC GetDeviceCaps CreateSolidBrush CreatePatternBrush PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextExtentPoint32A GetTextMetricsA StretchDIBits GetCharWidthA CreateFontA CreateFontIndirectA PatBlt SetRectRgn CombineRgn CreateRectRgnIndirect SaveDC GetObjectA SetBkColor SetTextColor GetClipBox CreateCompatibleBitmap GetStockObject LineDDA CreateBitmap CreateCompatibleDC SelectObject BitBlt DeleteDC CreateRectRgn CreateDIBitmap GetTextExtentPointA DeleteObject

comdlg32

GetSaveFileNameA GetFileTitleA GetOpenFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegSetValueA RegCreateKeyA GetFileSecurityA SetFileSecurityA RegDeleteValueA RegSetValueExA RegQueryValueA RegOpenKeyExA RegCreateKeyExA RegDeleteKeyA RegOpenKeyA RegEnumKeyA RegCloseKey

shell32

ExtractIconA DragQueryFileA DragFinish SHGetFileInfoA

comctl32

ord17