2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86

Sharing

Copy URL Twitter E-mail

General

Target
2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86
Size 2.1MB
Sample260903-sa8rysap91
SHA256 2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86
MD5 05d53c5d8756ec259b8e8357a3145e63
SHA1 e75bbab9eb866a2640874750daea1bcc66101b76
SHA512 e8bf238a8a8ba637439a3bcfc1fb34004d99ca4707e41215474c37f1b69a6fbf38271ab71b3ea6913d4589610efcd5f649b4f030c9fb2daf785d75440dcb6b1c
SSDEEP 49152:pVQCYFc3lBG3qb6c61wwOKO5WqfodhWGA4HnCIdD+0/H7icQd:pVQjZa/BwhCWqfodUoHCIM0/bicQ
TLSH
T1BDA5E022B562D032D16111B22939FFB69A7DAA740F7564CFA3D01F3E69206C22E35F17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86

File Explorer

2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86

.exe 2.1MB

2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86

IMPHASH 136af212c7095159f16cf24dd1d4614c
SHA256 2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86
MD5 05d53c5d8756ec259b8e8357a3145e63
SHA1 e75bbab9eb866a2640874750daea1bcc66101b76
SHA512 e8bf238a8a8ba637439a3bcfc1fb34004d99ca4707e41215474c37f1b69a6fbf38271ab71b3ea6913d4589610efcd5f649b4f030c9fb2daf785d75440dcb6b1c
SSDEEP 49152:pVQCYFc3lBG3qb6c61wwOKO5WqfodhWGA4HnCIdD+0/H7icQd:pVQjZa/BwhCWqfodUoHCIM0/bicQ
TLSH
T1BDA5E022B562D032D16111B22939FFB69A7DAA740F7564CFA3D01F3E69206C22E35F17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

482565

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Desktop\NEW DUNGEONS\EONX(1)\Launcher\Launcher\Release\Launcher.pdb

comctl32

ord17 _TrackMouseEvent

shlwapi

PathIsRelativeW PathFileExistsW

gdiplus

GdipStringFormatGetGenericTypographic GdipDrawRectangleI GdipDrawBezierI GdipDrawLineI GdipFillRectangle GdipDeleteStringFormat GdipDeletePath GdipSetStringFormatTrimming GdipCreateFontFromLogfontA GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipDrawString GdipDrawEllipseI GdipFillEllipseI GdipFillPath GdipCreateFontFromDC GdiplusStartup GdiplusShutdown GdipDeleteFont GdipSetStringFormatFlags GdipCloneStringFormat GdipTransformPath GdipIsOutlineVisiblePathPointI GdipIsVisiblePathPointI GdipGetPathWorldBoundsI GdipAddPathPolygonI GdipAddPathPieI GdipAddPathArcI GdipAddPathEllipseI GdipAddPathRectangleI GdipAddPathCurveI GdipAddPathBezierI GdipAddPathLine2I GdipAddPathLineI GdipClosePathFigure GdipStartPathFigure GdipGetPathFillMode GdipSetPathFillMode GdipResetPath GdipClonePath GdipCreatePath GdipCreateTexture GdipCreateBitmapFromHBITMAP GdipCreateSolidFill GdipGetPenDashStyle GdipSetPenDashStyle GdipGetPenLineJoin GdipSetPenLineJoin GdipGetPenDashCap197819 GdipGetPenEndCap GdipGetPenStartCap GdipSetPenDashCap197819 GdipSetPenEndCap GdipSetPenStartCap GdipSetPenColor GdipGetPenWidth GdipSetPenWidth GdipClonePen GdipCreateBitmapFromFile GdipLoadImageFromFile GdipMeasureString GdipImageRotateFlip GdipDrawImageRect GdipSetWorldTransform GdipRotateMatrix GdipTranslateMatrix GdipCreatePen2 GdipSetLineBlend GdipCloneBrush GdipDeleteBrush GdipCreateLineBrushFromRect GdipDrawArc GdipDeletePen GdipCreatePen1 GdipSetSmoothingMode GdipDeleteGraphics GdipCreateFromHDC GdipScaleMatrix GdipDeleteMatrix GdipCreateMatrix GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCreateHBITMAPFromBitmap GdipImageSelectActiveFrame GdipGetPropertyItem GdipGetPropertyItemSize GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdipAlloc GdipFree GdipDrawPath

winmm

timeGetTime timeKillEvent timeSetEvent

imm32

ImmReleaseContext ImmSetCompositionWindow ImmGetContext

msimg32

AlphaBlend

wininet

InternetReadFile InternetSetOptionW InternetOpenUrlA InternetOpenA InternetCloseHandle HttpQueryInfoA

kernel32

FlsGetValue FlsAlloc GetConsoleMode GetConsoleOutputCP GetTimeZoneInformation GetFileType FreeLibraryAndExitThread ExitThread CreateThread GetModuleHandleExW LoadLibraryExW RtlUnwind InitializeSListHead GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetStringTypeW LCMapStringW CompareStringW SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlsSetValue ReadConsoleW FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW FlsFree VirtualProtect GetDateFormatW SetEnvironmentVariableW SetStdHandle HeapSize GetTimeFormatW WriteConsoleW GetSystemTimeAsFileTime CreateIoCompletionPort PostQueuedCompletionStatus GetQueuedCompletionStatus FindFirstFileW WritePrivateProfileStringW FindClose GetFileAttributesW SetFileAttributesW MultiByteToWideChar GetPrivateProfileStringW Sleep GetLastError DeleteFileW CloseHandle SetCurrentDirectoryW MoveFileExW ExitProcess WideCharToMultiByte MoveFileW ReadFile SetLastError GetFullPathNameW CreateFileW LoadLibraryW GetProcAddress CreateDirectoryW HeapFree WriteFile HeapReAlloc HeapAlloc GetCurrentProcessId GetProcessHeap GetTickCount FlushFileBuffers GetFileSizeEx GetCommandLineW TerminateProcess GetModuleFileNameW WaitForMultipleObjects GetProcessId CreateMutexW WaitForSingleObject OpenEventW OpenProcess CreateEventW FormatMessageW SetEvent GetLocalTime SetFilePointerEx LocalFree CreateProcessW CopyFileW QueryFullProcessImageNameW GetModuleHandleW VerifyVersionInfoW VerSetConditionMask GlobalFree GetCurrentDirectoryW FindResourceW LoadResource SizeofResource GlobalAlloc GlobalLock GlobalUnlock MulDiv QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleA GlobalSize GetFileSize SetFilePointer SystemTimeToFileTime LocalFileTimeToFileTime GetEnvironmentVariableW FreeLibrary TlsSetValue TlsAlloc TlsGetValue TlsFree GetCurrentThreadId TerminateThread RaiseException GetCurrentProcess GetStdHandle VirtualQuery EnterCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection DeleteCriticalSection SetEndOfFile

user32

SetWindowPos GetWindowRect OffsetRect DefWindowProcW DestroyWindow ReleaseDC LoadCursorW RegisterClassW GetClassInfoExW RegisterClassExW SetWindowLongW IsWindow CreateWindowExW GetWindowLongW GetWindow EnableWindow SetFocus ShowWindow GetMonitorInfoW MonitorFromWindow IsIconic GetSystemMetrics SendMessageW PostMessageW CallWindowProcW SetPropW GetPropW GetDC InvalidateRect GetKeyState GetFocus SetCapture SetTimer BeginPaint EndPaint wsprintfW MessageBoxW GetClientRect IsRectEmpty IntersectRect UpdateLayeredWindow PtInRect UnionRect SetCursor CharNextW IsZoomed MonitorFromPoint SetWindowRgn IsWindowVisible SetForegroundWindow ClientToScreen GetSysColor GetAsyncKeyState OpenClipboard IsClipboardFormatAvailable GetClipboardData CloseClipboard EmptyClipboard SetClipboardData FindWindowW GetDesktopWindow MapWindowPoints GetParent TranslateMessage GetQueueStatus CallMsgFilterW MsgWaitForMultipleObjectsEx PeekMessageW DispatchMessageW WaitMessage UnregisterClassW KillTimer PostQuitMessage GetCursorPos ScreenToClient MoveWindow SetWindowTextW ReleaseCapture GetUpdateRect

gdi32

BitBlt CreateRoundRectRgn GetDeviceCaps CreateDIBSection StretchBlt CreateCompatibleDC DeleteDC RestoreDC GetWindowOrgEx SetWindowOrgEx SetStretchBltMode GetObjectA CreateRectRgnIndirect ExtSelectClipRgn SelectObject DeleteObject CreateFontIndirectW GetStockObject GetObjectW SaveDC

shell32

ShellExecuteExW SHGetSpecialFolderPathW ShellExecuteW CommandLineToArgvW

ole32

CreateStreamOnHGlobal CoCreateInstance CoInitialize

Name

.text

Size

655KB

Virtual Size

655KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

127KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86

comctl32

shlwapi

gdiplus

winmm

imm32

msimg32

wininet

kernel32

user32

gdi32

shell32

ole32

generic