4157815278e1266b221264e799b2d81d4ac203121b78662da912f6ff5a8ced18

Sharing

Copy URL Twitter E-mail

General

Target
4157815278e1266b221264e799b2d81d4ac203121b78662da912f6ff5a8ced18
Size 1.2MB
Sample260905-ef91babg45
SHA256 4157815278e1266b221264e799b2d81d4ac203121b78662da912f6ff5a8ced18
MD5 77ebf804cd06d69fdef193c8a20530f2
SHA1 4457d0cacdf177001dac1e2d6a4ba87a0bbf797e
SHA512 6a3f399183fc00fe6801e55c986e7a025bd080467b0006d969d22b3f89f3eb7138e86149f3ca9f266aebd48fdba016ce45f9abcf6daa5b1035e57fa4cc2c32ae
SSDEEP 24576:Aic0u6DOOKjWPOXK2K7tgnCmrCVNrngUSM0lbw:M01yOKjWQKOnDrCVNDSM0lw
TLSH
T1DC45AE323D558132D5A181709EFDFB6F19ADBA350B7641CBA6C84D3E0E218C22B3A757
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4157815278e1266b221264e799b2d81d4ac203121b78662da912f6ff5a8ced18

File Explorer

4157815278e1266b221264e799b2d81d4ac203121b78662da912f6ff5a8ced18

.exe 1.2MB

4157815278e1266b221264e799b2d81d4ac203121b78662da912f6ff5a8ced18

IMPHASH 4e39b6577a6fe0f9bb899ad9541275db
SHA256 4157815278e1266b221264e799b2d81d4ac203121b78662da912f6ff5a8ced18
MD5 77ebf804cd06d69fdef193c8a20530f2
SHA1 4457d0cacdf177001dac1e2d6a4ba87a0bbf797e
SHA512 6a3f399183fc00fe6801e55c986e7a025bd080467b0006d969d22b3f89f3eb7138e86149f3ca9f266aebd48fdba016ce45f9abcf6daa5b1035e57fa4cc2c32ae
SSDEEP 24576:Aic0u6DOOKjWPOXK2K7tgnCmrCVNrngUSM0lbw:M01yOKjWQKOnDrCVNDSM0lw
TLSH
T1DC45AE323D558132D5A181709EFDFB6F19ADBA350B7641CBA6C84D3E0E218C22B3A757
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

494157

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\MyCode\gameMaster\LDSGameMaster_VS2017\Release\update.pdb

kernel32

AddAtomW DeleteAtom MoveFileExW MoveFileW WritePrivateProfileStringW SetFileAttributesW GetTempFileNameW lstrlenW FindAtomW GetDiskFreeSpaceExW WideCharToMultiByte CopyFileW GetPrivateProfileStringW CreateMutexW Sleep MultiByteToWideChar FileTimeToSystemTime lstrcpynW lstrcmpiW LoadLibraryW FindResourceW SizeofResource LockResource LoadResource GetProcAddress GetModuleFileNameW FreeLibrary FindResourceExW GetTickCount CreateThread DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SystemTimeToTzSpecificLocalTime SetEvent WaitForSingleObject CreateEventW WaitForMultipleObjects GetFileSize GetCurrentProcessId TerminateProcess OpenProcess GetModuleHandleW GetCurrentProcess CreateProcessW LocalAlloc LocalFree FindNextFileW LocalFileTimeToFileTime SetFilePointer SetFileTime GetProcessHeap CreateFileMappingW MapViewOfFile UnmapViewOfFile DosDateTimeToFileTime GetLocalTime GetVersion GetVersionExW GetTempPathW FindClose SetLastError CreatePipe PeekNamedPipe GetStartupInfoW GlobalMemoryStatusEx GetSystemTimeAsFileTime GetSystemDirectoryW lstrlenA GetCurrentThreadId GetLongPathNameW GetExitCodeProcess GetACP OutputDebugStringA IsBadReadPtr FreeResource lstrcmpW MulDiv ResumeThread ResetEvent GlobalAlloc GlobalUnlock GlobalLock GlobalFree IsDebuggerPresent OutputDebugStringW EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree LoadLibraryExA FormatMessageW DuplicateHandle WaitForSingleObjectEx SwitchToThread GetCurrentThread TryEnterCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree QueryPerformanceCounter CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo InitializeCriticalSectionEx UnhandledExceptionFilter SetUnhandledExceptionFilter DeviceIoControl lstrcmpA lstrcmpiA CreateFileA GetSystemWindowsDirectoryW LoadLibraryExW CreateTimerQueue SignalObjectAndWait SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes FreeLibraryAndExitThread GetModuleHandleA VirtualProtect ReleaseSemaphore InterlockedFlushSList QueryDepthSList UnregisterWaitEx RtlUnwind GetFileAttributesExW ExitThread GetModuleHandleExW ExitProcess GetStdHandle GetFileType GetTimeZoneInformation IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleOutputCP GetConsoleMode ReadConsoleW FindFirstFileExW IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle WriteConsoleW HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException CloseHandle DecodePointer WriteFile SetFilePointerEx SetEndOfFile ReadFile GetFileTime GetFileSizeEx FlushFileBuffers DeleteFileW CreateFileW

user32

SetLayeredWindowAttributes RedrawWindow MoveWindow CreateAcceleratorTableW InvalidateRgn FillRect SetWindowTextW GetWindowTextW GetWindowTextLengthW MonitorFromWindow GetMonitorInfoW SetWindowPos UpdateLayeredWindow IsChild LoadCursorW DestroyWindow CreateWindowExW GetClassInfoExW RegisterClassExW CallWindowProcW IsRectEmpty SendMessageTimeoutW GetParent GetWindowLongW IsZoomed IsWindowVisible PostMessageW GetWindowThreadProcessId GetSysColor ClientToScreen SetCaretPos MapWindowPoints GetMessageW TranslateMessage GetWindowDC ScreenToClient GetCursorPos GetWindowRect SetForegroundWindow ShowCaret HideCaret CreateCaret GetIconInfo DrawIconEx DestroyIcon SetRect DrawTextW CharPrevW IntersectRect CopyRect CharNextW FindWindowExW SystemParametersInfoW LoadImageW GetPropW SetFocus GetClientRect InvalidateRect GetUpdateRect EndPaint BeginPaint DispatchMessageW SendMessageW PostQuitMessage ShowWindow RegisterClassW OffsetRect InflateRect SetWindowLongW BringWindowToTop IsWindow FindWindowW KillTimer SetTimer UnregisterClassW SetCursor wvsprintfW RemovePropW SetPropW SetWindowRgn EnableWindow GetWindow GetClassNameW IsIconic PtInRect ReleaseDC GetDC ReleaseCapture SetCapture GetKeyState GetFocus DefWindowProcW

advapi32

RegCreateKeyW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegCloseKey RegEnumKeyExA RegOpenKeyExA RegQueryValueExA GetTokenInformation RegCreateKeyExW RegEnumKeyExW FreeSid CheckTokenMembership AllocateAndInitializeSid LookupPrivilegeValueW SetTokenInformation GetLengthSid DuplicateTokenEx CreateWellKnownSid AdjustTokenPrivileges OpenProcessToken

shell32

SHFileOperationW SHGetSpecialFolderPathW ShellExecuteW ShellExecuteExW SHCreateDirectoryExW ord165

ole32

CoCreateGuid CoUninitialize CLSIDFromString CLSIDFromProgID OleLockRunning CoCreateInstance PropVariantClear CreateStreamOnHGlobal CoInitializeEx CoInitializeSecurity CoInitialize CoSetProxyBlanket

oleaut32

SafeArrayCreate SysStringLen SafeArrayPutElement SysFreeString SysStringByteLen VariantInit VariantClear SysAllocString

shlwapi

StrStrIW StrStrIA StrCmpIW StrCmpNIW PathCombineW PathFindExtensionW PathIsDirectoryW PathIsRelativeW PathRemoveFileSpecW PathAppendW PathFileExistsW PathStripToRootW PathIsRootW AssocQueryStringW PathFindFileNameW wnsprintfW SHSetValueA StrTrimA SHGetValueA

comctl32

ord17 _TrackMouseEvent InitCommonControlsEx

msimg32

AlphaBlend GradientFill

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

psapi

EnumProcesses GetModuleFileNameExW

iphlpapi

GetAdaptersInfo

gdi32

SetStretchBltMode StretchBlt SetBkMode SetBkColor ExtSelectClipRgn SelectClipRgn RoundRect SetDIBitsToDevice GetDIBits CreateDCW GetDeviceCaps ExtTextOutW TextOutW MoveToEx CreateDIBSection CreateSolidBrush LineTo GetTextExtentPoint32W GetClipBox CreateCompatibleBitmap GetCharABCWidthsW CreateRectRgnIndirect CombineRgn CreateRoundRectRgn SetTextColor SetWindowOrgEx GetObjectW GetTextMetricsW SelectObject SaveDC RestoreDC Rectangle GetStockObject DeleteObject DeleteDC CreatePen CreateFontIndirectW CreateCompatibleDC BitBlt

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileW URLDownloadToCacheFileW

gdiplus

GdipBitmapUnlockBits GdipDrawImagePointsI GdipDrawImageRectRectI GdipBitmapLockBits GdipGetImageEncodersSize GdipGetImageEncoders GdipFillPath GdipSetInterpolationMode GdipAlloc GdipFree GdipCloneBrush GdipDeleteBrush GdipCreateSolidFill GdipCreateFromHDC GdipDeleteGraphics GdipSetSmoothingMode GdipFillEllipseI GdipCreatePath GdipDeletePath GdipAddPathArc GdipCreatePen1 GdipDeletePen GdipDrawPath GdipDrawEllipseI GdipLoadImageFromStreamICM GdipCloneImage GdipDisposeImage GdipGetImageWidth GdipGetImageHeight GdipCloneBitmapAreaI GdipImageGetFrameDimensionsList GdipImageGetFrameCount GdipImageSelectActiveFrame GdipGetPropertyItemSize GdipGetPropertyItem GdipGraphicsClear GdipDrawImageRectI GdipClosePathFigure GdipAddPathArcI GdipCreateTexture GdipSaveImageToFile GdipGetImageGraphicsContext GdipCreateBitmapFromStream GdipCreateBitmapFromFile GdipCreateBitmapFromScan0 GdipCreateHBITMAPFromBitmap GdipImageGetFrameDimensionsCount

generic

count=1, id=263, version=30795,

count=3, id=261, version=27031,

count=34, id=259, version=30795,

count=2, id=260, version=27034,

count=4, id=261, productName=VS2017 v15.7.5 build 26433, version=26433,

count=6, id=265, version=27054,

count=2, id=199, version=41118,

count=24, id=259, version=26706,

count=2, id=261, version=27050,

count=1, id=260, version=27050,

count=19, id=261, version=27051,

count=38, id=260, version=26706,

count=132, id=261, version=26706,

count=201, id=261, version=30795,

count=42, id=260, version=30795,

count=37, id=257, version=30795,

count=525, id=1, productName=Unmarked objects,

count=99, id=261, version=27054,

count=1, id=255, version=27054,

count=1, id=151,

count=1, id=258, version=27054,