dcdb32a63ee971cf021c87023fcebb634e8ac3c4c6d528a746fc50b4a0ded7a8

Sharing

Copy URL Twitter E-mail

General

Target
dcdb32a63ee971cf021c87023fcebb634e8ac3c4c6d528a746fc50b4a0ded7a8
Size 8.9MB
Sample260905-l619essbpg
SHA256 dcdb32a63ee971cf021c87023fcebb634e8ac3c4c6d528a746fc50b4a0ded7a8
MD5 b047832a4e98c94eaff4ab54f4f98bfc
SHA1 fb919cccd0371b846f33861cb673f37430db656e
SHA512 83fca9fa62867550fe4106aace94c9abda2015aa2089a171f79f37e29f573d8de5d1722f92a840af3e8500db12c12a17cfafcc6b1de12c9ff8915b2c067f2c70
SSDEEP 196608:nGfH3mq3mST4gxmrInrXSgxjsh+MHjCeXFd5zWidQXZThsWXwuv57z5prY:nGfH3t3igxxxjshbDTXFdoidQXZTSWXf
TLSH
T1809633216A40F33AD52E40B1869B577585BB2EE0663443BB73843AED0D325F256372FB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcdb32a63ee971cf021c87023fcebb634e8ac3c4c6d528a746fc50b4a0ded7a8

File Explorer

dcdb32a63ee971cf021c87023fcebb634e8ac3c4c6d528a746fc50b4a0ded7a8

.exe 8.9MB

dcdb32a63ee971cf021c87023fcebb634e8ac3c4c6d528a746fc50b4a0ded7a8

IMPHASH 64a0d82138ceaf1afe77eac224251a49
SHA256 dcdb32a63ee971cf021c87023fcebb634e8ac3c4c6d528a746fc50b4a0ded7a8
MD5 b047832a4e98c94eaff4ab54f4f98bfc
SHA1 fb919cccd0371b846f33861cb673f37430db656e
SHA512 83fca9fa62867550fe4106aace94c9abda2015aa2089a171f79f37e29f573d8de5d1722f92a840af3e8500db12c12a17cfafcc6b1de12c9ff8915b2c067f2c70
SSDEEP 196608:nGfH3mq3mST4gxmrInrXSgxjsh+MHjCeXFd5zWidQXZThsWXwuv57z5prY:nGfH3t3igxxxjshbDTXFdoidQXZTSWXf
TLSH
T1809633216A40F33AD52E40B1869B577585BB2EE0663443BB73843AED0D325F256372FB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

296083

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\work\kv_svn\Presenter-Windows\branches\PresenterC\Bin\Release\PresenterPreview.pdb

kernel32

WriteConsoleW DecodePointer SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW GetConsoleCP FlushFileBuffers LCMapStringW GetConsoleMode SetFilePointerEx HeapReAlloc HeapAlloc InitializeCriticalSectionAndSpinCount GetStdHandle GetModuleHandleExW LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer SetLastError RaiseException RtlUnwind InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent CreateEventW WaitForSingleObjectEx ResetEvent SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter InterlockedDecrement InterlockedIncrement GetLocalTime HeapSize GlobalUnlock GlobalLock GetStringTypeW WideCharToMultiByte CreateDirectoryW DosDateTimeToFileTime SystemTimeToFileTime DuplicateHandle SetFileTime GlobalAlloc SetFilePointer GetFileType GetCurrentProcess MulDiv GetCurrentProcessId ReadFile GetFileSize ExitProcess MultiByteToWideChar GetACP GetCurrentDirectoryW GetModuleHandleW LoadLibraryW GetTickCount GetProcAddress Process32FirstW Process32NextW GetLastError CreateToolhelp32Snapshot TerminateProcess LockResource FreeResource GetUserDefaultUILanguage FindResourceW LoadResource CloseHandle CreateFileW SizeofResource FindClose GetModuleFileNameW WriteFile FindNextFileW HeapFree

user32

GetCaretPos ClientToScreen SetWindowTextW GetWindowTextW SendMessageW FindWindowExW GetWindowThreadProcessId PostQuitMessage KillTimer MoveWindow GetWindowTextLengthW CreateAcceleratorTableW InvalidateRgn GetGUIThreadInfo GetSysColor SetTimer GetSystemMetrics LoadIconW CharNextW GetMessageW TranslateMessage DispatchMessageW PostMessageW CreateWindowExW IsWindow DestroyWindow SetWindowPos IsWindowVisible IsIconic IsZoomed SetFocus GetActiveWindow GetFocus GetKeyState SetCapture ReleaseCapture GetDC ReleaseDC BeginPaint EndPaint GetUpdateRect InvalidateRect GetClientRect GetWindowRect GetCursorPos ScreenToClient MapWindowPoints IntersectRect UnionRect IsRectEmpty PtInRect GetWindowLongW SetWindowLongW GetParent GetWindow SetCursor LoadCursorW wvsprintfW OffsetRect DefWindowProcW CallWindowProcW RegisterClassW RegisterClassExW GetClassInfoExW ShowWindow EnableWindow SetPropW GetPropW SetWindowRgn MonitorFromWindow SetCaretPos ShowCaret HideCaret GetCaretBlinkTime CreateCaret SetRect FillRect DrawTextW CharPrevW MessageBoxW GetMonitorInfoW

gdi32

SelectClipRgn RoundRect LineTo GetTextExtentPoint32W GetClipBox GetCharABCWidthsW CreateSolidBrush CreateRectRgnIndirect CreatePenIndirect CombineRgn CreateRoundRectRgn GetObjectA SetWindowOrgEx GetTextMetricsW SelectObject ExtSelectClipRgn RestoreDC Rectangle GetStockObject DeleteObject CreatePen CreateFontIndirectW CreateCompatibleDC CreateCompatibleBitmap BitBlt CreateDCW GetDIBits DeleteDC GetObjectW GdiFlush GetDeviceCaps CreatePatternBrush SetBkMode StretchBlt SetStretchBltMode SetTextColor CreateDIBSection MoveToEx TextOutW SaveDC SetBkColor ExtTextOutW

shell32

CommandLineToArgvW

ole32

CreateStreamOnHGlobal OleLockRunning CLSIDFromProgID CLSIDFromString CoUninitialize CoInitialize CoCreateInstance

oleaut32

SysFreeString SysAllocString VariantInit VariantClear

gdiplus

GdipDrawImageRectI GdipGetPropertyItem GdipGetPropertyItemSize GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipLoadImageFromStreamICM GdipLoadImageFromStream GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipDeleteStringFormat GdipCreateStringFormat GdipDrawString GdipGetFamily GdipDeleteFont GdipCreateFontFromLogfontA GdipCreateFontFromDC GdipDeleteFontFamily GdipDrawImage GdipGraphicsClear GdipSetInterpolationMode GdipSetTextRenderingHint GdipSetPixelOffsetMode GdipSetCompositingQuality GdipCreateLineBrushI GdiplusShutdown GdiplusStartup GdipAddPathArcI GdipAddPathLineI GdipClosePathFigure GdipDrawPath GdipStartPathFigure GdipGetImageHeight GdipImageSelectActiveFrame GdipGetImageWidth GdipAddPathEllipseI GdipDeleteBrush GdipDrawEllipseI GdipDeletePath GdipSetSmoothingMode GdipCreatePath GdipFillPath GdipGetSmoothingMode GdipCreateFromHDC GdipCreateTexture GdipCloneBrush GdipGetImageGraphicsContext GdipDeleteGraphics GdipDeletePen GdipDrawImagePointRectI GdipCreatePen1 GdipCloneImage GdipBitmapUnlockBits GdipAlloc GdipDisposeImage GdipFree GdipBitmapLockBits GdipCreateBitmapFromScan0

imm32

ImmReleaseContext ImmSetCompositionFontW ImmSetCompositionWindow ImmGetContext

comctl32

ord17 _TrackMouseEvent

Sharing

General

Malware Config

Signatures

File Explorer

dcdb32a63ee971cf021c87023fcebb634e8ac3c4c6d528a746fc50b4a0ded7a8

kernel32

user32

gdi32

shell32

ole32

oleaut32

gdiplus

imm32

comctl32

generic