2d4d7b343bb11975c443cd7c4b51c324261dbb2af70fec65b8894060bafe9193

Sharing

Copy URL Twitter E-mail

General

Target
2d4d7b343bb11975c443cd7c4b51c324261dbb2af70fec65b8894060bafe9193
Size 508KB
Sample260916-hteccagl9s
SHA256 2d4d7b343bb11975c443cd7c4b51c324261dbb2af70fec65b8894060bafe9193
MD5 0e87367f78c4c4c1f500cf73d792897a
SHA1 8bf30924dcdbed077cc6bf67cd4c95e2ee078054
SHA512 e1a0b23c92b23de25dc9649811d378226071473028716c55343f9cebd93e5aee5e87c7f838aaddd6f8996a32f70e90518639f16ddbd330a3eb5269c2ae91356f
SSDEEP 12288:wgalicbJJCaGimXF13sVWj9v/La+BMl+IxlLpo8Oh:wZlicbJJCaGiiF13GWj9v/LauMl+Ixl2
TLSH
T1FEB40823A062C076D5152AF2A775073D78F8962118BA8813FFE8CDF1BC755338BA691D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d4d7b343bb11975c443cd7c4b51c324261dbb2af70fec65b8894060bafe9193

File Explorer

2d4d7b343bb11975c443cd7c4b51c324261dbb2af70fec65b8894060bafe9193

.exe 508KB

2d4d7b343bb11975c443cd7c4b51c324261dbb2af70fec65b8894060bafe9193

IMPHASH 6a4f366e7faddd62798595dd601e7584
SHA256 2d4d7b343bb11975c443cd7c4b51c324261dbb2af70fec65b8894060bafe9193
MD5 0e87367f78c4c4c1f500cf73d792897a
SHA1 8bf30924dcdbed077cc6bf67cd4c95e2ee078054
SHA512 e1a0b23c92b23de25dc9649811d378226071473028716c55343f9cebd93e5aee5e87c7f838aaddd6f8996a32f70e90518639f16ddbd330a3eb5269c2ae91356f
SSDEEP 12288:wgalicbJJCaGimXF13sVWj9v/La+BMl+IxlLpo8Oh:wZlicbJJCaGiiF13GWj9v/LauMl+Ixl2
TLSH
T1FEB40823A062C076D5152AF2A775073D78F8962118BA8813FFE8CDF1BC755338BA691D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

379513

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVersionExA GetEnvironmentVariableA GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter GetACP HeapSize RaiseException TerminateProcess IsBadWritePtr LCMapStringW SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW SetStdHandle IsBadCodePtr LCMapStringA LoadLibraryA FreeLibrary GetCommandLineA GetStartupInfoA CreateProcessA DeleteFileA GetFileSize WritePrivateProfileStringA WriteFile GetPrivateProfileStringA GetTickCount CreateDirectoryA SetFilePointer GetLocalTime GlobalAlloc GlobalLock GlobalUnlock GlobalFree GetUserDefaultLCID Sleep GetModuleFileNameA GetProcAddress IsBadReadPtr HeapReAlloc ExitProcess GetModuleHandleA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection lstrcmpA lstrlenA ReleaseMutex WaitForSingleObject CreateMutexA VirtualFree VirtualAlloc lstrcmpiW lstrcmpW lstrlenW HeapCreate HeapDestroy RtlZeroMemory InterlockedDecrement InterlockedIncrement InterlockedExchangeAdd GetLastError Process32Next Process32First MultiByteToWideChar HeapFree HeapAlloc GetProcessHeap ReadFile GetFileSizeEx GetOEMCP CreateFileA WideCharToMultiByte CloseHandle lstrcpynA OpenProcess Module32First CreateToolhelp32Snapshot GetComputerNameExA lstrcatA RtlMoveMemory CreateThread SetDllDirectoryA GetCPInfo RtlUnwind FlushFileBuffers GetCurrentProcess SetErrorMode GetProcessVersion FindResourceA LoadResource LockResource GetVersion GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA SetLastError lstrcpyA GlobalFlags MulDiv TlsGetValue LocalReAlloc TlsSetValue GlobalReAlloc TlsFree GlobalHandle TlsAlloc LocalFree LocalAlloc GlobalDeleteAtom lstrcmpiA GetCurrentThread GetCurrentThreadId

imagehlp

MakeSureDirectoryPathExists

ole32

CoRegisterMessageFilter CoFreeUnusedLibraries OleUninitialize OleInitialize CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard CLSIDFromProgID CLSIDFromString CoCreateInstance OleRun CoUninitialize CoInitialize

ws2_32

WSAStartup gethostname WSACleanup WSAGetLastError

shlwapi

StrToIntExW PathFindFileNameA PathRemoveFileSpecA PathRemoveBackslashA PathFindExtensionA PathGetArgsA PathFileExistsA StrToIntW

psapi

GetProcessImageFileNameW

user32

PeekMessageA GetMessageA TranslateMessage DispatchMessageA wsprintfA MessageBoxA GetWindowThreadProcessId GetWindowTextA FindWindowExA SetActiveWindow IsWindow AdjustWindowRectEx GetClientRect GetSysColor MapWindowPoints UpdateWindow LoadIconA LoadCursorA GetSysColorBrush LoadStringA UnregisterClassA PostThreadMessageA DestroyMenu CreateDialogIndirectParamA EndDialog CopyRect GetTopWindow GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetSubMenu GetMenuItemID DestroyWindow CreateWindowExA GetClassLongA SetPropA GetPropA CallWindowProcA PostQuitMessage PostMessageA SendMessageA SetCursor EnableWindow GetWindowLongA IsWindowEnabled GetLastActivePopup GetParent SetWindowsHookExA GetCursorPos IsWindowVisible ValidateRect CallNextHookEx GetKeyState GetActiveWindow GetNextDlgTabItem GetFocus EnableMenuItem CheckMenuItem SetMenuItemBitmaps ModifyMenuA GetMenuState LoadBitmapA GetMenuCheckMarkDimensions RegisterClipboardFormatA GetClassNameA PtInRect GetWindowRect GetDlgCtrlID GetWindow ClientToScreen SetWindowTextA UnhookWindowsHookEx GetMenuItemCount GetDC ReleaseDC TabbedTextOutA DrawTextA GrayStringA GetDlgItem SendDlgItemMessageA IsDialogMessageA SetWindowLongA SetWindowPos ShowWindow SetFocus GetSystemMetrics GetWindowPlacement IsIconic SystemParametersInfoA RegisterWindowMessageA SetForegroundWindow GetForegroundWindow GetMessagePos GetMessageTime DefWindowProcA RemovePropA

gdi32

Escape ExtTextOutA TextOutA RectVisible PtVisible GetDeviceCaps GetClipBox ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetTextColor SetBkColor SelectObject RestoreDC SaveDC DeleteDC DeleteObject CreateBitmap GetStockObject GetObjectA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegCreateKeyExA RegCloseKey RegSetValueExA RegOpenKeyExA

comctl32

ord17

oledlg

ord8

oleaut32

SystemTimeToVariantTime VariantTimeToSystemTime VariantInit SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetElemsize VarR8FromCy VarR8FromBool VariantChangeType LoadTypeLi LHashValOfNameSys RegisterTypeLi VariantCopy SafeArrayCreate SysAllocString VariantClear SafeArrayDestroy

Sharing

General

Malware Config

Signatures

File Explorer

2d4d7b343bb11975c443cd7c4b51c324261dbb2af70fec65b8894060bafe9193

kernel32

imagehlp

ole32

ws2_32

shlwapi

psapi

user32

gdi32

winspool.drv

advapi32

comctl32

oledlg

oleaut32

generic