dbf836b5412c1f8a4ffb05bc4673a150c33dc379901cc23f1c94c0e0f382bf62

Sharing

Copy URL Twitter E-mail

General

Target
dbf836b5412c1f8a4ffb05bc4673a150c33dc379901cc23f1c94c0e0f382bf62
Size 393KB
Sample260916-mphlesyfrh
SHA256 dbf836b5412c1f8a4ffb05bc4673a150c33dc379901cc23f1c94c0e0f382bf62
MD5 2fe0936ef01786c785907cfdb6b94693
SHA1 217eeeff332fa4f647f2fa7e3760b9d490a893f5
SHA512 6aaf317da671c42f59bfd20c74d5c4ddeec786119ea3f0a22e221bf7965eedf2206a59d8efb9290b0a599e15bec3d753b1c33de2dcbc6a44ab0b136d4c36a962
SSDEEP 6144:9jTZJOdXEklT0hfu8h4g240RmVHO73ZRn3wiFFDfr61kntU0ig9y8lu:5yd0klT0pH24ymA/nNS1g3y8U
TLSH
T1FA848C42EBD60274FAF24AB469BB6B125D3B7C461D38D64F43881C8C5A23E81D939377
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbf836b5412c1f8a4ffb05bc4673a150c33dc379901cc23f1c94c0e0f382bf62

File Explorer

dbf836b5412c1f8a4ffb05bc4673a150c33dc379901cc23f1c94c0e0f382bf62

.exe 393KB

dbf836b5412c1f8a4ffb05bc4673a150c33dc379901cc23f1c94c0e0f382bf62

IMPHASH f8145f06d8e972aaeff79ae65130f014
SHA256 dbf836b5412c1f8a4ffb05bc4673a150c33dc379901cc23f1c94c0e0f382bf62
MD5 2fe0936ef01786c785907cfdb6b94693
SHA1 217eeeff332fa4f647f2fa7e3760b9d490a893f5
SHA512 6aaf317da671c42f59bfd20c74d5c4ddeec786119ea3f0a22e221bf7965eedf2206a59d8efb9290b0a599e15bec3d753b1c33de2dcbc6a44ab0b136d4c36a962
SSDEEP 6144:9jTZJOdXEklT0hfu8h4g240RmVHO73ZRn3wiFFDfr61kntU0ig9y8lu:5yd0klT0pH24ymA/nNS1g3y8U
TLSH
T1FA848C42EBD60274FAF24AB469BB6B125D3B7C461D38D64F43881C8C5A23E81D939377
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

242864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupDiDestroyClassImageList SetupDiGetClassImageIndex SetupDiGetClassImageList SetupDiLoadDeviceIcon SetupOpenInfFileW SetupDiSetClassInstallParamsW SetupDiRemoveDevice SetupDiGetClassDescriptionW CM_Reenumerate_DevNode CM_Open_DevNode_Key CM_Locate_DevNodeW CM_Get_Sibling CM_Get_Parent CM_Get_DevNode_Status CM_Get_DevNode_Registry_PropertyW CM_Get_Device_IDW CM_Get_Child CM_Enable_DevNode CM_Disable_DevNode SetupUninstallOEMInfW SetupDiGetDeviceInstallParamsW SetupDiGetDeviceRegistryPropertyW SetupDiInstallDevice SetupDiCallClassInstaller SetupDiGetINFClassW SetupDiGetClassDevsW SetupDiDestroyDriverInfoList SetupDiSetSelectedDriverW SetupDiEnumDriverInfoW SetupDiBuildDriverInfoList SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetDeviceInstanceIdW SetupDiOpenDeviceInfoW SetupDiCreateDeviceInfoList SetupCopyOEMInfW SetupGetStringFieldW SetupFindFirstLineW SetupCloseInfFile SetupDiSetDeviceInstallParamsW

comctl32

ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControlsEx ImageList_SetOverlayImage ImageList_GetIcon ImageList_AddMasked ImageList_ReplaceIcon

gdi32

CreateFontIndirectW CreateCompatibleDC CreateCompatibleBitmap BitBlt GetTextMetricsW SetTextColor SetBkMode CreateSolidBrush GetDeviceCaps DeleteObject CreateFontW DeleteDC SetBkColor CreatePen LineTo MoveToEx Polyline SelectObject GetTextExtentPoint32W GetStockObject

shell32

CommandLineToArgvW DragQueryFileW DragFinish DragAcceptFiles ShellExecuteW ExtractIconExW SHGetPathFromIDListW SHBrowseForFolderW SHFileOperationW

ole32

CoTaskMemFree CoUninitialize CoCreateInstance StringFromGUID2 CoInitializeEx CLSIDFromString

shlwapi

PathMatchSpecW StrStrIW ord487 PathIsDirectoryW PathFindExtensionW

uxtheme

SetWindowTheme

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

iphlpapi

GetAdaptersAddresses

comdlg32

GetSaveFileNameW

advapi32

CloseServiceHandle StartServiceW RegGetValueW SystemFunction036 QueryServiceStatus OpenServiceW OpenSCManagerW OpenProcessToken RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey LookupPrivilegeValueW AdjustTokenPrivileges

user32

GetWindow LoadCursorW LoadIconW DestroyIcon CopyImage IsDialogMessageW SetProcessDPIAware GetAncestor ChangeWindowMessageFilterEx LoadImageW DrawFrameControl GetSysColor FindWindowExW EndPaint BeginPaint GetWindowDC SetForegroundWindow UpdateWindow DrawTextW InsertMenuItemW SetMenuInfo TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu IsWindowEnabled EnableWindow KillTimer SetTimer ReleaseCapture SetCapture GetDlgCtrlID SendDlgItemMessageW IsDlgButtonChecked ShowWindow DestroyWindow CreateWindowExW EnumChildWindows CallWindowProcW PostQuitMessage DefWindowProcW PostMessageW UnregisterDeviceNotification RegisterDeviceNotificationW SendMessageTimeoutW GetMessagePos DispatchMessageW TranslateMessage TrackMouseEvent wsprintfW SystemParametersInfoW GetParent PtInRect GetSysColorBrush ScreenToClient GetCursorPos MessageBoxW GetWindowRect GetClientRect SetWindowTextW ReleaseDC GetDC GetSystemMetrics EmptyClipboard SetClipboardData CloseClipboard OpenClipboard GetDlgItemTextW SetDlgItemTextW GetDlgItem EndDialog DialogBoxParamW IsWindowVisible SetWindowPos SendMessageW GetClassNameW SetWindowLongW GetWindowLongW OffsetRect InflateRect FillRect FrameRect MapWindowPoints ClientToScreen GetWindowTextW RemovePropW GetPropW SetPropW LockWindowUpdate RedrawWindow RegisterClassW InvalidateRect GetMessageW

kernel32

ReleaseSRWLockShared ReleaseSRWLockExclusive GetProcessHeap HeapFree HeapReAlloc HeapAlloc GetTempPathW SetFileAttributesW RemoveDirectoryW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW IsProcessorFeaturePresent WideCharToMultiByte MultiByteToWideChar LocalFree LocalAlloc AcquireSRWLockExclusive CompareStringW GetComputerNameW AcquireSRWLockShared ExitThread DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection RemoveVectoredExceptionHandler AddVectoredExceptionHandler SetEvent GetStartupInfoW InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter UnmapViewOfFile MapViewOfFile SetUnhandledExceptionFilter GetLogicalDrives GetCommandLineW GetUserDefaultUILanguage lstrcmpW CopyFileW CreateFileMappingW SetLastError GetPrivateProfileStringW lstrlenW LoadLibraryExW GetExitCodeProcess CreateProcessW GetStdHandle LoadLibraryW GetProcAddress FreeLibrary Sleep SetFilePointerEx GetShortPathNameW GetFileSizeEx CreateDirectoryW GetLastError CloseHandle WriteFile SetFilePointer ReadFile GetFileSize CreateFileW SetHandleInformation lstrcatW lstrcpynW lstrcmpiW MulDiv LocalReAlloc GlobalFree GlobalLock GlobalUnlock GlobalAlloc GetModuleHandleW GetModuleFileNameW GetWindowsDirectoryW GetSystemDirectoryW GetTickCount GetSystemInfo GetCurrentThreadId GetCurrentProcessId GetCurrentProcess WaitForMultipleObjects CreateEventW WaitForSingleObject CreatePipe

vcruntime140

__current_exception __current_exception_context _except_handler4_common strstr memmove memchr wcsstr wcsrchr wcschr memcmp memcpy memset

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode free realloc calloc

api-ms-win-crt-string-l1-1-0

towlower _strnicmp wcscpy_s _wcsicmp _stricmp strlen wcsncmp _wcsnicmp wcscpy wcscmp wcslen

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vswscanf __stdio_common_vsprintf_s __stdio_common_vswprintf_s _open __stdio_common_vswprintf _write _read _lseek _close _wopen __p__commode

api-ms-win-crt-convert-l1-1-0

wcstol _wtoi

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm _get_narrow_winmain_command_line _initialize_narrow_environment exit _configure_narrow_argv _set_app_type terminate _controlfp_s _beginthreadex _crt_atexit _seh_filter_exe _register_onexit_function _initialize_onexit_table _cexit _c_exit _register_thread_local_exe_atexit_callback _exit

api-ms-win-crt-utility-l1-1-0

_byteswap_ulong qsort

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

dbf836b5412c1f8a4ffb05bc4673a150c33dc379901cc23f1c94c0e0f382bf62

setupapi

comctl32

gdi32

shell32

ole32

shlwapi

uxtheme

version

iphlpapi

comdlg32

advapi32

user32

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic