8ac93a8200fbeb71bc0751860f45ddeb1a7c88cee0162b56f84accf37cdd5436

Sharing

Copy URL Twitter E-mail

General

Target
8ac93a8200fbeb71bc0751860f45ddeb1a7c88cee0162b56f84accf37cdd5436
Size 477KB
Sample260916-rl82esbc86
SHA256 8ac93a8200fbeb71bc0751860f45ddeb1a7c88cee0162b56f84accf37cdd5436
MD5 492151e4d208bb5a3546887130b95afe
SHA1 4128172bdc088a1394318937d860e020b74ff949
SHA512 c4747879bc8f9c68a53b41de7b87b111175111e446648876d2f139054d07ee98ad884687ab4b4ddd0b0ce4afbbd30b7192f96ce5c5684ac2f930d593ac66c2e5
SSDEEP 6144:JF2C5NYgZgZxa1myjLKZydD5odDPCYMqqKNe3Sl:JFNNDgZxMJjLpYl/se
TLSH
T140A419222298452CF4A38534CD3BCA22E5737CD1A1B8ED2F361DB4A91F3B754A7B1B15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ac93a8200fbeb71bc0751860f45ddeb1a7c88cee0162b56f84accf37cdd5436

File Explorer

8ac93a8200fbeb71bc0751860f45ddeb1a7c88cee0162b56f84accf37cdd5436

.exe 477KB

8ac93a8200fbeb71bc0751860f45ddeb1a7c88cee0162b56f84accf37cdd5436

IMPHASH 545b314ca76116c8b6ad4f403d06d58b
SHA256 8ac93a8200fbeb71bc0751860f45ddeb1a7c88cee0162b56f84accf37cdd5436
MD5 492151e4d208bb5a3546887130b95afe
SHA1 4128172bdc088a1394318937d860e020b74ff949
SHA512 c4747879bc8f9c68a53b41de7b87b111175111e446648876d2f139054d07ee98ad884687ab4b4ddd0b0ce4afbbd30b7192f96ce5c5684ac2f930d593ac66c2e5
SSDEEP 6144:JF2C5NYgZgZxa1myjLKZydD5odDPCYMqqKNe3Sl:JFNNDgZxMJjLpYl/se
TLSH
T140A419222298452CF4A38534CD3BCA22E5737CD1A1B8ED2F361DB4A91F3B754A7B1B15
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

283572

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\000.共有フォルダ\VS2022\WinPgm\x64\Release\WinPgm.pdb

kernel32

HeapDestroy GetProcAddress GlobalLock DeleteCriticalSection GetComputerNameW GetProcessHeap SystemTimeToFileTime GlobalMemoryStatusEx CreateProcessW GetModuleHandleW CopyFileW WideCharToMultiByte lstrcpyW GetComputerNameExA GetDiskFreeSpaceExA GlobalUnlock Sleep MultiByteToWideChar GetEnvironmentVariableA lstrcmpW GetUserDefaultLCID FindClose GetLocalTime VerSetConditionMask VerifyVersionInfoW SetThreadLocale OutputDebugStringW InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive FileTimeToLocalFileTime HeapAlloc FindResourceW LoadResource LoadLibraryW CloseHandle HeapReAlloc GlobalFree DeleteFileW GlobalAlloc LockResource lstrcatW FileTimeToSystemTime GetLastError HeapSize FreeResource GetACP DuplicateHandle GetSystemDirectoryW lstrlenA GetFileAttributesW CreateFileW WaitForSingleObject InitializeCriticalSectionEx CreateMutexW GetSystemPowerStatus GetEnvironmentVariableW SetErrorMode GetThreadLocale GetModuleFileNameW WriteFile lstrlenW GetCurrentProcess GetCommandLineW SetLastError HeapFree SizeofResource ReadFile lstrcpyA lstrcatA FindFirstFileW

user32

LoadAcceleratorsW ShowWindow InvalidateRgn DispatchMessageW IsDialogMessageW DrawTextA ClientToScreen SetWindowTextA GetDlgItemTextW SendDlgItemMessageW GetSysColor SendMessageW ScreenToClient FillRect SetWindowLongPtrW SetWindowPos GetDC DestroyWindow SetWindowTextW GetMenu wsprintfA GetWindowTextW EnableWindow EndPaint BeginPaint GetWindowRect FindWindowExW PostMessageW CallWindowProcW GetMessagePos GetKeyState GetSystemMenu CreateDialogParamW GetMessageW MoveWindow SetLayeredWindowAttributes TranslateAcceleratorW LoadIconW GetWindowLongPtrW EndDialog ReleaseDC InvalidateRect DialogBoxParamW DrawEdge EnableMenuItem GetDesktopWindow PostQuitMessage GetDlgItem GetClientRect wsprintfW SetCursor wvsprintfA wvsprintfW GetSystemMetrics DrawMenuBar SendMessageA LoadCursorW

gdi32

GetDIBits TextOutW SetTextColor StretchBlt GetObjectW SetBkColor SetStretchBltMode DeleteObject CreateSolidBrush CreateCompatibleDC SelectObject CreateCompatibleBitmap BitBlt SetBkMode CreateFontIndirectW

comdlg32

GetSaveFileNameW

advapi32

FreeSid RegQueryValueExA RegQueryInfoKeyA RegOpenKeyExA RegEnumKeyExA RegCloseKey AllocateAndInitializeSid CheckTokenMembership RegOpenKeyExW RegQueryValueExW GetUserNameW

shell32

SHGetPathFromIDListW ShellExecuteExW SHGetSpecialFolderLocation CommandLineToArgvW ShellExecuteW SHGetMalloc

ole32

CoInitializeEx CoCreateInstance CoUninitialize CoInitialize CoInitializeSecurity

oleaut32

SafeArrayGetUBound VariantInit VariantClear OleLoadPicturePath SysFreeString SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetLBound

comctl32

ord410 ord413 InitCommonControlsEx

shlwapi

ord437

gdiplus

GdiplusStartup GdipSaveImageToFile GdipLoadImageFromFile GdipGetImageEncoders GdipCloneImage GdipAlloc GdipDisposeImage GdipFree GdipGetImageEncodersSize GdiplusShutdown

netapi32

NetWkstaGetInfo NetApiBufferFree

dwmapi

DwmSetWindowAttribute DwmExtendFrameIntoClientArea

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_terminate memset memcmp memcpy __C_specific_handler __current_exception __current_exception_context __std_exception_copy __std_exception_destroy _CxxThrowException memmove

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo _errno _crt_atexit _cexit _seh_filter_exe _set_app_type _register_onexit_function _configure_wide_argv _initialize_wide_environment _beginthreadex _initterm _initterm_e exit _exit terminate _c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _endthreadex _get_wide_winmain_command_line

api-ms-win-crt-convert-l1-1-0

_wtoi64 atoi

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode free _callnewh

api-ms-win-crt-string-l1-1-0

_strrev strcat_s wcscpy_s

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

8ac93a8200fbeb71bc0751860f45ddeb1a7c88cee0162b56f84accf37cdd5436

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

gdiplus

netapi32

dwmapi

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic