55b2e7784c6f926d651a9e4ba44d49b45e4a9e9af5c907498d78d97850292930

Sharing

Copy URL Twitter E-mail

General

Target
55b2e7784c6f926d651a9e4ba44d49b45e4a9e9af5c907498d78d97850292930
Size 3.2MB
Sample260924-mnpy4sbe58
SHA256 55b2e7784c6f926d651a9e4ba44d49b45e4a9e9af5c907498d78d97850292930
MD5 7661d759e7b144068d11a2338c4b993c
SHA1 b82ad7784a975471789969c293aabc873fcd2cd4
SHA512 e7058732d7e1493cc7ed6811e824ad3eb34c9a272f0c351476b29c3350117c0d2c99d68642c200072155fc58f468362600dd677488cef3c9e47a4b981e008467
SSDEEP 49152:ugyAE7XmgoJOwlJFB9SWVS8Mnx+bp1w5OVXF8hQvSS:u/Xa1VGXK9L
TLSH
T14DF54C3B72A5D12DC01FC63AD0A39B00E633B1793733C6EB42A252696F865D45F7E264
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55b2e7784c6f926d651a9e4ba44d49b45e4a9e9af5c907498d78d97850292930

File Explorer

55b2e7784c6f926d651a9e4ba44d49b45e4a9e9af5c907498d78d97850292930

.dll 3.2MB

55b2e7784c6f926d651a9e4ba44d49b45e4a9e9af5c907498d78d97850292930

IMPHASH 2a858f8ac47cdb7b4eafb6e1957e4957
SHA256 55b2e7784c6f926d651a9e4ba44d49b45e4a9e9af5c907498d78d97850292930
MD5 7661d759e7b144068d11a2338c4b993c
SHA1 b82ad7784a975471789969c293aabc873fcd2cd4
SHA512 e7058732d7e1493cc7ed6811e824ad3eb34c9a272f0c351476b29c3350117c0d2c99d68642c200072155fc58f468362600dd677488cef3c9e47a4b981e008467
SSDEEP 49152:ugyAE7XmgoJOwlJFB9SWVS8Mnx+bp1w5OVXF8hQvSS:u/Xa1VGXK9L
TLSH
T14DF54C3B72A5D12DC01FC63AD0A39B00E633B1793733C6EB42A252696F865D45F7E264
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2720064

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

RtlUnwindEx GetACP CloseHandle LocalFree GetCurrentProcessId SizeofResource TlsAlloc QueryPerformanceFrequency VirtualFree GetFullPathNameW GetProcessHeap ExitProcess HeapAlloc GetCPInfoExW RtlUnwind GetCPInfo GetStdHandle GetModuleHandleW FreeLibrary HeapDestroy ReadFile GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW CreateThread CompareStringW LoadLibraryA ResetEvent MulDiv FreeResource GetVersion RaiseException GlobalAddAtomW FormatMessageW SwitchToThread GetExitCodeThread GetCurrentThread GlobalMemoryStatusEx LoadLibraryExW LockResource GetCurrentThreadId UnhandledExceptionFilter VirtualQuery GlobalFindAtomW VirtualQueryEx Sleep EnterCriticalSection SetFilePointer LoadResource SuspendThread GetTickCount GetStartupInfoW GlobalDeleteAtom GetFileAttributesW InitializeCriticalSection GetThreadPriority GetCurrentProcess SetThreadPriority GlobalLock VirtualAlloc GetCommandLineW GetSystemInfo GetTempPathW LeaveCriticalSection GetProcAddress ResumeThread GetVersionExW VerifyVersionInfoW HeapCreate LCMapStringW VerSetConditionMask GetDiskFreeSpaceW FindFirstFileW GetUserDefaultUILanguage TlsFree lstrlenW QueryPerformanceCounter SetEndOfFile HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent CreateFileW GetLocaleInfoW EnumResourceNamesW DeleteFileW GetLocalTime WaitForSingleObject WriteFile ExitThread DeleteCriticalSection TlsGetValue GetDateFormatW SetErrorMode IsValidLocale TlsSetValue CreateDirectoryW GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW WaitForMultipleObjectsEx SetThreadLocale GetThreadLocale

comdlg32

FindTextW

comctl32

FlatSB_SetScrollInfo ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add ImageList_GetDragImage FlatSB_SetScrollProp ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB FlatSB_GetScrollInfo ImageList_Write ImageList_DrawIndirect ImageList_SetBkColor ImageList_GetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_Draw ImageList_Remove ImageList_SetOverlayImage

shell32

Shell_NotifyIconW SHAppBarMessage

ole32

IsEqualGUID OleInitialize OleUninitialize CoInitialize CoCreateInstance CoUninitialize CoTaskMemFree CoTaskMemAlloc

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

user32

CopyImage CreateWindowExW GetMenuItemInfoW SetMenuItemInfoW DefFrameProcW GetDCEx PeekMessageW MonitorFromWindow GetDlgCtrlID GetUpdateRect SetTimer WindowFromPoint BeginPaint RegisterClipboardFormatW FrameRect MapVirtualKeyW IsWindowUnicode RegisterWindowMessageW FillRect GetMenuStringW DispatchMessageW SendMessageA DefMDIChildProcW EnumWindows GetClassInfoW ShowOwnedPopups GetSystemMenu GetScrollRange SetScrollPos GetScrollPos GetActiveWindow SetActiveWindow DrawEdge GetKeyboardLayoutList LoadBitmapW DrawFocusRect EnumChildWindows GetScrollBarInfo ReleaseCapture UnhookWindowsHookEx LoadCursorW GetCapture SetCapture CreatePopupMenu ScrollWindow ShowCaret GetMenuItemID GetLastActivePopup CharLowerBuffW GetSystemMetrics PostMessageW DrawMenuBar SetParent IsZoomed CharUpperBuffW GetClientRect IsChild GetClassLongPtrW SetClassLongPtrW ClientToScreen SetWindowPlacement IsIconic CallNextHookEx GetMonitorInfoW ShowWindow CheckMenuItem CharUpperW DefWindowProcW GetForegroundWindow SetForegroundWindow GetWindowTextW EnableWindow DestroyWindow IsDialogMessageW EndMenu RegisterClassW CharNextW GetWindowThreadProcessId RedrawWindow GetDC GetFocus SetFocus EndPaint ReleaseDC MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW ActivateKeyboardLayout GetParent DrawTextW SetScrollRange InsertMenuItemW PeekMessageA GetPropW MessageBoxW MessageBeep SetPropW RemovePropW UpdateWindow GetSubMenu MsgWaitForMultipleObjects DestroyMenu DestroyIcon SetWindowsHookExW IsWindowVisible DispatchMessageA UnregisterClassW GetTopWindow SendMessageW AdjustWindowRectEx DrawIcon IsWindow EnumThreadWindows InvalidateRect GetKeyboardState DrawFrameControl ScreenToClient GetWindowLongPtrW SetWindowLongPtrW BringWindowToTop SetCursor CreateIcon CreateMenu LoadStringW CharLowerW SetWindowPos SetWindowRgn GetMenuItemCount RemoveMenu GetSysColorBrush GetKeyboardLayoutNameW GetWindowDC TranslateMessage DrawTextExW MapWindowPoints EnumDisplayMonitors CallWindowProcW DestroyCursor GetScrollInfo SetWindowTextW GetMessageExtraInfo EnableScrollBar GetSysColor TrackPopupMenu DrawIconEx PostQuitMessage GetClassNameW ShowScrollBar EnableMenuItem GetIconInfo GetMessagePos SetScrollInfo GetKeyNameTextW GetDesktopWindow GetCursorPos SetCursorPos HideCaret GetMenu GetMenuState SetMenu SetRect GetKeyState FindWindowExW MonitorFromPoint ValidateRect SystemParametersInfoW LoadIconW GetCursor GetWindow GetWindowRect InsertMenuW KillTimer WaitMessage IsWindowEnabled IsDialogMessageA TranslateMDISysAccel GetWindowPlacement CreateIconIndirect FindWindowW DeleteMenu GetKeyboardLayout

oleaut32

SafeArrayPutElement GetErrorInfo VariantInit VariantClear SysFreeString SafeArrayAccessData SysReAllocStringLen SafeArrayCreate SafeArrayGetElement SysAllocStringLen SafeArrayUnaccessData SafeArrayPtrOfIndex VariantCopy SafeArrayGetUBound SafeArrayGetLBound VariantChangeType

wtsapi32

WTSUnRegisterSessionNotification WTSRegisterSessionNotification

advapi32

RegFlushKey RegQueryValueExW RegCloseKey RegOpenKeyExW

gdi32

Arc Pie SetBkMode SelectPalette CreateCompatibleBitmap ExcludeClipRect RectVisible SetWindowOrgEx MaskBlt AngleArc Chord SetTextColor StretchBlt SetDIBits SetViewportOrgEx CreateRectRgn RealizePalette SetDIBColorTable GetDIBColorTable RoundRect RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx CreatePalette CreateBrushIndirect PatBlt PolyBezierTo GetStockObject CreateSolidBrush Polygon Rectangle MoveToEx DeleteDC SaveDC BitBlt Ellipse FrameRgn GetDeviceCaps GetBitmapBits GetTextExtentPoint32W GetClipBox Polyline IntersectClipRect GetSystemPaletteEntries CreateBitmap CombineRgn CreateDIBitmap GetStretchBltMode CreateDIBSection CreatePenIndirect SetStretchBltMode GetDIBits CreateFontIndirectW PolyBezier LineTo GetRgnBox CreateHalftonePalette DeleteObject SelectObject ExtFloodFill UnrealizeObject SetBkColor CreateCompatibleDC GetObjectW GetBrushOrgEx GetCurrentPositionEx SetROP2 GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetPixel ArcTo GdiFlush SetPixel EnumFontFamiliesExW GetPaletteEntries

Name

.text

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

218KB

Virtual Size

218KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

449KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

154B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

69B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

141KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

130KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

55b2e7784c6f926d651a9e4ba44d49b45e4a9e9af5c907498d78d97850292930

kernel32

comdlg32

comctl32

shell32

ole32

version

user32

oleaut32

wtsapi32

advapi32

gdi32

generic