f56cc464f471d40a6bd19d409c8d200173353636efaaf87e6b2ff8d7f5d9ecb6

Sharing

Copy URL Twitter E-mail

General

Target
f56cc464f471d40a6bd19d409c8d200173353636efaaf87e6b2ff8d7f5d9ecb6
Size 762KB
Sample260924-vbr7psyzbv
SHA256 f56cc464f471d40a6bd19d409c8d200173353636efaaf87e6b2ff8d7f5d9ecb6
MD5 7037bf5ebc928e2901ec9382edb37700
SHA1 9c32eba867ca12d46a74ee7d994f80a38dc4ec74
SHA512 339b7c900f5e75e54640237f7b92638a474b323bfdc7c1742d33ab0ffc33299da2ccf01e0e4a11ece1b8a9008810a1e27c94a129a599957f367e7037d6ff912f
SSDEEP 12288:LBzXzMCQoETo/fMsGeFouSeosHAw8GqRenXZmKbj8d4vXQUa6dttl3:LBpXQUvjd
TLSH
T12CF4F853F21A78B3D82B1A3D04EFE3BA175CFB604155CF5BE704EA51AE939D02D89242
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f56cc464f471d40a6bd19d409c8d200173353636efaaf87e6b2ff8d7f5d9ecb6

File Explorer

f56cc464f471d40a6bd19d409c8d200173353636efaaf87e6b2ff8d7f5d9ecb6

.dll 762KB

f56cc464f471d40a6bd19d409c8d200173353636efaaf87e6b2ff8d7f5d9ecb6

IMPHASH 270c0f5429a1d4f89e0774742b83852e
SHA256 f56cc464f471d40a6bd19d409c8d200173353636efaaf87e6b2ff8d7f5d9ecb6
MD5 7037bf5ebc928e2901ec9382edb37700
SHA1 9c32eba867ca12d46a74ee7d994f80a38dc4ec74
SHA512 339b7c900f5e75e54640237f7b92638a474b323bfdc7c1742d33ab0ffc33299da2ccf01e0e4a11ece1b8a9008810a1e27c94a129a599957f367e7037d6ff912f
SSDEEP 12288:LBzXzMCQoETo/fMsGeFouSeosHAw8GqRenXZmKbj8d4vXQUa6dttl3:LBpXQUvjd
TLSH
T12CF4F853F21A78B3D82B1A3D04EFE3BA175CFB604155CF5BE704EA51AE939D02D89242
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

81248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegEnumValueW RegOpenKeyA RegOpenKeyW RegQueryValueExW

kernel32

CloseHandle ConvertDefaultLocale CreateFileA CreateFileMappingA CreateFileMappingW CreateFileW DelayLoadFailureHook DisableThreadLibraryCalls EnterCriticalSection FindResourceW FreeLibrary GetACP GetCPInfo GetFileSize GetFileSizeEx GetLocaleInfoW GetModuleHandleW GetOEMCP GetProcAddress GetProfileStringW GetStringTypeW GetSystemDirectoryW GetTickCount GetVersion GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc HeapSize IsBadStringPtrA IsBadStringPtrW IsDBCSLeadByte IsDBCSLeadByteEx IsValidLocale LeaveCriticalSection LoadLibraryW LoadResource LockResource MapViewOfFile MulDiv MultiByteToWideChar RaiseException ReadFile ResolveDelayLoadedAPI UnmapViewOfFile WideCharToMultiByte WriteFile

ntdll

RtlCreateUnicodeStringFromAsciiz RtlDosPathNameToNtPathName_U RtlFreeUnicodeString _vsnprintf

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _assert _strdup _wcsicmp _wcsnicmp bsearch calloc floor free fwrite getenv iswdigit malloc memchr memcmp memcpy memmove memset qsort realloc strchr strcmp strcspn strlen strnlen strrchr wcscat wcschr wcscpy wcslen

user32

GetDpiForSystem

win32u

NtGdiAbortDoc NtGdiAbortPath NtGdiAddFontMemResourceEx NtGdiAddFontResourceW NtGdiAlphaBlend NtGdiAngleArc NtGdiArcInternal NtGdiBeginPath NtGdiBitBlt NtGdiCancelDC NtGdiCloseFigure NtGdiCombineRgn NtGdiComputeXformCoefficients NtGdiCreateBitmap NtGdiCreateClientObj NtGdiCreateCompatibleBitmap NtGdiCreateCompatibleDC NtGdiCreateDIBBrush NtGdiCreateDIBSection NtGdiCreateDIBitmapInternal NtGdiCreateEllipticRgn NtGdiCreateHalftonePalette NtGdiCreateHatchBrushInternal NtGdiCreateMetafileDC NtGdiCreatePaletteInternal NtGdiCreatePatternBrushInternal NtGdiCreatePen NtGdiCreateRectRgn NtGdiCreateRoundRectRgn NtGdiCreateSolidBrush NtGdiDeleteClientObj NtGdiDeleteObjectApp NtGdiDescribePixelFormat NtGdiDoPalette NtGdiDrawStream NtGdiEllipse NtGdiEndDoc NtGdiEndPage NtGdiEndPath NtGdiEnumFonts NtGdiEqualRgn NtGdiExcludeClipRect NtGdiExtCreatePen NtGdiExtCreateRegion NtGdiExtEscape NtGdiExtFloodFill NtGdiExtGetObjectW NtGdiExtSelectClipRgn NtGdiExtTextOutW NtGdiFillPath NtGdiFillRgn NtGdiFlattenPath NtGdiFlush NtGdiFontIsLinked NtGdiFrameRgn NtGdiGetAndSetDCDword NtGdiGetAppClipBox NtGdiGetBitmapBits NtGdiGetBitmapDimension NtGdiGetBoundsRect NtGdiGetCharABCWidthsW NtGdiGetCharWidthInfo NtGdiGetCharWidthW NtGdiGetColorAdjustment NtGdiGetDCObject NtGdiGetDIBitsInternal NtGdiGetDeviceCaps NtGdiGetDeviceGammaRamp NtGdiGetFontData NtGdiGetFontFileData NtGdiGetFontFileInfo NtGdiGetFontUnicodeRanges NtGdiGetGlyphIndicesW NtGdiGetGlyphOutline NtGdiGetKerningPairs NtGdiGetMiterLimit NtGdiGetNearestColor NtGdiGetNearestPaletteIndex NtGdiGetOutlineTextMetricsInternalW NtGdiGetPath NtGdiGetPixel NtGdiGetRandomRgn NtGdiGetRasterizerCaps NtGdiGetRealizationInfo NtGdiGetRegionData NtGdiGetRgnBox NtGdiGetSpoolMessage NtGdiGetSystemPaletteUse NtGdiGetTextCharsetInfo NtGdiGetTextExtentExW NtGdiGetTextFaceW NtGdiGetTextMetricsW NtGdiGetTransform NtGdiGradientFill NtGdiHfontCreate NtGdiIcmBrushInfo NtGdiInitSpool NtGdiIntersectClipRect NtGdiInvertRgn NtGdiLineTo NtGdiMakeFontDir NtGdiMaskBlt NtGdiModifyWorldTransform NtGdiMoveTo NtGdiOffsetClipRgn NtGdiOffsetRgn NtGdiOpenDCW NtGdiPatBlt NtGdiPathToRegion NtGdiPlgBlt NtGdiPolyDraw NtGdiPolyPolyDraw NtGdiPtInRegion NtGdiPtVisible NtGdiRectInRegion NtGdiRectVisible NtGdiRectangle NtGdiRemoveFontMemResourceEx NtGdiRemoveFontResourceW NtGdiResetDC NtGdiResizePalette NtGdiRestoreDC NtGdiRoundRect NtGdiSaveDC NtGdiScaleViewportExtEx NtGdiScaleWindowExtEx NtGdiSelectBitmap NtGdiSelectBrush NtGdiSelectClipPath NtGdiSelectFont NtGdiSelectPen NtGdiSetBitmapBits NtGdiSetBitmapDimension NtGdiSetBoundsRect NtGdiSetColorAdjustment NtGdiSetDIBitsToDeviceInternal NtGdiSetDeviceGammaRamp NtGdiSetLayout NtGdiSetMagicColors NtGdiSetMetaRgn NtGdiSetMiterLimit NtGdiSetPixel NtGdiSetPixelFormat NtGdiSetRectRgn NtGdiSetSystemPaletteUse NtGdiSetTextJustification NtGdiSetVirtualResolution NtGdiStartDoc NtGdiStartPage NtGdiStretchBlt NtGdiStretchDIBitsInternal NtGdiStrokeAndFillPath NtGdiStrokePath NtGdiSwapBuffers NtGdiTransformPoints NtGdiTransparentBlt NtGdiUnrealizeObject NtGdiUpdateColors NtGdiWidenPath NtUserCallHwndParam NtUserCallOneParam NtUserRealizePalette NtUserSelectPalette

AbortDoc AbortPath AddFontMemResourceEx AddFontResourceA AddFontResourceExA AddFontResourceExW AddFontResourceTracking AddFontResourceW AngleArc AnimatePalette Arc ArcTo BeginPath BitBlt ByeByeGDI CancelDC CheckColorsInGamut ChoosePixelFormat Chord CloseEnhMetaFile CloseFigure CloseMetaFile ColorCorrectPalette ColorMatchToTarget CombineRgn CombineTransform CopyEnhMetaFileA CopyEnhMetaFileW CopyMetaFileA CopyMetaFileW CreateBitmap CreateBitmapIndirect CreateBrushIndirect CreateColorSpaceA CreateColorSpaceW CreateCompatibleBitmap CreateCompatibleDC CreateDCA CreateDCW CreateDIBPatternBrush CreateDIBPatternBrushPt CreateDIBSection CreateDIBitmap CreateDiscardableBitmap CreateEllipticRgn CreateEllipticRgnIndirect CreateEnhMetaFileA CreateEnhMetaFileW CreateFontA CreateFontIndirectA CreateFontIndirectExA CreateFontIndirectExW CreateFontIndirectW CreateFontW CreateHalftonePalette CreateHatchBrush CreateICA CreateICW CreateMetaFileA CreateMetaFileW CreatePalette CreatePatternBrush CreatePen CreatePenIndirect CreatePolyPolygonRgn CreatePolygonRgn CreateRectRgn CreateRectRgnIndirect CreateRoundRectRgn CreateScalableFontResourceA CreateScalableFontResourceW CreateSolidBrush D3DKMTAcquireKeyedMutex D3DKMTAcquireKeyedMutex2 D3DKMTCheckOcclusion D3DKMTCheckVidPnExclusiveOwnership D3DKMTCloseAdapter D3DKMTCreateAllocation D3DKMTCreateAllocation2 D3DKMTCreateDCFromMemory D3DKMTCreateDevice D3DKMTCreateKeyedMutex D3DKMTCreateKeyedMutex2 D3DKMTCreateSynchronizationObject D3DKMTCreateSynchronizationObject2 D3DKMTDestroyAllocation D3DKMTDestroyAllocation2 D3DKMTDestroyDCFromMemory D3DKMTDestroyDevice D3DKMTDestroyKeyedMutex D3DKMTDestroySynchronizationObject D3DKMTEnumAdapters D3DKMTEnumAdapters2 D3DKMTEscape D3DKMTOpenAdapterFromDeviceName D3DKMTOpenAdapterFromGdiDisplayName D3DKMTOpenAdapterFromHdc D3DKMTOpenAdapterFromLuid D3DKMTOpenKeyedMutex D3DKMTOpenKeyedMutex2 D3DKMTOpenKeyedMutexFromNtHandle D3DKMTOpenNtHandleFromName D3DKMTOpenResource D3DKMTOpenResource2 D3DKMTOpenResourceFromNtHandle D3DKMTOpenSyncObjectFromNtHandle D3DKMTOpenSyncObjectFromNtHandle2 D3DKMTOpenSyncObjectNtHandleFromName D3DKMTOpenSynchronizationObject D3DKMTQueryAdapterInfo D3DKMTQueryResourceInfo D3DKMTQueryResourceInfoFromNtHandle D3DKMTQueryStatistics D3DKMTQueryVideoMemoryInfo D3DKMTReleaseKeyedMutex D3DKMTReleaseKeyedMutex2 D3DKMTSetQueuedLimit D3DKMTSetVidPnSourceOwner D3DKMTShareObjects D3DKMTSignalSynchronizationObjectFromCpu D3DKMTWaitForSynchronizationObjectFromCpu DPtoLP DeleteColorSpace DeleteDC DeleteEnhMetaFile DeleteMetaFile DeleteObject DescribePixelFormat DeviceCapabilitiesEx DeviceCapabilitiesExA DeviceCapabilitiesExW DrawEscape DwmCreatedBitmapRemotingOutput Ellipse EnableEUDC EndDoc EndPage EndPath EnumEnhMetaFile EnumFontFamiliesA EnumFontFamiliesExA EnumFontFamiliesExW EnumFontFamiliesW EnumFontsA EnumFontsW EnumICMProfilesA EnumICMProfilesW EnumMetaFile EnumObjects EqualRgn Escape ExcludeClipRect ExtCreatePen ExtCreateRegion ExtEscape ExtFloodFill ExtSelectClipRgn ExtTextOutA ExtTextOutW FillPath FillRgn FixBrushOrgEx FlattenPath FloodFill FontIsLinked FrameRgn FreeImageColorMatcher GdiAlphaBlend GdiAssociateObject GdiCleanCacheDC GdiComment GdiConvertAndCheckDC GdiConvertBitmap GdiConvertBrush GdiConvertDC GdiConvertEnhMetaFile GdiConvertFont GdiConvertMetaFilePict GdiConvertPalette GdiConvertRegion GdiConvertToDevmodeW GdiCreateLocalBitmap GdiCreateLocalBrush GdiCreateLocalEnhMetaFile GdiCreateLocalFont GdiCreateLocalMetaFilePict GdiCreateLocalPalette GdiCreateLocalRegion GdiDciBeginAccess GdiDciCreateOffscreenSurface GdiDciCreateOverlaySurface GdiDciCreatePrimarySurface GdiDciDestroySurface GdiDciDrawSurface GdiDciEndAccess GdiDciEnumSurface GdiDciInitialize GdiDciSetClipList GdiDciSetDestination GdiDeleteLocalDC GdiDeleteLocalObject GdiDeleteSpoolFileHandle GdiDescribePixelFormat GdiDllInitialize GdiDrawStream GdiEntry13 GdiFlush GdiGetBatchLimit GdiGetCharDimensions GdiGetCodePage GdiGetDevmodeForPage GdiGetLocalBitmap GdiGetLocalBrush GdiGetLocalDC GdiGetLocalFont GdiGetSpoolFileHandle GdiGetSpoolMessage GdiGradientFill GdiInitSpool GdiInitializeLanguagePack GdiIsMetaFileDC GdiIsMetaPrintDC GdiIsPlayMetafileDC GdiPlayDCScript GdiPlayJournal GdiPlayScript GdiRealizationInfo GdiReleaseLocalDC GdiSetAttrs GdiSetBatchLimit GdiSetPixelFormat GdiSetServerAttr GdiSwapBuffers GdiTransparentBlt GdiWinWatchClose GdiWinWatchDidStatusChange GdiWinWatchGetClipList GdiWinWatchOpen GetArcDirection GetAspectRatioFilterEx GetBitmapBits GetBitmapDimensionEx GetBkColor GetBkMode GetBoundsRect GetBrushOrgEx GetCharABCWidthsA GetCharABCWidthsFloatA GetCharABCWidthsFloatW GetCharABCWidthsI GetCharABCWidthsW GetCharWidth32A GetCharWidth32W GetCharWidthA GetCharWidthFloatA GetCharWidthFloatW GetCharWidthI GetCharWidthInfo GetCharWidthW GetCharWidthWOW GetCharacterPlacementA GetCharacterPlacementW GetClipBox GetClipRgn GetColorAdjustment GetColorSpace GetCurrentObject GetCurrentPositionEx GetDCBrushColor GetDCOrgEx GetDCPenColor GetDIBColorTable GetDIBits GetDeviceCaps GetDeviceGammaRamp GetETM GetEnhMetaFileA GetEnhMetaFileBits GetEnhMetaFileDescriptionA GetEnhMetaFileDescriptionW GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetEnhMetaFilePixelFormat GetEnhMetaFileW GetFontData GetFontFileData GetFontFileInfo GetFontLanguageInfo GetFontRealizationInfo GetFontResourceInfo GetFontResourceInfoW GetFontUnicodeRanges GetGlyphIndicesA GetGlyphIndicesW GetGlyphOutline GetGlyphOutlineA GetGlyphOutlineW GetGlyphOutlineWow GetGraphicsMode GetICMProfileA GetICMProfileW GetKerningPairs GetKerningPairsA GetKerningPairsW GetLayout GetLogColorSpaceA GetLogColorSpaceW GetMapMode GetMetaFileA GetMetaFileBitsEx GetMetaFileW GetMetaRgn GetMiterLimit GetNearestColor GetNearestPaletteIndex GetObjectA GetObjectType GetObjectW GetOutlineTextMetricsA GetOutlineTextMetricsW GetPaletteEntries GetPath GetPixel GetPixelFormat GetPolyFillMode GetROP2 GetRandomRgn GetRasterizerCaps GetRegionData GetRelAbs GetRgnBox GetStockObject GetStretchBltMode GetSystemPaletteEntries GetSystemPaletteUse GetTextAlign GetTextCharacterExtra GetTextCharset GetTextCharsetInfo GetTextColor GetTextExtentExPointA GetTextExtentExPointI GetTextExtentExPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextExtentPointI GetTextExtentPointW GetTextFaceA GetTextFaceW GetTextMetricsA GetTextMetricsW GetTransform GetViewportExtEx GetViewportOrgEx GetWinMetaFileBits GetWindowExtEx GetWindowOrgEx GetWorldTransform IntersectClipRect InvertRgn LPtoDP LineDDA LineTo LoadImageColorMatcherA LoadImageColorMatcherW MaskBlt MirrorRgn ModifyWorldTransform MoveToEx NamedEscape OffsetClipRgn OffsetRgn OffsetViewportOrgEx OffsetWindowOrgEx PaintRgn PatBlt PathToRegion Pie PlayEnhMetaFile PlayEnhMetaFileRecord PlayMetaFile PlayMetaFileRecord PlgBlt PolyBezier PolyBezierTo PolyDraw PolyPolygon PolyPolyline PolyTextOutA PolyTextOutW Polygon Polyline PolylineTo PtInRegion PtVisible RealizePalette RectInRegion RectVisible Rectangle RemoveFontMemResourceEx RemoveFontResourceA RemoveFontResourceExA RemoveFontResourceExW RemoveFontResourceTracking RemoveFontResourceW ResetDCA ResetDCW ResizePalette RestoreDC RoundRect SaveDC ScaleViewportExtEx ScaleWindowExtEx ScriptApplyDigitSubstitution ScriptApplyLogicalWidth ScriptBreak ScriptCPtoX ScriptCacheGetHeight ScriptFreeCache ScriptGetCMap ScriptGetFontAlternateGlyphs ScriptGetFontFeatureTags ScriptGetFontLanguageTags ScriptGetFontProperties ScriptGetFontScriptTags ScriptGetGlyphABCWidth ScriptGetLogicalWidths ScriptGetProperties ScriptIsComplex ScriptItemize ScriptItemizeOpenType ScriptJustify ScriptLayout ScriptPlace ScriptPlaceOpenType ScriptRecordDigitSubstitution ScriptShape ScriptShapeOpenType ScriptStringAnalyse ScriptStringCPtoX ScriptStringFree ScriptStringGetLogicalWidths ScriptStringGetOrder ScriptStringOut ScriptStringValidate ScriptStringXtoCP ScriptString_pLogAttr ScriptString_pSize ScriptString_pcOutChars ScriptTextOut ScriptXtoCP SelectBrushLocal SelectClipPath SelectClipRgn SelectFontLocal SelectObject SelectPalette SetAbortProc SetArcDirection SetBitmapBits SetBitmapDimensionEx SetBkColor SetBkMode SetBoundsRect SetBrushOrgEx SetColorAdjustment SetColorSpace SetDCBrushColor SetDCPenColor SetDIBColorTable SetDIBits SetDIBitsToDevice SetDeviceGammaRamp SetEnhMetaFileBits SetFontEnumeration SetGraphicsMode SetICMMode SetICMProfileA SetICMProfileW SetLayout SetMagicColors SetMapMode SetMapperFlags SetMetaFileBitsEx SetMetaRgn SetMiterLimit SetObjectOwner SetPaletteEntries SetPixel SetPixelFormat SetPixelV SetPolyFillMode SetROP2 SetRectRgn SetRelAbs SetStretchBltMode SetSystemPaletteUse SetTextAlign SetTextCharacterExtra SetTextColor SetTextJustification SetViewportExtEx SetViewportOrgEx SetVirtualResolution SetWinMetaFileBits SetWindowExtEx SetWindowOrgEx SetWorldTransform StartDocA StartDocW StartPage StretchBlt StretchDIBits StrokeAndFillPath StrokePath SwapBuffers TextOutA TextOutW TranslateCharsetInfo UnloadNetworkFonts UnrealizeObject UpdateColors UpdateICMRegKey UpdateICMRegKeyA UpdateICMRegKeyW WidenPath gdiPlaySpoolStream pfnRealizePalette pfnSelectPalette pstackConnect

Name

.text

Size

332KB

Virtual Size

329KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

100KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

20KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

f56cc464f471d40a6bd19d409c8d200173353636efaaf87e6b2ff8d7f5d9ecb6

advapi32

kernel32

ntdll

ucrtbase

user32

win32u

generic