62e326cb2b2cee74f90de12f8e8d06f2dfcb93ad90018b11cb3edae10c119cb4

Sharing

Copy URL Twitter E-mail

General

Target
62e326cb2b2cee74f90de12f8e8d06f2dfcb93ad90018b11cb3edae10c119cb4
Size 13.0MB
Sample260925-mn36qstgla
SHA256 62e326cb2b2cee74f90de12f8e8d06f2dfcb93ad90018b11cb3edae10c119cb4
MD5 63e20da3cffb6200bcbb834efc1f86c2
SHA1 4fbae74a5c8f9f9cdc6c8e0c2fde9ab9cffd3d7f
SHA512 77d44b4bd6de73cbcfd24062c9216b8463cfd4a3a5364a1ff17c3ea3d765fa589ad5225756691a228250babfe25c78a8c8e4f5d8a5f53874bedbff20fee8ea42
SSDEEP 98304:PsXvAxPUips011uYAzEh7/iAXflijzJk:kUAUEEfXf6
TLSH
T126D62A6FA962813DC16E803B80B2AF09A83371FD1726C5FBC36805691E55AD54E3FB1D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62e326cb2b2cee74f90de12f8e8d06f2dfcb93ad90018b11cb3edae10c119cb4

File Explorer

62e326cb2b2cee74f90de12f8e8d06f2dfcb93ad90018b11cb3edae10c119cb4

.dll 13.0MB

62e326cb2b2cee74f90de12f8e8d06f2dfcb93ad90018b11cb3edae10c119cb4

IMPHASH 8584bdaeec788d20b49785cce58b24e4
SHA256 62e326cb2b2cee74f90de12f8e8d06f2dfcb93ad90018b11cb3edae10c119cb4
MD5 63e20da3cffb6200bcbb834efc1f86c2
SHA1 4fbae74a5c8f9f9cdc6c8e0c2fde9ab9cffd3d7f
SHA512 77d44b4bd6de73cbcfd24062c9216b8463cfd4a3a5364a1ff17c3ea3d765fa589ad5225756691a228250babfe25c78a8c8e4f5d8a5f53874bedbff20fee8ea42
SSDEEP 98304:PsXvAxPUips011uYAzEh7/iAXflijzJk:kUAUEEfXf6
TLSH
T126D62A6FA962813DC16E803B80B2AF09A83371FD1726C5FBC36805691E55AD54E3FB1D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8969472

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

winmm

timeGetTime

d3d9

Direct3DCreate9

winspool.drv

DocumentPropertiesW ClosePrinter DeviceCapabilitiesW OpenPrinterW GetPrinterW SetPrinterW GetDefaultPrinterW EnumPrintersW

comdlg32

FindTextW PageSetupDlgW GetSaveFileNameW GetOpenFileNameW PrintDlgW

comctl32

FlatSB_SetScrollInfo InitCommonControls ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add ImageList_GetDragImage FlatSB_SetScrollProp ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB FlatSB_GetScrollInfo ImageList_Write ImageList_DrawIndirect ImageList_SetBkColor ImageList_GetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_Draw ImageList_Remove

shell32

DragQueryFileW Shell_NotifyIconW ShellExecuteW

user32

CopyImage SetMenuItemInfoW GetMenuItemInfoW DefFrameProcW GetDlgCtrlID GetUpdateRgn FrameRect RegisterWindowMessageW GetMenuStringW FillRect SendMessageA IsClipboardFormatAvailable EnumWindows ShowOwnedPopups GetClassInfoW GetScrollRange SetActiveWindow GetActiveWindow IsMenu DrawEdge GetKeyboardLayoutList LoadBitmapW EnumChildWindows GetScrollBarInfo UnhookWindowsHookEx SetCapture GetCapture ShowCaret CreatePopupMenu GetMenuItemID CharLowerBuffW PostMessageW IsZoomed SetParent DrawMenuBar GetClientRect IsChild IsIconic CallNextHookEx ShowWindow GetWindowTextW SetForegroundWindow GetAsyncKeyState GetWindowTextLengthW IsDialogMessageW DestroyWindow RegisterClassW EndMenu CharNextW GetFocus GetDC SetFocus ReleaseDC SetScrollRange DrawTextW PeekMessageA MessageBeep RemovePropW GetSubMenu DestroyIcon IsWindowVisible DispatchMessageA UnregisterClassW GetTopWindow SendMessageW GetWindowLongPtrW SetWindowLongPtrW SendMessageTimeoutW LoadStringW CreateMenu CharLowerW SetWindowRgn SetWindowPos GetMenuItemCount GetSysColorBrush GetWindowDC DrawTextExW EnumClipboardFormats GetScrollInfo SetWindowTextW GetMessageExtraInfo GetSysColor EnableScrollBar TrackPopupMenu DrawIconEx GetClassNameW GetMessagePos GetIconInfo SetScrollInfo GetKeyNameTextW GetDesktopWindow SetCursorPos GetCursorPos SetMenu GetMenuState GetMenu SetRect GetKeyState GetCursor KillTimer WaitMessage TranslateMDISysAccel GetWindowPlacement CreateIconIndirect CreateWindowExW GetDCEx PeekMessageW MonitorFromWindow GetUpdateRect SetTimer WindowFromPoint BeginPaint RegisterClipboardFormatW MapVirtualKeyW IsWindowUnicode DispatchMessageW DefMDIChildProcW GetSystemMenu SetScrollPos GetScrollPos DrawFocusRect ReleaseCapture LoadCursorW ScrollWindow GetLastActivePopup MessageBoxIndirectW GetSystemMetrics CharUpperBuffW SetClassLongPtrW GetClassLongPtrW SetClipboardData GetClipboardData ClientToScreen SetWindowPlacement GetMonitorInfoW CheckMenuItem CharUpperW DefWindowProcW GetForegroundWindow EnableWindow GetWindowThreadProcessId RedrawWindow EndPaint MsgWaitForMultipleObjectsEx TrackMouseEvent LoadKeyboardLayoutW ActivateKeyboardLayout GetParent InsertMenuItemW GetPropW MessageBoxW SetPropW UpdateWindow MsgWaitForMultipleObjects DestroyMenu SetWindowsHookExW EmptyClipboard AdjustWindowRectEx IsWindow DrawIcon EnumThreadWindows InvalidateRect GetKeyboardState ScreenToClient DrawFrameControl BringWindowToTop SetCursor CreateIcon RemoveMenu AppendMenuW GetKeyboardLayoutNameW OpenClipboard TranslateMessage MapWindowPoints EnumDisplayMonitors CountClipboardFormats CallWindowProcW CloseClipboard DestroyCursor UpdateLayeredWindow PostQuitMessage ShowScrollBar EnableMenuItem HideCaret WINNLSEnableIME FindWindowExW MonitorFromPoint LoadIconW SystemParametersInfoW GetWindow GetWindowRect InsertMenuW IsWindowEnabled IsDialogMessageA FindWindowW GetKeyboardLayout DeleteMenu

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

oleaut32

GetErrorInfo SysFreeString VariantClear VariantInit SysReAllocStringLen SafeArrayCreate SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound VariantCopy VariantChangeType VariantCopyInd

advapi32

RegEnumKeyW RegFlushKey RegEnumValueW RegQueryValueExW RegCloseKey RegOpenKeyExW

netapi32

NetWkstaGetInfo NetApiBufferFree

msvcrt

isupper isalpha isalnum toupper memchr memcmp memcpy memset isprint isspace iscntrl isxdigit ispunct isgraph islower tolower

kernel32

RtlUnwindEx GetACP CloseHandle LocalFree GetCurrentProcessId SizeofResource VirtualProtect TlsAlloc QueryPerformanceFrequency GetFullPathNameW VirtualFree ExitProcess HeapAlloc GetCPInfoExW GlobalSize GetLongPathNameW RtlUnwind GetCPInfo EnumSystemLocalesW GetStdHandle GetModuleHandleW FreeLibrary HeapDestroy ReadFile GetUserDefaultLCID GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW CreateThread CompareStringW LoadLibraryA ResetEvent MulDiv FreeResource GetVersion RaiseException GlobalAddAtomW FormatMessageW SwitchToThread GetExitCodeThread OutputDebugStringW GetCurrentThread ExpandEnvironmentStringsW LoadLibraryExW LockResource GetCurrentThreadId UnhandledExceptionFilter VirtualQuery GlobalFindAtomW VirtualQueryEx GlobalFree Sleep EnterCriticalSection SetFilePointer LoadResource SuspendThread GetTickCount GetStartupInfoW GlobalDeleteAtom GetFileAttributesW InitializeCriticalSection GetThreadPriority GetCurrentProcess SetThreadPriority GlobalLock VirtualAlloc GetSystemInfo GetCommandLineW GetTempPathW LeaveCriticalSection GetProcAddress ResumeThread GetVersionExW VerifyVersionInfoW HeapCreate LCMapStringW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage TlsFree GlobalHandle lstrlenW QueryPerformanceCounter SetEndOfFile HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent CreateFileW GetLocaleInfoW EnumResourceNamesW GetSystemDirectoryW DeleteFileW GetLocalTime WaitForSingleObject WriteFile ExitThread DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode IsValidLocale TlsSetValue GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW WaitForMultipleObjectsEx SetThreadLocale GetThreadLocale

ole32

RevokeDragDrop CoCreateInstance CoUninitialize ReleaseStgMedium RegisterDragDrop IsEqualGUID CreateStreamOnHGlobal OleInitialize OleUninitialize OleRegEnumFormatEtc CoGetClassObject CoInitialize CoTaskMemFree OleDraw CoTaskMemAlloc DoDragDrop

gdi32

Pie SetBkMode CreateCompatibleBitmap BeginPath GetEnhMetaFileHeader RectVisible AngleArc ResizePalette SetAbortProc SetTextColor StretchBlt GetCharABCWidthsFloatW RoundRect RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx CreatePalette CreateDCW PolyBezierTo CreateICW GetStockObject CreateSolidBrush Polygon MoveToEx PlayEnhMetaFile Ellipse StartPage GetBitmapBits StartDocW AbortDoc GetSystemPaletteEntries GetEnhMetaFileBits GetRegionData GetEnhMetaFilePaletteEntries CreatePenIndirect SetMapMode CreateFontIndirectW PolyBezier EndDoc GetObjectW GetWinMetaFileBits SetROP2 GetEnhMetaFileDescriptionW ArcTo Arc TextOutW SelectPalette ExcludeClipRect MaskBlt SetWindowOrgEx EndPath EndPage DeleteEnhMetaFile Chord SetDIBits SetViewportOrgEx CreateRectRgn RealizePalette SetDIBColorTable GetDIBColorTable CreateFontW CreateBrushIndirect PatBlt SetEnhMetaFileBits Rectangle SaveDC DeleteDC BitBlt FrameRgn GetDeviceCaps GetTextExtentPoint32W GetClipBox IntersectClipRect Polyline CreateBitmap CombineRgn SetWinMetaFileBits GetStretchBltMode CreateDIBitmap SetStretchBltMode GetDIBits CreateDIBSection ExtCreateRegion LineTo GetRgnBox EnumFontsW CreateHalftonePalette SelectObject DeleteObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW SetBkColor CreateCompatibleDC GetObjectA GetBrushOrgEx GetCurrentPositionEx GetNearestPaletteIndex SetTextAlign GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetPixel GdiFlush SetPixel EnumFontFamiliesExW StretchDIBits GetPath GetPaletteEntries

Name

.text

Size

8.6MB

Virtual Size

8.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

885KB

Virtual Size

884KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

758KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

189B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

69B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

552KB

Virtual Size

551KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

375KB

Virtual Size

374KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

62e326cb2b2cee74f90de12f8e8d06f2dfcb93ad90018b11cb3edae10c119cb4

winmm

d3d9

winspool.drv

comdlg32

comctl32

shell32

user32

version

oleaut32

advapi32

netapi32

msvcrt

kernel32

ole32

gdi32

generic