onaf2r-v1[.]4[.]1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
onaf2r-v1.4.1.exe
Size 144.9MB
Sample260930-cb62ratt6n
SHA256 3ea6cc6e2228c2111f269b107eed0e1738a961dde3f94bed984cff0bf85d4351
MD5 062a3ab96738bc506ce68cd126e46b8b
SHA1 fd0eb238ddbb6e65499e42cf2c1a36deac8029d0
SHA512 a12c5139e0945a8c912bc05939d16fc4d7a69da4e0768b6a23c36d4e23d3eeb2bb14233db63547b0113cf0317b04365e823f32e3ac37c441f8ffbc650c81f877
SSDEEP 3145728:h1fT09t/Y1FYso5OBPsnZiobsOkz3KiVjdw81wK676OAIOgF:Lf4b/YHXBPsnQmKoVx
TLSH
T1B67812A1C7D5C973E16164BB0573D4AB922D9DC83BA32A0DC2117D33BDBBB5875A03A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
onaf2r-v1.4.1.exe

File Explorer

onaf2r-v1.4.1.exe

.exe 144.9MB

onaf2r-v1.4.1.exe

IMPHASH 21a64f51c0bb5f2a7ce36770ea95039b
SHA256 3ea6cc6e2228c2111f269b107eed0e1738a961dde3f94bed984cff0bf85d4351
MD5 062a3ab96738bc506ce68cd126e46b8b
SHA1 fd0eb238ddbb6e65499e42cf2c1a36deac8029d0
SHA512 a12c5139e0945a8c912bc05939d16fc4d7a69da4e0768b6a23c36d4e23d3eeb2bb14233db63547b0113cf0317b04365e823f32e3ac37c441f8ffbc650c81f877
SSDEEP 3145728:h1fT09t/Y1FYso5OBPsnZiobsOkz3KiVjdw81wK676OAIOgF:Lf4b/YHXBPsnQmKoVx
TLSH
T1B67812A1C7D5C973E16164BB0573D4AB922D9DC83BA32A0DC2117D33BDBBB5875A03A0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

412731

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

winmm

timeBeginPeriod joyGetDevCapsW joyGetPosEx timeEndPeriod

kernel32

MultiByteToWideChar WideCharToMultiByte GlobalAddAtomW GlobalDeleteAtom lstrlenW GetCommandLineW GetExitCodeProcess GlobalAlloc GlobalLock GlobalUnlock SetErrorMode GetCurrentDirectoryW GlobalFree LoadLibraryW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA FindNextFileA FindFirstFileExA DecodePointer GetFileType LCMapStringW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetOEMCP IsValidCodePage GetStringTypeW GetCPInfo HeapFree HeapReAlloc HeapAlloc FindNextFileW GetModuleFileNameA GetModuleHandleExW ExitProcess SetEnvironmentVariableW DeleteFileW GetACP DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer RtlUnwind InitializeSListHead GetCurrentThreadId GetCurrentProcessId GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError QueryPerformanceFrequency QueryPerformanceCounter LoadLibraryExA GetModuleHandleW VirtualQuery VirtualProtect GetSystemInfo RaiseException CreateMutexW GetModuleFileNameW Sleep SetCurrentDirectoryW ReleaseMutex WaitForSingleObject FindClose FindFirstFileW CloseHandle SetFilePointerEx SetFilePointer WriteFile GetLastError ReadFile CreateFileW CreateDirectoryW GetTempFileNameW GetTempPathW WriteConsoleW RemoveDirectoryW GetVersionExW GetLocaleInfoW FreeLibrary GetProcAddress LoadLibraryExW SetStdHandle HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers GetStdHandle

user32

DrawTextW OffsetRect DestroyWindow PostQuitMessage DrawEdge GetUpdateRect DefMDIChildProcW EndPaint BeginPaint InflateRect GetClassNameW GetDlgItemTextW SendDlgItemMessageW EndDialog GetDlgItem SetDlgItemTextW GetTabbedTextExtentW MapVirtualKeyW GetInputState DrawMenuBar SetMenuInfo DestroyMenu LoadMenuIndirectW GetMenuItemCount SetWindowPlacement GetWindowPlacement EndDeferWindowPos DeferWindowPos BeginDeferWindowPos GetDesktopWindow GetSystemMenu UpdateWindow GetWindow RegisterClassW RegisterClassExW ModifyMenuW GetMenuStringW GetMenuItemID DialogBoxParamW FillRect LoadImageW LoadIconW GetMonitorInfoW MonitorFromWindow GetSystemMetrics RedrawWindow IsIconic IsDialogMessageW SetTimer GetClipboardData CloseClipboard SetClipboardData EmptyClipboard OpenClipboard IsClipboardFormatAvailable CheckMenuItem EnableMenuItem GetMenu PtInRect PostMessageW InvalidateRect SetFocus GetFocus CallWindowProcW RemovePropW SetPropW SetWindowLongW GetPropW MessageBoxW GetParent GetActiveWindow ShowCursor SetCapture ReleaseCapture GetKeyState GetWindowRect GetWindowDC SetCursorPos ClientToScreen ScreenToClient GetCursorPos LoadStringW MapWindowPoints SetWindowPos IsZoomed GetWindowLongW AdjustWindowRectEx SendMessageW LockWindowUpdate ShowWindow IsWindowVisible GetClientRect SetWindowTextW wsprintfW IntersectRect KillTimer DestroyIcon GetSubMenu DeleteMenu GetMenuState LoadCursorW SetCursor SystemParametersInfoW GetSysColor ReleaseDC CreateIconIndirect GetDC MsgWaitForMultipleObjects DispatchMessageW TranslateMessage TranslateMDISysAccel GetMessageW PeekMessageW DialogBoxIndirectParamW

gdi32

CreatePalette SelectPalette RealizePalette EnumFontFamiliesExW GetStockObject SelectObject GetTextExtentPointW GetDeviceCaps GetObjectW CreateFontIndirectW DeleteObject CreatePen Rectangle LineTo SetBkColor ExtTextOutW SetTextColor SetBkMode CreateRectRgn GetClipRgn ExcludeClipRect SelectClipRgn SetDIBits CreateCompatibleBitmap CreateSolidBrush CreateBitmap

comdlg32

GetSaveFileNameW GetOpenFileNameW

shell32

DragFinish DragQueryFileW ShellExecuteExW DragAcceptFiles