c5f3a849d30e99e46288edd8c02017f6d5bc9e32093945a9308ba2a724ca9a3a

Sharing

Copy URL Twitter E-mail

General

Target
c5f3a849d30e99e46288edd8c02017f6d5bc9e32093945a9308ba2a724ca9a3a
Size 13.0MB
Sample260930-e84c8ssxe1
SHA256 c5f3a849d30e99e46288edd8c02017f6d5bc9e32093945a9308ba2a724ca9a3a
MD5 f24546f8ce14d61d67b27855ba62d26d
SHA1 2cf45d8867742498856bfb742c789bf4f764d93e
SHA512 04299355e800ff82f2ea51617346b56d664951bf78dabbc9a6c2ee5953604bf74254701acd4b6b9647013a826d7a7cda3c8f6593f8be63a6e24f0693927cc6f5
SSDEEP 393216:zSCH+imUa5uwJ02i1+zggLtAgGoaMVvXgaDq/E8YpJXDYCF9Mq:cuQBilgLtAgGoaMVvXgAJXDY
TLSH
T165D66D12B288E02BE1771A3A8C27D7D4683AB6603E15DC1B37B41F4C6F79B41792A357
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5f3a849d30e99e46288edd8c02017f6d5bc9e32093945a9308ba2a724ca9a3a

File Explorer

c5f3a849d30e99e46288edd8c02017f6d5bc9e32093945a9308ba2a724ca9a3a

.exe 13.0MB

c5f3a849d30e99e46288edd8c02017f6d5bc9e32093945a9308ba2a724ca9a3a

IMPHASH c49c648a48e9edf767e265163fc2b165
SHA256 c5f3a849d30e99e46288edd8c02017f6d5bc9e32093945a9308ba2a724ca9a3a
MD5 f24546f8ce14d61d67b27855ba62d26d
SHA1 2cf45d8867742498856bfb742c789bf4f764d93e
SHA512 04299355e800ff82f2ea51617346b56d664951bf78dabbc9a6c2ee5953604bf74254701acd4b6b9647013a826d7a7cda3c8f6593f8be63a6e24f0693927cc6f5
SSDEEP 393216:zSCH+imUa5uwJ02i1+zggLtAgGoaMVvXgaDq/E8YpJXDYCF9Mq:cuQBilgLtAgGoaMVvXgAJXDY
TLSH
T165D66D12B288E02BE1771A3A8C27D7D4683AB6603E15DC1B37B41F4C6F79B41792A357
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10283872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

mpr

WNetGetConnectionW

winmm

timeGetTime

shlwapi

PathCanonicalizeW PathIsRelativeW PathIsUNCW

wininet

FindFirstUrlCacheEntryW FindNextUrlCacheEntryW InternetCloseHandle InternetQueryOptionW FindCloseUrlCache InternetSetCookieW InternetSetStatusCallback InternetOpenW InternetOpenUrlW DeleteUrlCacheEntryW HttpQueryInfoW

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW GetDefaultPrinterW EnumPrintersW

comdlg32

ChooseFontW ChooseColorW GetSaveFileNameW GetOpenFileNameW PrintDlgW

comctl32

FlatSB_SetScrollInfo InitCommonControls ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add ImageList_GetDragImage FlatSB_SetScrollProp ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB FlatSB_GetScrollInfo ImageList_Write ImageList_SetBkColor ImageList_GetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_Replace ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_Draw ImageList_Remove

shell32

DragFinish SHGetMalloc DragQueryFileW SHGetSpecialFolderLocation DragAcceptFiles Shell_NotifyIconW ShellExecuteW SHGetPathFromIDListW ShellExecuteExW

urlmon

URLDownloadToFileW

user32

MoveWindow CopyImage SetMenuItemInfoW GetMenuItemInfoW GetCaretPos DefFrameProcW LockWorkStation ScrollWindowEx GetDlgCtrlID FrameRect RegisterWindowMessageW GetMenuStringW FillRect SendMessageA IsClipboardFormatAvailable EnumWindows ShowOwnedPopups GetClassInfoW GetScrollRange SetActiveWindow GetActiveWindow DrawEdge GetKeyboardLayoutList LoadBitmapW EnumChildWindows GetScrollBarInfo UnhookWindowsHookEx SetCapture GetCapture ShowCaret CreatePopupMenu GetMenuItemID CharLowerBuffW PostMessageW SetWindowLongW IsZoomed SetParent DrawMenuBar GetClientRect IsChild SendDlgItemMessageW IntersectRect IsIconic CallNextHookEx ShowWindow SetForegroundWindow GetWindowTextW GetAsyncKeyState IsDialogMessageW DestroyWindow RegisterClassW EndMenu CharNextW GetFocus GetDC SetFocus ReleaseDC ExitWindowsEx GetClassLongW SetScrollRange DrawTextW PeekMessageA MessageBeep SetClassLongW RemovePropW GetSubMenu EqualRect DestroyIcon IsWindowVisible PtInRect DispatchMessageA UnregisterClassW GetTopWindow SendMessageW GetMessageTime LoadStringW CreateMenu CharLowerW SetWindowRgn SetWindowPos GetMenuItemCount GetSysColorBrush GetWindowDC DrawTextExW EnumClipboardFormats GetScrollInfo SetWindowTextW GetMessageExtraInfo GetSysColor EnableScrollBar TrackPopupMenu DrawIconEx GetClassNameW GetMessagePos GetIconInfo SetScrollInfo GetKeyNameTextW GetDesktopWindow SetCursorPos GetCursorPos SetMenu GetMenuState GetMenu SetRect GetKeyState ValidateRect IsCharAlphaW GetCursor KillTimer WaitMessage TranslateMDISysAccel GetWindowPlacement CreateIconIndirect CreateWindowExW ChildWindowFromPoint GetMessageW GetDCEx PeekMessageW MonitorFromWindow GetUpdateRect SetTimer WindowFromPoint BeginPaint RegisterClipboardFormatW MapVirtualKeyW OffsetRect IsWindowUnicode DispatchMessageW DefMDIChildProcW GetSystemMenu SetScrollPos GetScrollPos InflateRect DrawFocusRect ReleaseCapture LoadCursorW ScrollWindow GetLastActivePopup UnionRect CallWindowProcA GetSystemMetrics CharUpperBuffW ClientToScreen SetClipboardData GetClipboardData SetWindowPlacement GetMonitorInfoW CheckMenuItem CharUpperW DefWindowProcW GetForegroundWindow EnableWindow GetWindowThreadProcessId RedrawWindow EndPaint MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW ActivateKeyboardLayout GetParent MonitorFromRect InsertMenuItemW GetPropW MessageBoxW SetPropW UpdateWindow MsgWaitForMultipleObjects DestroyMenu SetWindowsHookExW GetDoubleClickTime EmptyClipboard GetDlgItem AdjustWindowRectEx IsWindow DrawIcon EnumThreadWindows InvalidateRect SetKeyboardState GetKeyboardState ScreenToClient DrawFrameControl IsCharAlphaNumericW SetCursor CreateIcon RemoveMenu GetKeyboardLayoutNameW OpenClipboard TranslateMessage MapWindowPoints EnumDisplayMonitors CallWindowProcW CountClipboardFormats CloseClipboard DestroyCursor CharUpperBuffA PostQuitMessage ShowScrollBar EnableMenuItem HideCaret FindWindowExW MonitorFromPoint LoadIconW SystemParametersInfoW GetWindow GetWindowLongW GetWindowRect InsertMenuW IsWindowEnabled IsDialogMessageA FindWindowW GetKeyboardLayout DeleteMenu

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

oleaut32

SafeArrayPutElement SysStringLen SetErrorInfo GetErrorInfo VariantInit VariantClear SysFreeString SafeArrayAccessData SysReAllocStringLen SafeArrayCreate CreateErrorInfo SafeArrayGetElement GetActiveObject SysAllocStringLen SafeArrayUnaccessData SafeArrayPtrOfIndex VariantCopy SafeArrayGetUBound SafeArrayGetLBound SafeArrayRedim VariantCopyInd VariantChangeType

advapi32

RegSetValueExW RegEnumKeyExW AdjustTokenPrivileges RegDeleteKeyW LookupPrivilegeValueW RegOpenKeyExW RegQueryInfoKeyW OpenProcessToken RegDeleteValueW RegFlushKey RegQueryValueExW RegEnumValueW RegCloseKey RegCreateKeyExW

netapi32

NetWkstaGetInfo Netbios NetApiBufferFree

msvcrt

memcpy memset _gcvt

kernel32

SetFileAttributesW GetFileType SetFileTime QueryDosDeviceW GetACP GetStringTypeExW CloseHandle LocalFree GetCurrentProcessId SizeofResource VirtualProtect UnlockFile CreateSemaphoreW QueryPerformanceFrequency IsDebuggerPresent FindNextFileW GetFullPathNameW VirtualFree HeapAlloc ExitProcess GetCPInfoExW GlobalSize GetLongPathNameW RtlUnwind GetCPInfo EnumSystemLocalesW GetStdHandle GetTimeZoneInformation FileTimeToLocalFileTime GetModuleHandleW FreeLibrary TryEnterCriticalSection HeapDestroy FileTimeToDosDateTime ReadFile GetUserDefaultLCID GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW CreateThread CompareStringW CopyFileW MapViewOfFile CreateMutexW LoadLibraryA GetVolumeInformationW ResetEvent MulDiv FreeResource GetDriveTypeW GetVersion MoveFileW RaiseException GlobalAddAtomW GetSystemTimeAsFileTime FormatMessageW OpenProcess SwitchToThread GetExitCodeThread OutputDebugStringW GetCurrentThread GetLogicalDrives IsBadReadPtr GlobalMemoryStatusEx LockResource LoadLibraryExW TerminateProcess GetCurrentThreadId UnhandledExceptionFilter GlobalFindAtomW VirtualQuery SetSystemPowerState GlobalFree VirtualQueryEx Sleep EnterCriticalSection SetFilePointer ReleaseMutex LoadResource SuspendThread GetTickCount WritePrivateProfileStringW GetFileSize GlobalDeleteAtom GetStartupInfoW GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW InitializeCriticalSection GetThreadPriority GetCurrentProcess GlobalLock SetThreadPriority VirtualAlloc GetTempPathW GetCommandLineW GetSystemInfo LeaveCriticalSection GetProcAddress ResumeThread GetLogicalDriveStringsW WinExec GetVersionExW VerifyVersionInfoW HeapCreate GetWindowsDirectoryW LCMapStringW SignalObjectAndWait GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage LockFile GetConsoleOutputCP UnmapViewOfFile GetConsoleCP GlobalHandle SetProcessShutdownParameters lstrlenW CompareStringA GlobalReAlloc SetEndOfFile QueryPerformanceCounter lstrcmpW HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent ReleaseSemaphore GetLocaleInfoW CreateFileW SystemTimeToFileTime EnumResourceNamesW DeleteFileW IsDBCSLeadByteEx GetEnvironmentVariableW GetLocalTime WaitForSingleObject WriteFile CreateFileMappingW ExitThread DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode GetComputerNameW TzSpecificLocalTimeToSystemTime IsValidLocale TlsSetValue CreateDirectoryW GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW GetPrivateProfileStringW WaitForMultipleObjectsEx GetThreadLocale SetThreadLocale

shfolder

SHGetFolderPathW

wsock32

send

quartz

AMGetErrorTextW

gdiplus

GdipGetHatchForegroundColor GdipGetPointCount GdipCloneImage GdipGetPathGradientSurroundColorCount GdipBitmapLockBits GdipLoadImageFromStream GdipSetPenDashOffset GdipGetPenDashOffset GdipBitmapUnlockBits GdipSetPixelOffsetMode GdipIsMatrixIdentity GdipCreateBitmapFromScan0 GdipSetSmoothingMode GdipGetSmoothingMode GdipGetPageUnit GdipSetPageUnit GdipGetLineGammaCorrection GdipGetImageGraphicsContext GdipGetMatrixElements GdipGetTextureImage GdipSetImagePalette GdipGetImagePalette GdipGetImageType GdipGetStringFormatMeasurableCharacterRangeCount GdipGetRegionDataSize GdipSetMatrixElements GdipGetTextureWrapMode GdipDeleteFontFamily GdipSetStringFormatLineAlign GdipGetStringFormatLineAlign GdipGetFontSize GdipSetTextContrast GdipGetTextContrast GdipCreateHBITMAPFromBitmap GdipDeleteRegion GdipDrawPolygonI GdipGetPropertySize GdipGetImageHorizontalResolution GdipImageGetFrameDimensionsCount GdipSetPathGradientWrapMode GdipDrawLine GdipGetPathGradientRect GdipSetPenColor GdipGetPenColor GdipGetPathGradientCenterPoint GdipGetPathGradientPointCount GdipSetPathGradientCenterPoint GdipSetLineGammaCorrection GdipSetPenDashStyle GdipGetPenDashStyle GdipGetLineBlendCount GdipGetSolidFillColor GdipGetFamily GdipSetSolidFillColor GdipGetPenFillType GdipGetPenCompoundCount GdipSetLineWrapMode GdipGetLineWrapMode GdipSetTextRenderingHint GdipGetTextRenderingHint GdipSetCompositingMode GdipCloneBrush GdipDeleteStringFormat GdipGetPixelOffsetMode GdipGetCustomLineCapStrokeJoin GdipSetCompositingQuality GdipGetCompositingQuality GdipSetCustomLineCapStrokeJoin GdipGetImagePaletteSize GdipGetDpiX GdipGetDpiY GdipGetImageWidth GdipGetPathGradientRectI GdipCreateSolidFill GdipGetBrushType GdipGetPathGradientWrapMode GdipGetPropertyCount GdipSetStringFormatAlign GdipGetStringFormatAlign GdipGetHatchBackgroundColor GdipDeletePath GdipGetPathGradientFocusScales GdipSetPathGradientFocusScales GdipGetLinePresetBlendCount GdipSetPenWidth GdipGetPenWidth GdipIsMatrixInvertible GdipGetStringFormatDigitSubstitution GdipDisposeImageAttributes GdipGetPathGradientPresetBlendCount GdipSetRenderingOrigin GdipSetStringFormatTrimming GdipGetFontUnit GdipGetImageRawFormat GdiplusShutdown GdipCreateBitmapFromStream GdipGetLineRect GdipSetPenLineJoin GdipDeleteCachedBitmap GdipGetImageVerticalResolution GdipGetPathLastPoint GdipLoadImageFromStreamICM GdipGetStringFormatTabStopCount GdipGetHatchStyle GdipGetFamilyName GdipGetCompositingMode GdipSetPathGradientCenterPointI GdipGetCustomLineCapBaseInset GdipSetCustomLineCapBaseInset GdipGetCustomLineCapWidthScale GdipSetCustomLineCapWidthScale GdipAlloc GdipDeleteMatrix GdipGetPenDashCount GdipSetPenMiterLimit GdipGetPenMiterLimit GdipGetPathPoints GdipGetStringFormatTrimming GdipSetPathGradientGammaCorrection GdipGetPathGradientGammaCorrection GdipGetPathTypes GdipGetImageDimension GdipGetPathFillMode GdipSetPathFillMode GdipCreatePen1 GdipSetStringFormatHotkeyPrefix GdipGetFontStyle GdipDrawImageRectRectI GdipSetInterpolationMode GdipGetInterpolationMode GdipGetPathGradientCenterPointI GdipDeletePen GdipGetPathGradientCenterColor GdipDeleteGraphics GdipGetRenderingOrigin GdipCreateBitmapFromStreamICM GdipSetPathGradientCenterColor GdipDeleteFont GdipGetPageScale GdipSetPageScale GdipDrawLineI GdipGetImageEncodersSize GdipFree GdipDeleteCustomLineCap GdipReleaseDC GdipGetStringFormatFlags GdipSetStringFormatFlags GdipSetPenBrushFill GdipGetPenBrushFill GdipGetImagePixelFormat GdipGetStringFormatHotkeyPrefix GdipSetPenMode GdipGetPenMode GdipGetImageHeight GdipGetDC GdipSetTextureWrapMode GdiplusStartup GdipGetImageEncoders GdipDeleteBrush GdipGetLineRectI GdipGetPenLineJoin GdipImageRotateFlip GdipGetPathGradientBlendCount GdipSaveImageToStream GdipDrawImageRectI GdipDisposeImage

ole32

IsAccelerator CoCreateGuid CoCreateInstance CoUninitialize CLSIDFromString ReleaseStgMedium IsEqualGUID ProgIDFromCLSID CreateStreamOnHGlobal OleInitialize CoGetMalloc CLSIDFromProgID OleUninitialize CoGetClassObject CoInitialize CreateItemMoniker CoTaskMemFree OleDraw GetRunningObjectTable CoTaskMemAlloc StringFromCLSID OleSetMenuDescriptor DoDragDrop

gdi32

Pie SetBkMode CreateCompatibleBitmap CreatePolygonRgn GetEnhMetaFileHeader CloseEnhMetaFile RectVisible AngleArc ResizePalette SetAbortProc SetTextColor StretchBlt ExtSelectClipRgn RoundRect SelectClipRgn RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx CreatePalette CreateDCW CreateICW PolyBezierTo GetStockObject CreateSolidBrush Polygon MoveToEx PlayEnhMetaFile Ellipse ModifyWorldTransform StartPage GetBitmapBits StartDocW GetSystemPaletteEntries GetEnhMetaFileBits CreatePenIndirect GetEnhMetaFilePaletteEntries SetMapMode CreateFontIndirectW PolyBezier LPtoDP GetNearestColor EndDoc GetObjectW GetWinMetaFileBits SetROP2 GetTextExtentExPointW GetEnhMetaFileDescriptionW ArcTo CreateEnhMetaFileW Arc SelectPalette SetGraphicsMode SetLayout ExcludeClipRect MaskBlt SetWindowOrgEx EndPage DeleteEnhMetaFile Chord SetDIBits SetViewportOrgEx GetViewportOrgEx CreateRectRgn RealizePalette SetDIBColorTable GetDIBColorTable CreateBrushIndirect PatBlt SetEnhMetaFileBits Rectangle SaveDC DeleteDC GetWorldTransform BitBlt SetWorldTransform FrameRgn GetDeviceCaps GetTextExtentPoint32W GetClipBox GetClipRgn Polyline IntersectClipRect CreateBitmap CombineRgn SetWinMetaFileBits CreateDIBitmap GetStretchBltMode CreateDIBSection SetStretchBltMode GetDIBits LineTo GetRgnBox EnumFontsW SetWindowExtEx CreateHalftonePalette SelectObject DeleteObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW SetBkColor CreateCompatibleDC GetBrushOrgEx GetCurrentPositionEx GetNearestPaletteIndex SetTextAlign GetTextAlign GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetPixel GdiFlush SetViewportExtEx SetPixel PolyPolyline EnumFontFamiliesExW StretchDIBits GetPaletteEntries

Name

.text

Size

9.8MB

Virtual Size

9.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

118KB

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

166KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

157B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

292B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

93B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

822KB

Virtual Size

822KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c5f3a849d30e99e46288edd8c02017f6d5bc9e32093945a9308ba2a724ca9a3a

mpr

winmm

shlwapi

wininet

winspool.drv

comdlg32

comctl32

shell32

urlmon

user32

version

oleaut32

advapi32

netapi32

msvcrt

kernel32

shfolder

wsock32

quartz

gdiplus

ole32

gdi32

generic