24a0690c7787c7758c66a4996daabf8239959f233e25c9134d009964f12a7f8d

Sharing

Copy URL Twitter E-mail

General

Target
24a0690c7787c7758c66a4996daabf8239959f233e25c9134d009964f12a7f8d
Size 2.2MB
Sample261003-1etslaff73
SHA256 24a0690c7787c7758c66a4996daabf8239959f233e25c9134d009964f12a7f8d
MD5 3a2563298a8c55a70c9986f324b20159
SHA1 28bbeb5b5a2e736e636516dc2e5978d8c9eb1d00
SHA512 6af60f33875c423af2efb8c6d8fd3cfe3f9654bdfee0372ad3835fede309f366a0e6d88c0792d34d6a9b90027e37965cbff3b654f96c3d7269ce6405eea084e2
SSDEEP 49152:8o/9VL0d9JgQ+12KMyAXQf3jLeYA2j7yPN2W:8o/9VL0d9JgQ+IKMyAXQf3jLeYA7l2W
TLSH
T176B52996F601807DD4003B760877DA6F603BAE792E38448B777876DCAF726C16A26347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24a0690c7787c7758c66a4996daabf8239959f233e25c9134d009964f12a7f8d

File Explorer

24a0690c7787c7758c66a4996daabf8239959f233e25c9134d009964f12a7f8d

.exe 2.2MB

24a0690c7787c7758c66a4996daabf8239959f233e25c9134d009964f12a7f8d

IMPHASH 4159f889425a5221cf32c8e09a4732f1
SHA256 24a0690c7787c7758c66a4996daabf8239959f233e25c9134d009964f12a7f8d
MD5 3a2563298a8c55a70c9986f324b20159
SHA1 28bbeb5b5a2e736e636516dc2e5978d8c9eb1d00
SHA512 6af60f33875c423af2efb8c6d8fd3cfe3f9654bdfee0372ad3835fede309f366a0e6d88c0792d34d6a9b90027e37965cbff3b654f96c3d7269ce6405eea084e2
SSDEEP 49152:8o/9VL0d9JgQ+12KMyAXQf3jLeYA2j7yPN2W:8o/9VL0d9JgQ+IKMyAXQf3jLeYA7l2W
TLSH
T176B52996F601807DD4003B760877DA6F603BAE792E38448B777876DCAF726C16A26347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

CM_Get_DevNode_Registry_PropertyA CM_Get_Device_IDA CM_Get_Parent SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA SetupDiGetDeviceInstanceIdA SetupDiGetDeviceInterfaceDetailA SetupDiGetDeviceRegistryPropertyA

advapi32

AdjustTokenPrivileges CloseServiceHandle ControlService CreateServiceA DeleteService LookupPrivilegeValueA OpenProcessToken OpenSCManagerA OpenServiceA QueryServiceConfigA RegCloseKey RegOpenKeyExA RegQueryValueExA StartServiceA

kernel32

CloseHandle CompareStringA CopyFileA CreateDirectoryA CreateEventA CreateFileA CreateMutexA CreateThread DeleteCriticalSection DeleteFileA DeviceIoControl EnterCriticalSection EnumCalendarInfoA ExitProcess ExitThread FileTimeToDosDateTime FileTimeToLocalFileTime FindClose FindFirstFileA FindNextFileA FindResourceA FormatMessageA FreeLibrary FreeResource GetACP GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatA GetDiskFreeSpaceA GetDriveTypeA GetEnvironmentStrings GetEnvironmentVariableA GetExitCodeThread GetFileAttributesA GetFileSize GetFileType GetFullPathNameA GetLastError GetLocalTime GetLocaleInfoA GetLogicalDrives GetModuleFileNameA GetModuleHandleA GetOEMCP GetPrivateProfileStringA GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeW GetSystemDirectoryA GetSystemInfo GetThreadLocale GetTickCount GetTimeZoneInformation GetVersion GetVersionExA GlobalAddAtomA GlobalAlloc GlobalDeleteAtom GlobalFree GlobalHandle GlobalLock GlobalReAlloc GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedExchange InterlockedIncrement IsBadWritePtr LCMapStringA LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadResource LocalAlloc LocalFree LockResource MulDiv MultiByteToWideChar RaiseException ReadFile ReleaseMutex RemoveDirectoryA ResumeThread RtlUnwind SetConsoleCtrlHandler SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetErrorMode SetEvent SetFilePointer SetHandleCount SetLastError SetThreadLocale SizeofResource Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringA lstrcmpA lstrcpyA lstrcpynA lstrlenA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

comctl32

ImageList_Add ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIconSize ImageList_GetImageCount ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetIconSize ImageList_Write ord17 ImageList_DrawEx

comdlg32

GetOpenFileNameA GetSaveFileNameA

gdi32

BitBlt CombineRgn CopyEnhMetaFileA CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateDIBitmap CreateFontIndirectA CreateHalftonePalette CreatePalette CreatePenIndirect CreateRectRgn CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject Ellipse ExcludeClipRect ExtCreatePen ExtTextOutA GdiFlush GetBitmapBits GetBrushOrgEx GetClipBox GetCurrentPositionEx GetDCOrgEx GetDIBColorTable GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetObjectA GetPaletteEntries GetPixel GetRgnBox GetStockObject GetSystemPaletteEntries GetTextExtentPoint32A GetTextExtentPointA GetTextMetricsA GetWinMetaFileBits GetWindowOrgEx IntersectClipRect LineTo MaskBlt MoveToEx PatBlt Pie PlayEnhMetaFile PolyPolyline Polyline RealizePalette RectVisible Rectangle RestoreDC SaveDC SelectObject SelectPalette SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetEnhMetaFileBits SetMapMode SetPixel SetROP2 SetStretchBltMode SetTextColor SetViewportExtEx SetViewportOrgEx SetWinMetaFileBits SetWindowExtEx SetWindowOrgEx StretchBlt UnrealizeObject

shell32

DragAcceptFiles DragFinish DragQueryFileA ShellExecuteExA

user32

ActivateKeyboardLayout AdjustWindowRectEx BeginPaint CallNextHookEx CallWindowProcA CharLowerA CharLowerBuffA CharNextA CharUpperBuffA CheckMenuItem ChildWindowFromPoint ClientToScreen CloseClipboard CreateIcon CreateMenu CreatePopupMenu CreateWindowExA DefFrameProcA DefMDIChildProcA DefWindowProcA DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawMenuBar DrawTextA EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndPaint EnumClipboardFormats EnumThreadWindows EnumWindows EqualRect FillRect FindWindowA FrameRect GetActiveWindow GetCapture GetClassInfoA GetClassNameA GetClientRect GetClipboardData GetCursor GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextA GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardState GetKeyboardType GetLastActivePopup GetMenu GetMenuItemCount GetMenuItemID GetMenuItemInfoA GetMenuState GetMenuStringA GetMessagePos GetMessageTime GetParent GetPropA GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColor GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongA GetWindowPlacement GetWindowRect GetWindowTextA GetWindowThreadProcessId InflateRect InsertMenuA InsertMenuItemA IntersectRect InvalidateRect IsCharAlphaA IsCharAlphaNumericA IsChild IsDialogMessageA IsIconic IsRectEmpty IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapA LoadCursorA LoadIconA LoadKeyboardLayoutA LoadStringA MapVirtualKeyA MapWindowPoints MessageBeep MessageBoxA MsgWaitForMultipleObjects OemToCharA OffsetRect OpenClipboard PeekMessageA PostMessageA PostQuitMessage PtInRect RedrawWindow RegisterClassA RegisterClipboardFormatA RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollWindow ScrollWindowEx SendMessageA SetActiveWindow SetCapture SetClassLongA SetClipboardData SetCursor SetFocus SetForegroundWindow SetKeyboardState SetMenu SetMenuItemInfoA SetPropA SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongA SetWindowPlacement SetWindowPos SetWindowTextA SetWindowsHookExA ShowCursor ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoA TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnionRect UnregisterClassA UpdateWindow ValidateRect WaitMessage WinHelpA WindowFromPoint wsprintfA GetSystemMenu

ole32

IsEqualGUID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen SysStringLen VariantChangeTypeEx VariantClear VariantCopyInd

@$xp$10TCCalendar @$xp$11TCColorGrid @$xp$17TPerformanceGraph @$xp$20Controls@TAnchorKind @$xp$20Controls@TAnchorKind @$xp$20Controls@TAnchorKind @$xp$20Controls@TAnchorKind @$xp$20Controls@TAnchorKind @$xp$22Outline@TOutlineOption @$xp$27Cdiroutl@TCDirectoryOutline @$xp$7TCGauge @@Barcodeu@Finalize @@Barcodeu@Initialize @@Ccalendr@Finalize @@Ccalendr@Initialize @@Cdiroutl@Finalize @@Cdiroutl@Initialize @@Cfgpasswordu@Finalize @@Cfgpasswordu@Initialize @@Cgauges@Finalize @@Cgauges@Initialize @@Cgrid@Finalize @@Cgrid@Initialize @@Drvinstallthread@Finalize @@Drvinstallthread@Initialize @@Flashdrivingsetu@Finalize @@Flashdrivingsetu@Initialize @@Flashdrivingsetu_org@Finalize @@Flashdrivingsetu_org@Initialize @@Fm_badinfou@Finalize @@Fm_badinfou@Initialize @@Fm_flashmapinfou@Finalize @@Fm_flashmapinfou@Initialize @@Fm_pretesterrorcodeu@Finalize @@Fm_pretesterrorcodeu@Initialize @@Fm_smarttemperaturesetu@Finalize @@Fm_smarttemperaturesetu@Initialize @@Initialdisku@Finalize @@Initialdisku@Initialize @@Lightswitchcheckboxu@Finalize @@Lightswitchcheckboxu@Initialize @@Lightswitchcomboboxu@Finalize @@Lightswitchcomboboxu@Initialize @@Lightswitcheditoru@Finalize @@Lightswitcheditoru@Initialize @@Lightswitchtexteditu@Finalize @@Lightswitchtexteditu@Initialize @@Mp2265xtu@Finalize @@Mp2265xtu@Initialize @@Msgboxu@Finalize @@Msgboxu@Initialize @@Perfgrap@Finalize @@Perfgrap@Initialize @@Rdtsettingu@Finalize @@Rdtsettingu@Initialize @@Timeoutthreadu@Finalize @@Timeoutthreadu@Initialize @Ccalendr@Register$qqrv @Cdiroutl@Register$qqrv @Cdiroutl@TCDirectoryOutline@ @Cdiroutl@TCDirectoryOutline@$bctr$qqrp18Classes@TComponent @Cdiroutl@TCDirectoryOutline@APointer @Cdiroutl@TCDirectoryOutline@AssignCaseProc$qqrv @Cdiroutl@TCDirectoryOutline@BuildOneLevel$qqrl @Cdiroutl@TCDirectoryOutline@BuildSubTree$qqrl @Cdiroutl@TCDirectoryOutline@BuildTree$qqrv @Cdiroutl@TCDirectoryOutline@Change$qqrv @Cdiroutl@TCDirectoryOutline@Click$qqrv @Cdiroutl@TCDirectoryOutline@CreateWnd$qqrv @Cdiroutl@TCDirectoryOutline@CurDir$qv @Cdiroutl@TCDirectoryOutline@DriveToInt$qqrc @Cdiroutl@TCDirectoryOutline@Expand$qqri @Cdiroutl@TCDirectoryOutline@ForceCase$qqrrx17System@AnsiString @Cdiroutl@TCDirectoryOutline@GetChildNamed$qqrrx17System@AnsiStringl @Cdiroutl@TCDirectoryOutline@InvalidIndex @Cdiroutl@TCDirectoryOutline@Loaded$qqrv @Cdiroutl@TCDirectoryOutline@RootIndex @Cdiroutl@TCDirectoryOutline@SetDirectory$qqr17System@AnsiString @Cdiroutl@TCDirectoryOutline@SetDrive$qqrc @Cdiroutl@TCDirectoryOutline@SetTextCase$qqr18Cdiroutl@TTextCase @Cdiroutl@TCDirectoryOutline@WalkTree$qqrrx17System@AnsiString @Cgauges@Register$qqrv @Cgrid@Register$qqrv @Perfgrap@Register$qqrv @TCCalendar@ @TCCalendar@$bctr$qqrp18Classes@TComponent @TCCalendar@Change$qqrv @TCCalendar@ChangeMonth$qqri @TCCalendar@Click$qqrv @TCCalendar@DaysPerMonth$qqrii @TCCalendar@DaysThisMonth$qqrv @TCCalendar@Dispatch$qqrpv @TCCalendar@DrawCell$qqriirx13Windows@TRect42System@%Set$t14Grids@Grids__3$iuc$0$iuc$2% @TCCalendar@GetCellText$qqrii @TCCalendar@GetDateElement$qqri @TCCalendar@IsLeapYear$qqri @TCCalendar@NextMonth$qqrv @TCCalendar@NextYear$qqrv @TCCalendar@PrevMonth$qqrv @TCCalendar@PrevYear$qqrv @TCCalendar@SeTCCalendarDate$qqr16System@TDateTime @TCCalendar@SelectCell$qqrii @TCCalendar@SetDateElement$qqrii @TCCalendar@SetStartOfWeek$qqrs @TCCalendar@SetUseCurrentDate$qqro @TCCalendar@StoreCalendarDate$qqrv @TCCalendar@UpdateCalendar$qqrv @TCCalendar@WMSize$qqrr16Messages@TWMSize @TCColorGrid@ @TCColorGrid@$bctr$qqrp18Classes@TComponent @TCColorGrid@CMCtl3DChanged$qqrr17Messages@TMessage @TCColorGrid@Change$qqrv @TCColorGrid@CreateWnd$qqrv @TCColorGrid@Dispatch$qqrpv @TCColorGrid@DrawFgBg$qqrv @TCColorGrid@DrawSquare$qqrio @TCColorGrid@EnableBackground$qqro @TCColorGrid@EnableForeground$qqro @TCColorGrid@GetBackgroundColor$qqrv @TCColorGrid@GetForegroundColor$qqrv @TCColorGrid@KeyDown$qqrrus46System@%Set$t18Classes@Classes__1$iuc$0$iuc$6% @TCColorGrid@MouseDown$qqr21Controls@TMouseButton46System@%Set$t18Classes@Classes__1$iuc$0$iuc$6%ii @TCColorGrid@MouseMove$qqr46System@%Set$t18Classes@Classes__1$iuc$0$iuc$6%ii @TCColorGrid@MouseUp$qqr21Controls@TMouseButton46System@%Set$t18Classes@Classes__1$iuc$0$iuc$6%ii @TCColorGrid@Paint$qqrv @TCColorGrid@SetBackgroundIndex$qqri @TCColorGrid@SetForegroundIndex$qqri @TCColorGrid@SetGridOrdering$qqr13TGridOrdering @TCColorGrid@SetSelection$qqri @TCColorGrid@SquareFromPos$qqrii @TCColorGrid@UpdateCellSizes$qqro @TCColorGrid@WMGetDlgCode$qqrr20Messages@TWMNoParams @TCColorGrid@WMKillFocus$qqrr21Messages@TWMKillFocus @TCColorGrid@WMSetFocus$qqrr20Messages@TWMSetFocus @TCColorGrid@WMSize$qqrr16Messages@TWMSize @TCGauge@ @TCGauge@$bctr$qqrp18Classes@TComponent @TCGauge@AddProgress$qqrl @TCGauge@GetPercentDone$qqrv @TCGauge@Paint$qqrv @TCGauge@PaintAsBar$qqrp16Graphics@TBitmaprx13Windows@TRect @TCGauge@PaintAsNeedle$qqrp16Graphics@TBitmaprx13Windows@TRect @TCGauge@PaintAsNothing$qqrp16Graphics@TBitmaprx13Windows@TRect @TCGauge@PaintAsPie$qqrp16Graphics@TBitmaprx13Windows@TRect @TCGauge@PaintAsText$qqrp16Graphics@TBitmaprx13Windows@TRect @TCGauge@PaintBackground$qqrp16Graphics@TBitmap @TCGauge@SeTCGaugeKind$qqr11TCGaugeKind @TCGauge@SetBackColor$qqr15Graphics@TColor @TCGauge@SetBorderStyle$qqr22Forms@TFormBorderStyle @TCGauge@SetForeColor$qqr15Graphics@TColor @TCGauge@SetMaxValue$qqrl @TCGauge@SetMinValue$qqrl @TCGauge@SetProgress$qqrl @TCGauge@SetShowText$qqro @TPerformanceGraph@ @TPerformanceGraph@$bctr$qqrp18Classes@TComponent @TPerformanceGraph@$bdtr$qqrv @TPerformanceGraph@DataPoint$qqr15Graphics@TColorl @TPerformanceGraph@DisplayPoints$qqrl @TPerformanceGraph@FirstY$qqrv @TPerformanceGraph@GetBandCount$qqrv @TPerformanceGraph@Initialize$qqrl @TPerformanceGraph@LastY$qqri @TPerformanceGraph@NextY$qqri @TPerformanceGraph@Paint$qqrv @TPerformanceGraph@PaintBar$qqr15Graphics@TColorll @TPerformanceGraph@PaintLine$qqr15Graphics@TColorll @TPerformanceGraph@ReallocHistory$qqrv @TPerformanceGraph@Replay$qqrv @TPerformanceGraph@RoundUp$qqrll @TPerformanceGraph@ScrollGraph$qqrv @TPerformanceGraph@SetBackColor$qqr15Graphics@TColor @TPerformanceGraph@SetForeColor$qqr15Graphics@TColor @TPerformanceGraph@SetGradient$qqrl @TPerformanceGraph@SetGraphKind$qqr10TGraphKind @TPerformanceGraph@SetGridSize$qqrl @TPerformanceGraph@SetGridlines$qqro @TPerformanceGraph@SetPenWidth$qqrl @TPerformanceGraph@SetScale$qqrl @TPerformanceGraph@SetStepSize$qqrl @TPerformanceGraph@ShiftY$qqrv @TPerformanceGraph@Update$qqrv _FM_BadInfo _FM_BarCode _FM_CfgPassWord _FM_FlashMapInfo _FM_LightSwitchCheckBox _FM_LightSwitchComboBox _FM_LightSwitchEditor _FM_LightSwitchTextEdit _FM_ManulDriving _FM_ManulDriving_ORG _FM_MsgBox _FM_PretestErrorCode _FM_RdtSetting _FM_SmartTemperatureOffsetSet _MainForm __GetExceptDLLinfo ___CPPdebugHook

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

322KB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

11KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

745KB

Virtual Size

744KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

66KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

24a0690c7787c7758c66a4996daabf8239959f233e25c9134d009964f12a7f8d

setupapi

advapi32

kernel32

version

comctl32

comdlg32

gdi32

shell32

user32

ole32

oleaut32

generic