ed7a0c2317f90e8ecf5b7b7bdf18e1c44b12de2bfd9dfa2aba41e6563c2e1027

Sharing

Copy URL Twitter E-mail

General

Target
ed7a0c2317f90e8ecf5b7b7bdf18e1c44b12de2bfd9dfa2aba41e6563c2e1027
Size 949KB
Sample261009-rxvm6sbe35
SHA256 ed7a0c2317f90e8ecf5b7b7bdf18e1c44b12de2bfd9dfa2aba41e6563c2e1027
MD5 5b0ed0b2eeb768aa3ad30f2d3e42c9c8
SHA1 bc4b3ddf162853d92499ecec69f5b28f065de78b
SHA512 57b124e376e6efe9509b5238dc43c3d72575e8779dad06616c2c26d5bef0ee879911342e1d00a5c4503978a87043d46dd2a95e51676b4e0a652c124f6f2ced0a
SSDEEP 24576:lury8PtXRvmIgRLnXAMb2+8bT7K/zPbAc:lu+gXR6RLnXAk2+C/UzzN
TLSH
T197251843E6A691BCC469C074931AA633FB327C8947357AEB0BE05A353E64F90673DB05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed7a0c2317f90e8ecf5b7b7bdf18e1c44b12de2bfd9dfa2aba41e6563c2e1027

File Explorer

ed7a0c2317f90e8ecf5b7b7bdf18e1c44b12de2bfd9dfa2aba41e6563c2e1027

.exe 949KB

ed7a0c2317f90e8ecf5b7b7bdf18e1c44b12de2bfd9dfa2aba41e6563c2e1027

IMPHASH 8415c4d02327efbf5cdf87d2e3cff9ff
SHA256 ed7a0c2317f90e8ecf5b7b7bdf18e1c44b12de2bfd9dfa2aba41e6563c2e1027
MD5 5b0ed0b2eeb768aa3ad30f2d3e42c9c8
SHA1 bc4b3ddf162853d92499ecec69f5b28f065de78b
SHA512 57b124e376e6efe9509b5238dc43c3d72575e8779dad06616c2c26d5bef0ee879911342e1d00a5c4503978a87043d46dd2a95e51676b4e0a652c124f6f2ced0a
SSDEEP 24576:lury8PtXRvmIgRLnXAMb2+8bT7K/zPbAc:lu+gXR6RLnXAk2+C/UzzN
TLSH
T197251843E6A691BCC469C074931AA633FB327C8947357AEB0BE05A353E64F90673DB05
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

815244

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comfortframe_core.pdb

kernel32

GetProcessHeap HeapFree CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject CloseHandle QueryPerformanceFrequency QueryPerformanceCounter Sleep GetLastError GetSystemTimePreciseAsFileTime CreateFileMappingW MapViewOfFile SetLastError GetFinalPathNameByHandleW GetModuleHandleW CreateMutexW CreateThread GetCurrentProcessId OpenFileMappingW SwitchToThread UnmapViewOfFile OpenProcess QueryFullProcessImageNameW GetLocalTime HeapReAlloc AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW CreateMutexA ReleaseMutex RtlVirtualUnwind WideCharToMultiByte GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW ReadFileEx SleepEx WriteFileEx FormatMessageW GetModuleHandleA GetFullPathNameW CreateFileW SetFileTime SetFileInformationByHandle FindFirstFileExW FindClose GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW ExitProcess GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW GetModuleFileNameW DuplicateHandle GetCommandLineW LoadLibraryExA SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent

user32

FillRect KillTimer GetDC ReleaseDC SetProcessDpiAwarenessContext EnumDisplaySettingsW RegisterClassW EnumDisplayMonitors CreateWindowExW LoadIconW RegisterHotKey SetWindowPos UpdateLayeredWindow GetWindowLongPtrW WindowFromPoint PeekMessageW TranslateMessage DispatchMessageW GetRawInputData GetWindowThreadProcessId GetAsyncKeyState ShowWindow OpenInputDesktop CloseDesktop GetWindow GetWindowRect DefWindowProcW GetClassNameW CreatePopupMenu AppendMenuW GetCursorPos SetForegroundWindow TrackPopupMenu DestroyMenu RegisterRawInputDevices GetRawInputDeviceList GetRawInputDeviceInfoW GetSystemMetrics UnregisterHotKey SetWindowLongPtrW EnumDisplayDevicesW SetClassLongPtrW SendMessageW SetFocus SetTimer GetMessageW GetClientRect DestroyWindow GetForegroundWindow MonitorFromWindow GetMonitorInfoW PostQuitMessage IsWindowVisible

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

gdi32

CreateCompatibleDC CreateSolidBrush GetStockObject SetTextColor GetTextExtentPoint32W DeleteDC TextOutW SetBkMode GetTextFaceW SelectObject SetBkColor DeleteObject BitBlt CreateDIBSection CreateFontW

shell32

Shell_NotifyIconW

xinput1_4

XInputGetState

ntdll

NtReadFile NtCreateNamedPipeFile RtlNtStatusToDosError NtWriteFile NtOpenFile

oleaut32

SysFreeString SysStringLen

bcryptprimitives

ProcessPrng

vcruntime140

memmove __current_exception_context memcpy memcmp memset __CxxFrameHandler3 __C_specific_handler __current_exception

api-ms-win-crt-math-l1-1-0

exp floor ceil __setusermatherr fmod round

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _configure_narrow_argv _exit exit terminate _initterm_e _initterm _get_initial_narrow_environment _seh_filter_exe _set_app_type _initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

ed7a0c2317f90e8ecf5b7b7bdf18e1c44b12de2bfd9dfa2aba41e6563c2e1027

kernel32

user32

api-ms-win-core-synch-l1-2-0

gdi32

shell32

xinput1_4

ntdll

oleaut32

bcryptprimitives

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic