ec2214161ec7671376cd1217f5d377c69e9e768df553f6ec00dcf330c1a3a12e

Sharing

Copy URL Twitter E-mail

General

Target
ec2214161ec7671376cd1217f5d377c69e9e768df553f6ec00dcf330c1a3a12e
Size 608KB
Sample261009-t5kt2scf76
SHA256 ec2214161ec7671376cd1217f5d377c69e9e768df553f6ec00dcf330c1a3a12e
MD5 b4a2bf47ca086e578cb089910ede6434
SHA1 7d48ffe5b83f3eb5c1e0be1202b1e8ec085e7640
SHA512 ee6ba9ee7b2bae210c67bcc6dca5ea57d04ee288ff15eebc361e0c0bdaf9166c2631920adc3639dd7f3af04e167068b03aeeb6a4ff2a3b6693f08be8e50c4903
SSDEEP 6144:YVjU7wx/vjFP2a3ITgszKMxXMhjhntwMgZ4ElkfSK2w5wA6nJETJ3iPXcqj2CitS:i1jFP5s0XeWt6IicSncZq/fB/A/dKJ
TLSH
T1ACD49D59A79403F8E0B7D538CAA39957F77138481A31CEAF02E049A61F37621AF3B715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec2214161ec7671376cd1217f5d377c69e9e768df553f6ec00dcf330c1a3a12e

File Explorer

ec2214161ec7671376cd1217f5d377c69e9e768df553f6ec00dcf330c1a3a12e

.exe 608KB

ec2214161ec7671376cd1217f5d377c69e9e768df553f6ec00dcf330c1a3a12e

IMPHASH 113face7d4ee9473dcdfb894a3b044d7
SHA256 ec2214161ec7671376cd1217f5d377c69e9e768df553f6ec00dcf330c1a3a12e
MD5 b4a2bf47ca086e578cb089910ede6434
SHA1 7d48ffe5b83f3eb5c1e0be1202b1e8ec085e7640
SHA512 ee6ba9ee7b2bae210c67bcc6dca5ea57d04ee288ff15eebc361e0c0bdaf9166c2631920adc3639dd7f3af04e167068b03aeeb6a4ff2a3b6693f08be8e50c4903
SSDEEP 6144:YVjU7wx/vjFP2a3ITgszKMxXMhjhntwMgZ4ElkfSK2w5wA6nJETJ3iPXcqj2CitS:i1jFP5s0XeWt6IicSncZq/fB/A/dKJ
TLSH
T1ACD49D59A79403F8E0B7D538CAA39957F77138481A31CEAF02E049A61F37621AF3B715
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

325612

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetEvent FileTimeToSystemTime GlobalAlloc DeleteFileW GlobalFree GetSystemInfo LoadLibraryW CreateThread GetLocalTime GetThreadContext GetWindowsDirectoryW GlobalLock SetFilePointerEx CreateFileMappingA LocalFree ReplaceFileW VerSetConditionMask GetComputerNameW GetCurrentProcessId SystemTimeToFileTime GlobalMemoryStatusEx CreateProcessW FreeLibrary VerifyVersionInfoW GetSystemTimeAsFileTime SetProcessWorkingSetSize MapViewOfFile GetTickCount GlobalUnlock MulDiv GetDriveTypeW GetFileTime WriteConsoleW GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle GetFileType FreeEnvironmentStringsW GetEnvironmentStringsW HeapAlloc GetTimeZoneInformation GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW QueryPerformanceFrequency GetModuleHandleA HeapSize HeapReAlloc GetStringTypeW GetACP GetStdHandle GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentThreadId GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WaitForSingleObjectEx ResetEvent OutputDebugStringW IsDebuggerPresent GetFileSize GetProcAddress CreateFileA Sleep CreateEventW GetLogicalDriveStringsW GetCPInfo OpenProcess UnmapViewOfFile IsSystemResumeAutomatic GetSystemDirectoryW ReleaseMutex WaitForSingleObject CreateMutexW GetTempPathW WriteFile TerminateProcess GetCurrentProcess SetLastError HeapFree CreateDirectoryW CloseHandle GetCurrentThread GetFileAttributesW CreateFileW MultiByteToWideChar GetSystemPowerStatus SetFilePointer SetErrorMode InitializeCriticalSection LeaveCriticalSection SetThreadPriority GetUserDefaultUILanguage WaitForMultipleObjects GetSystemTimes GetModuleFileNameW GetCommandLineW EnterCriticalSection GetFileSizeEx GetLogicalDrives GetModuleFileNameA SetThreadAffinityMask WideCharToMultiByte LCMapStringW FindClose QueryPerformanceCounter ReadFile GetModuleHandleW GetProcessHeap VirtualAlloc VirtualFree DeleteCriticalSection RaiseException GetLastError GetCommandLineA InitializeCriticalSectionAndSpinCount

user32

GetWindowTextLengthW GetMessageW CreateDialogParamW DefWindowProcW ShowWindowAsync EnableWindow InflateRect UnregisterClassW PostMessageW FindWindowExW GetWindowRect SendMessageTimeoutW DestroyWindow GetDC GetWindowTextW GetWindowThreadProcessId GetWindowLongPtrW IsWindowVisible SetWindowPos MessageBoxW MonitorFromWindow EnumChildWindows SetWindowLongPtrW CreateWindowExW ScreenToClient SendMessageW EndDialog GetSystemMetrics SetWindowTextW CreatePopupMenu EndPaint BeginPaint GetCursorPos ReleaseDC RegisterClassExW GetClassLongPtrW IsWindow RegisterDeviceNotificationW OpenClipboard DispatchMessageW SetTimer IsDialogMessageW GetMonitorInfoW GetDlgCtrlID SwitchToThisWindow CloseClipboard EmptyClipboard SetDlgItemTextW MapWindowPoints GetDlgItemTextW GetSysColor DestroyMenu SetLayeredWindowAttributes SetFocus TranslateMessage LoadIconW FindWindowW EnumDisplayDevicesW LoadCursorW SetParent InsertMenuW SetClipboardData TrackPopupMenuEx CheckMenuItem GetClientRect GetDlgItem AppendMenuW UpdateLayeredWindow DrawTextW KillTimer PostQuitMessage GetDesktopWindow EnumDisplaySettingsW EnableMenuItem SystemParametersInfoW CreateMenu SetWinEventHook GetParent RegisterWindowMessageW DialogBoxParamW UnregisterDeviceNotification UnhookWinEvent LoadImageW InvalidateRect

gdi32

GetTextMetricsW CreateRectRgn DeleteDC GetTextExtentPoint32W SetTextColor GetDeviceCaps GetObjectW SetBkColor DeleteObject CreateSolidBrush CreateFontIndirectW GetStockObject CreateCompatibleDC CreateDIBSection SelectObject CreateCompatibleBitmap SetBkMode BitBlt

comdlg32

ChooseFontW ChooseColorW GetSaveFileNameW

advapi32

OpenProcessToken CloseServiceHandle OpenSCManagerW DeleteService ControlService StartServiceW OpenServiceW AdjustTokenPrivileges LookupPrivilegeValueW RegQueryValueExW GetUserNameW RegOpenKeyExW RegLoadKeyW RegUnLoadKeyW RegEnumKeyExW PrivilegeCheck RegCloseKey CreateServiceW

shell32

CommandLineToArgvW Shell_NotifyIconW SHGetSpecialFolderPathW

ole32

CoInitializeSecurity CoTaskMemFree CoCreateInstance CoUninitialize StringFromGUID2 CLSIDFromString CoInitializeEx

oleaut32

VariantInit SysFreeString VariantClear SysAllocString

shlwapi

StrTrimA StrTrimW PathFileExistsW SHGetValueW

setupapi

CM_Get_DevNode_Registry_PropertyW SetupDiGetClassDevsW CM_Get_Device_Interface_List_SizeW SetupDiDestroyDeviceInfoList CM_Get_DevNode_Status CM_Get_Device_ID_List_SizeW CM_Get_Parent SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInfo SetupDiGetDeviceInstanceIdW CM_Get_Device_IDW CM_Get_Device_Interface_ListW CM_Locate_DevNodeW CM_Get_Device_ID_ListW CM_Open_DevNode_Key

powrprof

CallNtPowerInformation

crypt32

CertFindCertificateInStore CertCloseStore CryptQueryObject CertFreeCertificateContext CryptMsgClose CertGetNameStringW

iphlpapi

NotifyAddrChange GetNumberOfInterfaces GetIfTable GetIfEntry GetAdaptersInfo

comctl32

_TrackMouseEvent

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

Name

.text

Size

375KB

Virtual Size

375KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

135KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

28KB

Virtual Size

277KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.ko

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ec2214161ec7671376cd1217f5d377c69e9e768df553f6ec00dcf330c1a3a12e

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

setupapi

powrprof

crypt32

iphlpapi

comctl32

version

generic