UmbrellaMenu[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
UmbrellaMenu.exe
Size 2.0MB
Sample261014-ejw8maft3w
SHA256 1f23f328a073ea6994ba3565da584cefd50050220739f5c277ba81d8bf01e2b1
MD5 2e0643f54baa21a4feea4e65def08c0f
SHA1 d71b5cea97cf55835aa2d08ab023acc7b464e367
SHA512 39ff1075fc48abd5f98a83c07b9e4b038355a3fa1a2d6eabb63da8f7a18d5d0bcb42ee6853c1d66936abf6c61fb2cba5add0ac33eae0e37534fddd8e5791a8f0
SSDEEP 24576:lahBMx64v9Rs61Ngr9zdN/grJf28+jc/UL9l3LAiT2eVojpYV38Eu/xPHEatpm2K:la/Mx64ZWr9zB3jc/4NVGY2Er278p
TLSH
T1B1A59E8372D56985D027A1340346FB1FA23570281713C9E73BBA5A685EFE4E18FB76C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UmbrellaMenu.exe

File Explorer

UmbrellaMenu.exe

.exe 2.0MB

UmbrellaMenu.exe

IMPHASH 880284dac9713a78fdca26f8bcb32811
SHA256 1f23f328a073ea6994ba3565da584cefd50050220739f5c277ba81d8bf01e2b1
MD5 2e0643f54baa21a4feea4e65def08c0f
SHA1 d71b5cea97cf55835aa2d08ab023acc7b464e367
SHA512 39ff1075fc48abd5f98a83c07b9e4b038355a3fa1a2d6eabb63da8f7a18d5d0bcb42ee6853c1d66936abf6c61fb2cba5add0ac33eae0e37534fddd8e5791a8f0
SSDEEP 24576:lahBMx64v9Rs61Ngr9zdN/grJf28+jc/UL9l3LAiT2eVojpYV38Eu/xPHEatpm2K:la/Mx64ZWr9zB3jc/4NVGY2Er278p
TLSH
T1B1A59E8372D56985D027A1340346FB1FA23570281713C9E73BBA5A685EFE4E18FB76C8
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

763408

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

dwmapi

DwmEnableBlurBehindWindow DwmGetColorizationColor DwmIsCompositionEnabled

gdi32

CreateRectRgn DeleteObject GetDeviceCaps

user32

AdjustWindowRect ClientToScreen CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageA EmptyClipboard GetCapture GetClientRect GetClipboardData GetCursorPos GetDC GetForegroundWindow GetKeyState GetKeyboardLayout GetMessageExtraInfo IsWindowUnicode LoadCursorA LoadIconA MessageBoxW MonitorFromWindow OpenClipboard PeekMessageA PostQuitMessage RegisterClassExW ReleaseCapture ReleaseDC ScreenToClient SetCapture SetClipboardData SetCursor SetCursorPos SetProcessDPIAware ShowWindow SystemParametersInfoW TrackMouseEvent TranslateMessage UnregisterClassW UpdateWindow

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-heap-l1-1-0

_aligned_free _aligned_malloc _set_new_mode free malloc realloc

api-ms-win-crt-math-l1-1-0

__setusermatherr acosf atan2f pow powf

api-ms-win-crt-private-l1-1-0

__C_specific_handler memchr strchr strstr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p__acmdln _cexit _configure_narrow_argv _crt_atexit _exit _initialize_narrow_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsscanf _wfopen fclose fflush fputc fread fseek ftell fwrite

api-ms-win-crt-string-l1-1-0

strcmp strncmp strncpy tolower wcslen

api-ms-win-crt-time-l1-1-0

_localtime64_s _time64

api-ms-win-crt-utility-l1-1-0

qsort

kernel32

AcquireSRWLockExclusive DeleteCriticalSection EnterCriticalSection FreeLibrary GetLastError GetLocaleInfoA GetModuleHandleA GetProcAddress GetStartupInfoA GlobalAlloc GlobalFree GlobalLock GlobalUnlock InitializeCriticalSection IsDBCSLeadByte LeaveCriticalSection LoadLibraryA MultiByteToWideChar OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReleaseSRWLockExclusive RtlCaptureContext RtlLookupFunctionEntry RtlRestoreContext RtlUnwindEx RtlVirtualUnwind SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TlsGetValue VerSetConditionMask VirtualProtect VirtualQuery WakeAllConditionVariable WideCharToMultiByte

shell32

ShellExecuteW

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-multibyte-l1-1-0

_ismbblead

Name

.text

Size

914KB

Virtual Size

913KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

UmbrellaMenu.exe

d3d11

d3dcompiler_47

dwmapi

gdi32

user32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

kernel32

shell32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

generic