2dd3d32c77cc6eb31f6fa4453be9bde26d906c56a2be3a29dff6a83ccb1d4815

Sharing

Copy URL Twitter E-mail

General

Target
2dd3d32c77cc6eb31f6fa4453be9bde26d906c56a2be3a29dff6a83ccb1d4815
Size 1.1MB
Sample261027-jccmvsda25
SHA256 2dd3d32c77cc6eb31f6fa4453be9bde26d906c56a2be3a29dff6a83ccb1d4815
MD5 1fd47276383a4524f040e0c00fffa2ff
SHA1 f4f9fb68eb95120f600d9dbd65d628d5bb986ac1
SHA512 7d34c477d8adc6dc1e4a83d58639b99257d229da6cc0d09d07bd2f546293d717d1818bed6f2d2b3d1f08c6b9cd15d501773f012f36a21c2d6ea3b6972b504b3d
SSDEEP 24576:ZvPuGtXLUYJv2ZmfzlcDF1ePfeegYwjpso5lCN6CaAhJq91Um6VmN:ZzUJZmfRcD34feegYw5saekHGwN
TLSH
T18245F111F886D432E1B205704B79E772197CBD301B2995EB73E41EBE8EB42C17632B66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd3d32c77cc6eb31f6fa4453be9bde26d906c56a2be3a29dff6a83ccb1d4815

File Explorer

2dd3d32c77cc6eb31f6fa4453be9bde26d906c56a2be3a29dff6a83ccb1d4815

.exe 1.1MB

2dd3d32c77cc6eb31f6fa4453be9bde26d906c56a2be3a29dff6a83ccb1d4815

IMPHASH 7a51b72b2a6e97ac4dd2a61c38773e2a
SHA256 2dd3d32c77cc6eb31f6fa4453be9bde26d906c56a2be3a29dff6a83ccb1d4815
MD5 1fd47276383a4524f040e0c00fffa2ff
SHA1 f4f9fb68eb95120f600d9dbd65d628d5bb986ac1
SHA512 7d34c477d8adc6dc1e4a83d58639b99257d229da6cc0d09d07bd2f546293d717d1818bed6f2d2b3d1f08c6b9cd15d501773f012f36a21c2d6ea3b6972b504b3d
SSDEEP 24576:ZvPuGtXLUYJv2ZmfzlcDF1ePfeegYwjpso5lCN6CaAhJq91Um6VmN:ZzUJZmfRcD34feegYw5saekHGwN
TLSH
T18245F111F886D432E1B205704B79E772197CBD301B2995EB73E41EBE8EB42C17632B66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

123682

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathA FindNextFileW FindClose GetLastError OpenThread TerminateThread CloseHandle SetLastError InitializeCriticalSectionEx CreateThread DecodePointer FreeLibrary GetProcAddress GetModuleHandleW lstrcmpiW SizeofResource LoadResource FindResourceW LoadLibraryExW GetModuleFileNameW GetCommandLineW CreateMutexW WriteConsoleW CreateFileW FlushFileBuffers SetStdHandle SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW ReadConsoleW SetFilePointerEx GetTimeZoneInformation HeapSize GetConsoleMode GetConsoleCP GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetSystemDefaultLangID GetDateFormatW GetACP WriteFile GetStdHandle GetModuleHandleExW ExitProcess HeapReAlloc ReadFile RtlUnwind GetCurrentProcessId WideCharToMultiByte lstrlenW MultiByteToWideChar GetUserDefaultUILanguage OutputDebugStringA GetCurrentThreadId RaiseException GetCurrentProcess DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetTempPathW GetLocalTime InitializeCriticalSection QueryPerformanceCounter GetStartupInfoW WaitForSingleObjectEx ResetEvent SetEvent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter LoadLibraryExA VirtualFree VirtualAlloc IsProcessorFeaturePresent FlushInstructionCache Sleep SystemTimeToFileTime InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead GetProcessHeap HeapFree HeapAlloc OutputDebugStringW IsDebuggerPresent SetEndOfFile GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc CreateEventW InitializeCriticalSectionAndSpinCount EncodePointer GetTimeFormatW GetSystemTime

user32

KillTimer PostQuitMessage ShowWindow MessageBoxW MessageBoxTimeoutW IsWindowVisible DestroyWindow UnregisterClassW CreateDialogParamW SetWindowLongW CharNextW DispatchMessageW TranslateMessage wvsprintfW IsDialogMessageW RegisterDeviceNotificationW PostMessageW SetWindowTextW SendMessageW GetDlgItem EnableWindow SetWindowPos MapWindowPoints GetClientRect GetMessageW PeekMessageW FindWindowW GetParent GetWindowRect GetMonitorInfoW MonitorFromWindow GetWindowLongW GetWindow LoadImageW SetTimer UnregisterDeviceNotification DefWindowProcW GetSystemMetrics

advapi32

RegQueryInfoKeyW LookupPrivilegeValueW AdjustTokenPrivileges RegDeleteValueW RegCreateKeyExW RegSetValueExW RegEnumKeyExW OpenProcessToken RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegCloseKey InitiateSystemShutdownW

shell32

SHGetSpecialFolderPathW

ole32

CoUninitialize CoInitialize CoCreateInstance CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

libwdi

wdi_register_logger wdi_destroy_list wdi_install_driver wdi_get_vendor_name wdi_create_list wdi_is_driver_supported _wdi_create_lockdown@0 wdi_set_log_level wdi_prepare_driver wdi_unregister_logger wdi_read_logger

winmm

timeGetTime

setupapi

SetupUninstallOEMInfW SetupDiRemoveDevice SetupDiEnumDeviceInfo SetupDiGetClassDevsW SetupGetInfDriverStoreLocationW SetupGetInfPublishedNameW SetupDiDestroyDeviceInfoList CM_Locate_DevNodeW CM_Reenumerate_DevNode SetupDiGetDeviceInstallParamsW SetupDiSetDeviceInstallParamsW SetupDiBuildDriverInfoList SetupDiEnumDriverInfoW SetupDiOpenDevRegKey SetupDiGetDeviceRegistryPropertyW SetupDiGetDriverInfoDetailW SetupDiDestroyDriverInfoList

iphlpapi

GetAdaptersInfo

ws2_32

closesocket setsockopt socket connect ntohs inet_ntoa gethostbyname inet_addr htons htonl bind getsockname recv WSACleanup WSAStartup send

Name

.text

Size

266KB

Virtual Size

266KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

80KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

560B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

769KB

Virtual Size

772KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2dd3d32c77cc6eb31f6fa4453be9bde26d906c56a2be3a29dff6a83ccb1d4815

kernel32

user32

advapi32

shell32

ole32

oleaut32

comctl32

libwdi

winmm

setupapi

iphlpapi

ws2_32

generic