37f3c6cf93798b8b708a9713304e319f83f1f0e02dbac5df1dedfecba5139f75

Sharing

Copy URL Twitter E-mail

General

Target
37f3c6cf93798b8b708a9713304e319f83f1f0e02dbac5df1dedfecba5139f75
Size 7.0MB
Sample261030-ljvs5ax18j
SHA256 37f3c6cf93798b8b708a9713304e319f83f1f0e02dbac5df1dedfecba5139f75
MD5 4479bac4268dfff46cf32ea386dc9635
SHA1 ca7213367a1431cd276a3b91cd660d1995615a1a
SHA512 d13d86974b9241facedb759e5b42c808e1a2fd2579b0c70b2d712fc03eca8fd82a8dd4e8c2ef6e30c1b335e84b925a57a7539e2227dfad52ab38b225cd211945
SSDEEP 98304:Q3Ef6bG0wK5YVeII0s23LmC65lOrAqLWF/ppyLIXcogO4CuqZNalm4T:QUf6bG0wK5YV6OCuqZNp4
TLSH
T1F0761801BE4B5899D08ACCB0C3878A674E2130DB193AF8BF55C9562D3F6D7F45F2921A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37f3c6cf93798b8b708a9713304e319f83f1f0e02dbac5df1dedfecba5139f75

File Explorer

37f3c6cf93798b8b708a9713304e319f83f1f0e02dbac5df1dedfecba5139f75

.exe 7.0MB

37f3c6cf93798b8b708a9713304e319f83f1f0e02dbac5df1dedfecba5139f75

IMPHASH baec4be122043914d7a0b9f9177aa0ef
SHA256 37f3c6cf93798b8b708a9713304e319f83f1f0e02dbac5df1dedfecba5139f75
MD5 4479bac4268dfff46cf32ea386dc9635
SHA1 ca7213367a1431cd276a3b91cd660d1995615a1a
SHA512 d13d86974b9241facedb759e5b42c808e1a2fd2579b0c70b2d712fc03eca8fd82a8dd4e8c2ef6e30c1b335e84b925a57a7539e2227dfad52ab38b225cd211945
SSDEEP 98304:Q3Ef6bG0wK5YVeII0s23LmC65lOrAqLWF/ppyLIXcogO4CuqZNalm4T:QUf6bG0wK5YV6OCuqZNp4
TLSH
T1F0761801BE4B5899D08ACCB0C3878A674E2130DB193AF8BF55C9562D3F6D7F45F2921A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4364416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

SRModManager.pdb

bcryptprimitives

ProcessPrng

ntdll

RtlGetVersion NtOpenFile RtlNtStatusToDosError NtReadFile NtWriteFile NtCreateNamedPipeFile

kernel32

RaiseException FlsSetValue LoadLibraryA RtlPcToFileHeader GetModuleHandleW FlsFree EncodePointer InitializeSListHead SetUnhandledExceptionFilter GetCommandLineW CreateWaitableTimerExW CreateProcessW FreeEnvironmentStringsW GetEnvironmentStringsW ReadFile GetUserDefaultUILanguage LoadLibraryW WaitForMultipleObjects WaitForSingleObject GetExitCodeProcess RtlUnwindEx RtlLookupFunctionEntry WaitForSingleObjectEx GetCurrentProcess GetCurrentProcessId WideCharToMultiByte ReleaseMutex CancelIo MultiByteToWideChar HeapAlloc SleepEx FormatMessageW ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW GetModuleFileNameW LCIDToLocaleName SetWaitableTimer CreateEventW CreateDirectoryW FlsAlloc CreateThread QueryPerformanceCounter QueryPerformanceFrequency WriteFileEx ReadFileEx GetEnvironmentVariableW CreateMutexA GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext LockFileEx GetOverlappedResult AddVectoredExceptionHandler SetEnvironmentVariableW GetModuleHandleA Sleep GetProcAddress SetFilePointerEx GetFinalPathNameByHandleW DeleteFileW GetTempPathW GetFileAttributesW FlushFileBuffers CloseHandle GetFileInformationByHandleEx SetFileTime WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle GetFileInformationByHandle SetFileInformationByHandle GetFullPathNameW MoveFileExW GetDiskFreeSpaceW DeleteCriticalSection GetSystemTimeAsFileTime GetVolumePathNameW FindNextFileW FindFirstFileExW FindClose GetLastError SwitchToThread GetProcessHeap FlsGetValue CreateFileW SleepConditionVariableSRW HeapFree WakeAllConditionVariable GetSystemInfo AcquireSRWLockExclusive InitializeCriticalSectionEx ReleaseSRWLockExclusive FreeLibrary LoadLibraryExW SetLastError OutputDebugStringW GetCurrentThreadId SetThreadStackGuarantee OutputDebugStringA GetCurrentThread HeapReAlloc GetSystemTimePreciseAsFileTime DuplicateHandle LoadLibraryExA lstrlenW

user32

GetForegroundWindow FlashWindowEx IsWindowEnabled EnableWindow IsIconic IsWindowVisible SetPropW SystemParametersInfoW LoadCursorW ToUnicodeEx GetKeyboardLayout MapVirtualKeyExW GetKeyboardState ClipCursor GetClipCursor ShowCursor SetWindowTextW GetWindowTextW GetWindowTextLengthW SetWindowDisplayAffinity ReleaseCapture RegisterRawInputDevices SetCursor SetCursorPos GetMonitorInfoW GetWindowPlacement SetWindowRgn SetWindowPlacement ChangeDisplaySettingsExW AdjustWindowRectEx GetMenu GetWindowLongW SetWindowLongW GetSystemMenu CloseTouchInputHandle InvalidateRgn RegisterWindowMessageA SetParent IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow SetFocus ClientToScreen GetCursorPos GetWindow SetMenu EnableMenuItem MonitorFromRect CreateMenu InvalidateRect GetDC RegisterTouchWindow AppendMenuW InsertMenuW VkKeyScanW SendInput CheckMenuItem DrawTextW ReleaseDC FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo GetMenuItemInfoW SystemParametersInfoA ShowWindow SendMessageW PostQuitMessage CreateAcceleratorTableW GetActiveWindow DestroyAcceleratorTable DestroyMenu RemoveMenu DrawMenuBar SetMenuItemInfoW GetTouchInputInfo TranslateAcceleratorW GetAsyncKeyState TrackMouseEvent GetKeyState DestroyIcon GetIconInfo LoadImageW GetSystemMetrics CreateIcon ScreenToClient SetCapture MapVirtualKeyW GetUpdateRect ValidateRect SetWindowLongPtrW GetRawInputData DefWindowProcW MsgWaitForMultipleObjectsEx PeekMessageW PostThreadMessageW PostMessageW DestroyWindow DispatchMessageW GetMessageW EnumChildWindows DispatchMessageA TranslateMessage GetMessageA SetWindowPos CreateWindowExW RegisterClassExW DrawIconEx GetWindowLongPtrW GetParent RedrawWindow AdjustWindowRect EnumDisplayMonitors MonitorFromPoint CreatePopupMenu FindWindowExW UpdateWindow

comctl32

SetWindowSubclass TaskDialogIndirect DefSubclassProc RemoveWindowSubclass

oleaut32

SysFreeString SetErrorInfo SysStringLen GetErrorInfo

ole32

CoUninitialize RegisterDragDrop CoInitializeEx CoCreateInstance RevokeDragDrop OleInitialize

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute DwmGetWindowAttribute

shell32

ShellExecuteW SHCreateItemFromParsingName DragFinish DragQueryFileW SHGetKnownFolderPath SHGetStockIconInfo SHAppBarMessage

combase

CoTaskMemFree CoCreateFreeThreadedMarshaler CoTaskMemAlloc

advapi32

RegCloseKey RegOpenKeyExW RegGetValueW RegQueryValueExW EventSetInformation EventRegister EventUnregister EventWriteTransfer

gdi32

CombineRgn DeleteObject CreateRectRgn DeleteDC GetDeviceCaps BitBlt GetDIBits SetBkMode SetTextColor SelectObject CreateSolidBrush CreateDIBSection CreateCompatibleDC

shlwapi

SHCreateMemStream

imm32

ImmGetCompositionStringW ImmGetContext ImmReleaseContext

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

api-ms-win-crt-math-l1-1-0

round floor trunc pow roundf __setusermatherr

api-ms-win-crt-string-l1-1-0

wcscmp _wcsicmp wcslen strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstol _ultow_s _wtoi

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe __p___argc __p___argv _cexit exit _initterm_e _crt_atexit terminate _exit _initterm _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit _get_initial_narrow_environment _set_app_type _initialize_narrow_environment _configure_narrow_argv abort _register_onexit_function

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode calloc _callnewh free

Sharing

General

Malware Config

Signatures

File Explorer

37f3c6cf93798b8b708a9713304e319f83f1f0e02dbac5df1dedfecba5139f75

bcryptprimitives

ntdll

kernel32

user32

comctl32

oleaut32

ole32

api-ms-win-core-synch-l1-2-0

dwmapi

shell32

combase

advapi32

gdi32

shlwapi

imm32

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic