8b17e2ebc33848be8ba455b7827f679a9f42d272407b47ecacf9d3331377dc8b

Sharing

Copy URL Twitter E-mail

General

Target
8b17e2ebc33848be8ba455b7827f679a9f42d272407b47ecacf9d3331377dc8b
Size 404KB
Sample261102-d4yfraex2x
SHA256 8b17e2ebc33848be8ba455b7827f679a9f42d272407b47ecacf9d3331377dc8b
MD5 dda972930fd350d5cae03fc6a8a51700
SHA1 2a32802f7bf8fa299ce1477a7ed89e5f79353cbd
SHA512 6a2ab135c0c23a8dffebc1670c1e8873af3d175f6b0f7b2cd50b06c0aab81fc529f8a1b2d30ca989a2f316817b4d9baf5d77ebc239fed334dd5db105565150ab
SSDEEP 6144:51WGJImVVhaRSpg8RWxOf8lSmEXBsXJZxKUnRBH9u3l:519JLXh+GWxIYS3XB1UR7u1
TLSH
T1E5946C36E6D09437D1732A7A8D5F42A89836BE113D285C863BE52D4C7F3D782352A393
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b17e2ebc33848be8ba455b7827f679a9f42d272407b47ecacf9d3331377dc8b

File Explorer

8b17e2ebc33848be8ba455b7827f679a9f42d272407b47ecacf9d3331377dc8b

.exe 404KB

8b17e2ebc33848be8ba455b7827f679a9f42d272407b47ecacf9d3331377dc8b

IMPHASH bbb8ad374e42914a67d86b439885c3f5
SHA256 8b17e2ebc33848be8ba455b7827f679a9f42d272407b47ecacf9d3331377dc8b
MD5 dda972930fd350d5cae03fc6a8a51700
SHA1 2a32802f7bf8fa299ce1477a7ed89e5f79353cbd
SHA512 6a2ab135c0c23a8dffebc1670c1e8873af3d175f6b0f7b2cd50b06c0aab81fc529f8a1b2d30ca989a2f316817b4d9baf5d77ebc239fed334dd5db105565150ab
SSDEEP 6144:51WGJImVVhaRSpg8RWxOf8lSmEXBsXJZxKUnRBH9u3l:519JLXh+GWxIYS3XB1UR7u1
TLSH
T1E5946C36E6D09437D1732A7A8D5F42A89836BE113D285C863BE52D4C7F3D782352A393
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

318276

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

kernel32

CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection HeapFree HeapReAlloc HeapAlloc GetProcessHeap GetVersion GetCurrentThreadId VirtualQuery GetThreadLocale GetStartupInfoA GetModuleFileNameA GetLocaleInfoA GetCommandLineA FreeLibrary ExitProcess WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle CloseHandle TlsGetValue LocalAlloc GetModuleHandleA lstrcpyA WriteFile WaitForSingleObject VirtualQuery VirtualAlloc SizeofResource SetThreadLocale SetFilePointer SetEvent SetErrorMode SetEndOfFile ResetEvent ReadFile MulDiv LockResource LoadResource LoadLibraryA LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalReAlloc GlobalHandle GlobalLock GlobalFree GlobalFindAtomA GlobalDeleteAtom GlobalAlloc GlobalAddAtomA GetVersionExA GetVersion GetThreadLocale GetStringTypeExA GetStdHandle GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLocalTime GetLastError GetFullPathNameA GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentProcessId GetCPInfo GetACP FreeResource InterlockedExchange FreeLibrary FormatMessageA FindResourceA EnumCalendarInfoA EnterCriticalSection DeleteCriticalSection CreateThread CreateFileA CreateEventA CompareStringA CloseHandle GetUserDefaultUILanguage GetVersionExW GetModuleHandleA GetProcAddress

kernelbase

GetTickCount QueryPerformanceCounter WideCharToMultiByte MultiByteToWideChar Sleep GetTickCount GetSystemInfo Sleep

user32

LoadStringA MessageBoxA CreateWindowExA WindowFromPoint WinHelpA WaitMessage UpdateWindow UnregisterClassA UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoA ShowWindow ShowScrollBar ShowOwnedPopups ShowCursor SetWindowsHookExA SetWindowPos SetWindowPlacement SetWindowLongA SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropA SetParent SetMenuItemInfoA SetMenu SetForegroundWindow SetFocus SetCursor SetClassLongA SetCapture SetActiveWindow SendMessageA ScrollWindow ScreenToClient RemovePropA RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageA RegisterClipboardFormatA RegisterClassA RedrawWindow PtInRect PostQuitMessage PostMessageA PeekMessageA OffsetRect OemToCharA MessageBoxA MapWindowPoints MapVirtualKeyA LoadStringA LoadKeyboardLayoutA LoadIconA LoadCursorA LoadBitmapA KillTimer IsZoomed IsWindowVisible IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageA IsChild InvalidateRect IntersectRect InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId GetWindowTextA GetWindowRect GetWindowPlacement GetWindowLongA GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropA GetParent GetWindow GetMenuStringA GetMenuState GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextA GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClientRect GetClassNameA GetClassInfoA GetCapture GetActiveWindow FrameRect FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextA DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawEdge DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcA DefMDIChildProcA DefFrameProcA CreatePopupMenu CreateMenu CreateIcon ClientToScreen CheckMenuItem CallWindowProcA CallNextHookEx BeginPaint CharNextA CharLowerA CharUpperBuffA CharToOemA AdjustWindowRectEx ActivateKeyboardLayout LoadStringA

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit SysFreeString

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey RegCloseKey

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

gdi32

UnrealizeObject StretchBlt SetWindowOrgEx SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SaveDC RestoreDC RectVisible RealizePalette PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetTextMetricsA GetTextExtentPoint32A GetSystemPaletteEntries GetStockObject GetPixel GetPaletteEntries GetObjectA GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits ExcludeClipRect DeleteObject DeleteDC CreateSolidBrush CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectA CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap BitBlt SaveDC

comctl32

ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_SetDragCursorImage ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawEx ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_GetImageCount ImageList_Destroy ImageList_Create ImageList_Add

Sharing

General

Malware Config

Signatures

File Explorer

8b17e2ebc33848be8ba455b7827f679a9f42d272407b47ecacf9d3331377dc8b

kernel32

kernelbase

user32

oleaut32

advapi32

version

gdi32

comctl32

generic