a436b137ed01ac9d6a832273531b0b7c083f965279259d347a16bbc333328ef2

Sharing

Copy URL Twitter E-mail

General

Target
a436b137ed01ac9d6a832273531b0b7c083f965279259d347a16bbc333328ef2
Size 1.7MB
Sample261102-d5bndazxfs
SHA256 a436b137ed01ac9d6a832273531b0b7c083f965279259d347a16bbc333328ef2
MD5 f1f90b68cac96afa66d7764989805ae4
SHA1 4994ad19d931fe46d020a58a25fd089b5a41ff89
SHA512 a3d02316a7ea081c32e0f66037d63eb8be096dc58a61602078987d94ccf9f08c13e8871d74e613fb22895ac7d3c1952c6aaf0ee5aacd8489593f0f9f40282388
SSDEEP 24576:p5szBU9H/B5/gF9UDX/DYsEh77XC4o8RjdtV5VJNUxwsx:p5OU9H/EFLGG1NUx
TLSH
T136855B2A7B04E03BC11217B51E1B9BAD9436BF566A20D48BBBA03D0C5FF4645793B363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a436b137ed01ac9d6a832273531b0b7c083f965279259d347a16bbc333328ef2

File Explorer

a436b137ed01ac9d6a832273531b0b7c083f965279259d347a16bbc333328ef2

.exe 1.7MB

a436b137ed01ac9d6a832273531b0b7c083f965279259d347a16bbc333328ef2

IMPHASH 85635a7508f4f647d90e960c76ae69df
SHA256 a436b137ed01ac9d6a832273531b0b7c083f965279259d347a16bbc333328ef2
MD5 f1f90b68cac96afa66d7764989805ae4
SHA1 4994ad19d931fe46d020a58a25fd089b5a41ff89
SHA512 a3d02316a7ea081c32e0f66037d63eb8be096dc58a61602078987d94ccf9f08c13e8871d74e613fb22895ac7d3c1952c6aaf0ee5aacd8489593f0f9f40282388
SSDEEP 24576:p5szBU9H/B5/gF9UDX/DYsEh77XC4o8RjdtV5VJNUxwsx:p5OU9H/EFLGG1NUx
TLSH
T136855B2A7B04E03BC11217B51E1B9BAD9436BF566A20D48BBBA03D0C5FF4645793B363
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ftd2xx

ord2 ord61 ord21 ord27 ord16 ord3 ord31 ord29 ord4

advapi32

RegCloseKey RegCreateKeyExA RegFlushKey RegOpenKeyExA RegQueryValueExA RegSetValueExA

kernel32

CloseHandle CompareStringA CreateEventA CreateFileA CreateThread DeleteCriticalSection DeleteFileA EnterCriticalSection EnumCalendarInfoA ExitProcess FindClose FindFirstFileA FindResourceA FormatMessageA FreeLibrary FreeResource GetACP GetCPInfo GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetDateFormatA GetDiskFreeSpaceA GetEnvironmentStrings GetFileAttributesA GetFileType GetFullPathNameA GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetThreadLocale GetTickCount GetUserDefaultLCID GetVersion GetVersionExA GlobalAddAtomA GlobalAlloc GlobalDeleteAtom GlobalFindAtomA GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedExchange InterlockedIncrement IsDBCSLeadByteEx IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadResource LockResource MulDiv MultiByteToWideChar OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ResetEvent RtlUnwind SetConsoleCtrlHandler SetEndOfFile SetErrorMode SetEvent SetFilePointer SetHandleCount SetLastError SetThreadLocale SizeofResource Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpA lstrcpyA lstrcpynA lstrlenA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

comctl32

ImageList_Add ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIconSize ImageList_GetImageCount ImageList_Read ImageList_Remove ImageList_SetBkColor ImageList_SetIconSize ImageList_SetImageCount ImageList_Write ord17 _TrackMouseEvent

comdlg32

GetOpenFileNameA GetSaveFileNameA

gdi32

BitBlt CopyEnhMetaFileA CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateDIBitmap CreateFontIndirectA CreateHalftonePalette CreatePalette CreatePenIndirect CreateRectRgn CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject ExcludeClipRect ExtCreatePen ExtTextOutA GdiFlush GetBitmapBits GetBrushOrgEx GetClipBox GetClipRgn GetCurrentPositionEx GetDCOrgEx GetDIBColorTable GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetObjectA GetPaletteEntries GetPixel GetRgnBox GetStockObject GetSystemPaletteEntries GetTextExtentPoint32A GetTextExtentPointA GetTextMetricsA GetWinMetaFileBits GetWindowOrgEx IntersectClipRect LineTo MaskBlt MoveToEx PatBlt PlayEnhMetaFile PolyPolyline Polyline RealizePalette RectVisible Rectangle RestoreDC SaveDC SelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetEnhMetaFileBits SetMapMode SetPixel SetROP2 SetStretchBltMode SetTextColor SetViewportExtEx SetViewportOrgEx SetWinMetaFileBits SetWindowExtEx SetWindowOrgEx StretchBlt UnrealizeObject

user32

ActivateKeyboardLayout AdjustWindowRectEx BeginPaint CallNextHookEx CallWindowProcA CharLowerA CharLowerBuffA CharNextA CharToOemA CharUpperBuffA CheckMenuItem ChildWindowFromPoint ClientToScreen CloseClipboard CreateCaret CreateIcon CreateMenu CreatePopupMenu CreateWindowExA DefFrameProcA DefMDIChildProcA DefWindowProcA DeleteMenu DestroyCaret DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawMenuBar DrawTextA EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndPaint EnumChildWindows EnumClipboardFormats EnumThreadWindows EnumWindows EqualRect FillRect FindWindowA FrameRect GetActiveWindow GetCapture GetCaretPos GetClassInfoA GetClassLongA GetClassNameA GetClientRect GetClipboardData GetCursor GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextA GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardLayoutNameA GetKeyboardState GetKeyboardType GetLastActivePopup GetMenu GetMenuItemCount GetMenuItemID GetMenuItemInfoA GetMenuState GetMenuStringA GetMessagePos GetMessageTime GetParent GetPropA GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongA GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextA GetWindowThreadProcessId InflateRect InsertMenuA InsertMenuItemA IntersectRect InvalidateRect IsCharAlphaA IsCharAlphaNumericA IsChild IsDialogMessageA IsDialogMessageW IsIconic IsRectEmpty IsWindow IsWindowEnabled IsWindowUnicode IsWindowVisible IsZoomed KillTimer LoadBitmapA LoadCursorA LoadIconA LoadKeyboardLayoutA LoadStringA MapVirtualKeyA MapWindowPoints MessageBeep MessageBoxA OemToCharA OffsetRect OpenClipboard PeekMessageA PeekMessageW PostMessageA PostQuitMessage PtInRect RedrawWindow RegisterClassA RegisterClipboardFormatA RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollWindow ScrollWindowEx SendMessageA SendMessageW SetActiveWindow SetCapture SetCaretPos SetClassLongA SetClipboardData SetCursor SetFocus SetForegroundWindow SetKeyboardState SetMenu SetMenuItemInfoA SetParent SetPropA SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongA SetWindowLongW SetWindowPlacement SetWindowPos SetWindowTextA SetWindowsHookExA ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoA TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnionRect UnregisterClassA UpdateWindow ValidateRect WaitMessage WindowFromPoint wsprintfA

ole32

CLSIDFromString CoCreateInstance CoInitialize CoTaskMemAlloc CoTaskMemFree CoUninitialize

oleaut32

GetErrorInfo SafeArrayCreate SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SysAllocStringLen SysFreeString SysReAllocStringLen VariantChangeType VariantClear VariantCopy VariantCopyInd VariantInit

@$xp$14Jpeg@TJPEGData @$xp$15Jpeg@TJPEGImage @$xp$15Jpeg@TJPEGScale @$xp$21Jpeg@TJPEGPerformance @$xp$21Jpeg@TJPEGPixelFormat @$xp$22Jpeg@TJPEGQualityRange @@Cdf@Finalize @@Cdf@Initialize @@Eepromwriteprotectform@Finalize @@Eepromwriteprotectform@Initialize @@Formadv@Finalize @@Formadv@Initialize @@Formbiteditor@Finalize @@Formbiteditor@Initialize @@Fti2c@Finalize @@Fti2c@Initialize @@I2c_config@Finalize @@I2c_config@Initialize @@Iodevice@Finalize @@Iodevice@Initialize @@Productkeyform@Finalize @@Productkeyform@Initialize @@Unit1@Finalize @@Unit1@Initialize @@Unit2@Finalize @@Unit2@Initialize @@Unit3@Finalize @@Unit3@Initialize @Jconsts@Finalization$qqrv @Jconsts@_sChangeJPGSize @Jconsts@_sJPEGError @Jconsts@_sJPEGImageFile @Jconsts@initialization$qqrv @Jpeg@Finalization$qqrv @Jpeg@JPEGDefaults @Jpeg@TJPEGData@ @Jpeg@TJPEGData@$bdtr$qqrv @Jpeg@TJPEGData@FreeHandle$qqrv @Jpeg@TJPEGImage@ @Jpeg@TJPEGImage@$bctr$qqrv @Jpeg@TJPEGImage@$bdtr$qqrv @Jpeg@TJPEGImage@Assign$qqrp19Classes@TPersistent @Jpeg@TJPEGImage@AssignTo$qqrp19Classes@TPersistent @Jpeg@TJPEGImage@CalcOutputDimensions$qqrv @Jpeg@TJPEGImage@Changed$qqrp14System@TObject @Jpeg@TJPEGImage@Compress$qqrv @Jpeg@TJPEGImage@DIBNeeded$qqrv @Jpeg@TJPEGImage@Draw$qqrp16Graphics@TCanvasrx11Types@TRect @Jpeg@TJPEGImage@Equals$qqrp17Graphics@TGraphic @Jpeg@TJPEGImage@FreeBitmap$qqrv @Jpeg@TJPEGImage@GetBitmap$qqrv @Jpeg@TJPEGImage@GetEmpty$qqrv @Jpeg@TJPEGImage@GetGrayscale$qqrv @Jpeg@TJPEGImage@GetHeight$qqrv @Jpeg@TJPEGImage@GetPalette$qqrv @Jpeg@TJPEGImage@GetWidth$qqrv @Jpeg@TJPEGImage@JPEGNeeded$qqrv @Jpeg@TJPEGImage@LoadFromClipboardFormat$qqrusuiui @Jpeg@TJPEGImage@LoadFromStream$qqrp15Classes@TStream @Jpeg@TJPEGImage@NewBitmap$qqrv @Jpeg@TJPEGImage@NewImage$qqrv @Jpeg@TJPEGImage@ReadData$qqrp15Classes@TStream @Jpeg@TJPEGImage@ReadStream$qqrip15Classes@TStream @Jpeg@TJPEGImage@SaveToClipboardFormat$qqrrusruit2 @Jpeg@TJPEGImage@SaveToStream$qqrp15Classes@TStream @Jpeg@TJPEGImage@SetGrayscale$qqro @Jpeg@TJPEGImage@SetHeight$qqri @Jpeg@TJPEGImage@SetPalette$qqrui @Jpeg@TJPEGImage@SetPerformance$qqr21Jpeg@TJPEGPerformance @Jpeg@TJPEGImage@SetPixelFormat$qqr21Jpeg@TJPEGPixelFormat @Jpeg@TJPEGImage@SetScale$qqr15Jpeg@TJPEGScale @Jpeg@TJPEGImage@SetSmoothing$qqro @Jpeg@TJPEGImage@SetWidth$qqri @Jpeg@TJPEGImage@WriteData$qqrp15Classes@TStream @Jpeg@initialization$qqrv _AboutForm _Form1 _Form3 _FormAdvanced _FormBitEdit _ProductKeyDialog _WriteProtectForm __GetExceptDLLinfo ___CPPdebugHook _frmCDF _frmI2C

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

157KB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

11KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

326KB

Virtual Size

328KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

77KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a436b137ed01ac9d6a832273531b0b7c083f965279259d347a16bbc333328ef2

ftd2xx

advapi32

kernel32

version

comctl32

comdlg32

gdi32

user32

ole32

oleaut32

generic