Indigo-PC-2[.]3[.]0[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Indigo-PC-2.3.0.zip
Size 4.0MB
Sample261102-dmlevszwht
SHA256 960816c0b413a57d657bed3786421f2bf48686ddb8a97a6bee50d1cf9b05e35d
MD5 61fdd4d8bc0e0eb1c5c6adc15f0a3d45
SHA1 564b90ec8d016bd8ccc17e72dca247d44acd92db
SHA512 4dc5483442799b1155d0fc755672b2d3f7c39878b012cd31a03291cc70c5ef9413e8ca090465ac5f951f6fd74c3840bf36a09f0853b83a84f0acf2038220b41c
SSDEEP 98304:bv7lFaB0D+8fVgU6nhdkuciEezRMIXBWQ7wN7bE7Tf:bv7eBaRVgUyfj6e9zBrEnE7Tf
TLSH
T1F616338D2082D0A195FF8B31D6CD77FF60069324225B543E4912E671EA4EB27853BE7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Indigo-PC-2.3.0/indigo.exe

File Explorer

Indigo-PC-2.3.0.zip

.zip 4.0MB
Indigo-PC-2.3.0/LEIA-ME.txt

10KB
Indigo-PC-2.3.0/LICENCA.txt

34KB
Indigo-PC-2.3.0/TERCEIROS.txt

2KB
Indigo-PC-2.3.0/indigo.exe

.exe 11.0MB

Indigo-PC-2.3.0.zip

SHA256 960816c0b413a57d657bed3786421f2bf48686ddb8a97a6bee50d1cf9b05e35d
MD5 61fdd4d8bc0e0eb1c5c6adc15f0a3d45
SHA1 564b90ec8d016bd8ccc17e72dca247d44acd92db
SHA512 4dc5483442799b1155d0fc755672b2d3f7c39878b012cd31a03291cc70c5ef9413e8ca090465ac5f951f6fd74c3840bf36a09f0853b83a84f0acf2038220b41c
SSDEEP 98304:bv7lFaB0D+8fVgU6nhdkuciEezRMIXBWQ7wN7bE7Tf:bv7eBaRVgUyfj6e9zBrEnE7Tf
TLSH
T1F616338D2082D0A195FF8B31D6CD77FF60069324225B543E4912E671EA4EB27853BE7B
MD5 SHA1 SHA512 SSDEEP TLSH

Indigo-PC-2.3.0/indigo.exe

IMPHASH 9c2e83b037de67a9ad06613715ba5c34
SHA256 60f90c6a5f80bce685f6f5a00feb79fa20e1786cf715fffa92936ac01479836f
MD5 45e35f9c297c5ed052674eaa3ef66eb0
SHA1 471901a32c0287c35efcd67e31c452e4413cd297
SHA512 36816c6f54925fe1673e44fe0befebf7e98ad34da4bd96278906826e38baef20544ac8cdbdc6482772d962ffdf14b347c054120f9e6af6320859f2e314080bfb
SSDEEP 98304:798F041QQBdLeEWdgWCrjKXPzo1Act6XtmY5x8UvfUiB0BjkI2zAaQSf2MX/Eejd:7nEBddmk27VfUFK
TLSH
T13DC67C57B69348EDC9A7D3308293A736B634BC2447366B2B1A54E6311E73BC06F1AF11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegCloseKey RegDeleteKeyValueW RegDeleteTreeW RegGetValueW RegOpenKeyExW RegQueryValueExW RegSetKeyValueW

gdi32

BitBlt ChoosePixelFormat CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateFontIndirectW CreateRectRgn CreateSolidBrush DeleteDC DeleteObject DescribePixelFormat GetDIBits GetDeviceCaps GetICMProfileW GetPixelFormat GetTextExtentPoint32A GetTextMetricsW SelectObject SetPixel SetPixelFormat SwapBuffers

imm32

ImmAssociateContext ImmGetCandidateListW ImmGetCompositionFontW ImmGetCompositionStringW ImmGetContext ImmGetIMEFileNameA ImmNotifyIME ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionStringW ImmSetCompositionWindow

kernel32

AddVectoredExceptionHandler AttachConsole CancelIo CloseHandle CompareStringA CopyFileExW CreateDirectoryW CreateEventA CreateEventW CreateFileA CreateFileW CreatePipe CreateProcessW CreateSemaphoreA CreateSemaphoreW CreateThread DeleteCriticalSection DeleteFileW DeviceIoControl DuplicateHandle EnterCriticalSection EnumResourceNamesW ExitProcess FileTimeToSystemTime FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GenerateConsoleCtrlEvent GetCommandLineW GetConsoleMode GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableA GetExitCodeProcess GetFileAttributesExW GetFileSizeEx GetFileTime GetFileType GetHandleInformation GetLastError GetLocaleInfoA GetLocaleInfoW GetLogicalDrives GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessAffinityMask GetProcessHeap GetProcessTimes GetStartupInfoA GetStdHandle GetSystemInfo GetSystemPowerStatus GetSystemTimeAdjustment GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetThreadTimes GetTickCount GetTickCount64 GlobalAlloc GlobalFree GlobalLock GlobalMemoryStatusEx GlobalSize GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection InitializeCriticalSectionAndSpinCount IsDBCSLeadByteEx IsDebuggerPresent IsWow64Process LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LocalFree MoveFileExW MulDiv MultiByteToWideChar OpenProcess OutputDebugStringA OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseSemaphore RemoveDirectoryW RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEnvironmentVariableA SetErrorMode SetEvent SetFilePointer SetFilePointerEx SetHandleInformation SetLastError SetNamedPipeHandleState SetProcessAffinityMask SetSystemTime SetThreadContext SetThreadExecutionState SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread SystemTimeToFileTime SystemTimeToTzSpecificLocalTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection VerSetConditionMask VerifyVersionInfoW VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile __C_specific_handler

msvcrt

___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _acmdln _amsg_exit _assert _beginthreadex _cexit _commode _endthreadex _errno _fmode _fstat64 _hypot _i64toa _initterm _ismbblead _localtime64 _lock _lseeki64 _ltoa _mktime64 _onexit _setjmp _strrev _time64 _ui64toa _ultoa _unlock _wfopen abort acos asin atan atof atoi calloc exit fclose fflush fgets fopen fprintf fputc fputs free fwrite getc getenv isspace iswctype isxdigit localeconv log10 longjmp malloc memchr memcmp memcpy memmove memset printf realloc setlocale setvbuf signal strchr strcmp strcoll strerror strftime strlen strncmp strpbrk strrchr strstr strtol strtoul strxfrm tan tolower towlower towupper ungetc vfprintf wcscmp wcscoll wcsftime wcslen wcsncmp wcsstr wcstol wcsxfrm _strtoui64 _strtoi64 _write _strdup _read _itoa _fileno _fdopen

ole32

CLSIDFromString CoCreateInstance CoInitializeEx CoTaskMemFree CoUninitialize OleInitialize OleUninitialize PropVariantClear RegisterDragDrop ReleaseStgMedium RevokeDragDrop

oleaut32

SysFreeString

setupapi

CM_Get_Device_IDA CM_Get_Parent CM_Locate_DevNodeA SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetClassDevsA SetupDiGetDeviceInstanceIdA SetupDiGetDeviceRegistryPropertyW

shell32

CommandLineToArgvW DragAcceptFiles DragFinish DragQueryFileW SHBrowseForFolderW SHChangeNotify SHGetFolderPathW SHGetPathFromIDListW ShellExecuteW Shell_NotifyIconW

user32

AdjustWindowRectEx AttachThreadInput BeginPaint CallNextHookEx CallWindowProcW ChangeDisplaySettingsExW CheckMenuItem ClientToScreen ClipCursor CloseClipboard CreateIconFromResource CreateIconFromResourceEx CreateIconIndirect CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcW DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint EnumClipboardFormats EnumDisplayDevicesW EnumDisplayMonitors EnumDisplaySettingsW EnumWindows FillRect FlashWindowEx GetAsyncKeyState GetClassInfoExW GetClientRect GetClipCursor GetClipboardData GetClipboardFormatNameA GetClipboardSequenceNumber GetCursorPos GetDC GetDesktopWindow GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMenuItemInfoW GetMessageA GetMessageExtraInfo GetMessagePos GetMessageTime GetMessageW GetMonitorInfoW GetPropW GetQueueStatus GetRawInputBuffer GetRawInputData GetRawInputDeviceInfoA GetRawInputDeviceList GetSystemMetrics GetUpdateRect GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InsertMenuW IntersectRect IsClipboardFormatAvailable IsIconic IsWindow IsZoomed KillTimer LoadCursorW LoadIconW MapVirtualKeyW MessageBoxA MonitorFromPoint MonitorFromWindow MsgWaitForMultipleObjects OpenClipboard PeekMessageW PostMessageW PostThreadMessageW PtInRect RegisterClassExA RegisterClassExW RegisterClassW RegisterClipboardFormatW RegisterDeviceNotificationW RegisterRawInputDevices RegisterWindowMessageA RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient SendMessageW SetActiveWindow SetCapture SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetLayeredWindowAttributes SetMenuItemInfoW SetParent SetPropW SetRectEmpty SetTimer SetWindowLongPtrW SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicode TrackMouseEvent TrackPopupMenu TranslateMessage UnhookWindowsHookEx UnregisterClassA UnregisterClassW UnregisterDeviceNotification ValidateRect

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpCrackUrl WinHttpOpen WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest WinHttpSetTimeouts

winmm

timeBeginPeriod timeEndPeriod

Name

.text

Size

5.6MB

Virtual Size

5.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

155KB

Virtual Size

155KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

203KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

699KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

327KB

Virtual Size

326KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

87KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

95KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Indigo-PC-2.3.0.zip

Indigo-PC-2.3.0/LEIA-ME.txt

Indigo-PC-2.3.0/LICENCA.txt

Indigo-PC-2.3.0/TERCEIROS.txt

Indigo-PC-2.3.0/indigo.exe

advapi32

gdi32

imm32

kernel32

msvcrt

ole32

oleaut32

setupapi

shell32

user32

version

winhttp

winmm

generic