55f416ef7d4ea84515f8cda1ebecd20650c1d43203c9efc723a96a6626fe4e5c

Sharing

Copy URL Twitter E-mail

General

Target
55f416ef7d4ea84515f8cda1ebecd20650c1d43203c9efc723a96a6626fe4e5c
Size 2.9MB
Sample261110-fr2nrazsct
SHA256 55f416ef7d4ea84515f8cda1ebecd20650c1d43203c9efc723a96a6626fe4e5c
MD5 099b7ded3bcc8b2e702fa613cb1abadf
SHA1 32d486807bf4d201d02e679477d94e7560c14c34
SHA512 5cd970f746d5a151178f9b7a4a656bb57e168794c35a7bb58183714e3a6b325be0097c5291e79305c12163e16b19fe84b98ffe397a031d81f7dfeb447339a04f
SSDEEP 49152:EEqMgvPFmO0xr3LziRmCPmLSo5yUsSdHVdVojlTBJ+s8KuqGaX0ToIBAUZLYJQrQ:CMgvNmO0R3LziMsmLSo5yUr1dVojWJBc
TLSH
T14AE5BF02F7C1C872E553213005BB2336A635FE761B658B97F3A4FD795DB22E086A520E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55f416ef7d4ea84515f8cda1ebecd20650c1d43203c9efc723a96a6626fe4e5c

File Explorer

55f416ef7d4ea84515f8cda1ebecd20650c1d43203c9efc723a96a6626fe4e5c

.exe 2.9MB

55f416ef7d4ea84515f8cda1ebecd20650c1d43203c9efc723a96a6626fe4e5c

IMPHASH 544b19a40ceb156b5ace0787c59c1fef
SHA256 55f416ef7d4ea84515f8cda1ebecd20650c1d43203c9efc723a96a6626fe4e5c
MD5 099b7ded3bcc8b2e702fa613cb1abadf
SHA1 32d486807bf4d201d02e679477d94e7560c14c34
SHA512 5cd970f746d5a151178f9b7a4a656bb57e168794c35a7bb58183714e3a6b325be0097c5291e79305c12163e16b19fe84b98ffe397a031d81f7dfeb447339a04f
SSDEEP 49152:EEqMgvPFmO0xr3LziRmCPmLSo5yUsSdHVdVojlTBJ+s8KuqGaX0ToIBAUZLYJQrQ:CMgvNmO0R3LziMsmLSo5yUr1dVojWJBc
TLSH
T14AE5BF02F7C1C872E553213005BB2336A635FE761B658B97F3A4FD795DB22E086A520E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1098200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvfw32

DrawDibDraw

avifil32

AVIStreamGetFrame AVIStreamInfoA

winmm

midiStreamRestart PlaySoundA waveOutUnprepareHeader waveOutPrepareHeader midiStreamStop midiOutReset midiStreamClose waveOutWrite waveOutPause waveOutReset waveOutClose midiStreamOut midiOutPrepareHeader midiStreamProperty midiStreamOpen midiOutUnprepareHeader waveOutOpen waveOutGetNumDevs

ws2_32

inet_ntoa WSAStartup WSACleanup send closesocket WSAAsyncSelect recvfrom ioctlsocket recv getpeername accept select

rasapi32

RasGetConnectStatusA RasHangUpA

kernel32

SetLastError GetTimeZoneInformation LoadLibraryExA FileTimeToSystemTime Beep InterlockedIncrement InterlockedDecrement LocalFree FormatMessageA FileTimeToLocalFileTime lstrcpynA DuplicateHandle FlushFileBuffers LockFile UnlockFile SetEndOfFile GetThreadLocale lstrcmpiA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA lstrcmpA LocalAlloc TlsAlloc GlobalHandle TlsFree TlsSetValue LocalReAlloc TlsGetValue GetFileTime GetCurrentThread GlobalFlags SetErrorMode GetProcessVersion GetCPInfo GetOEMCP GetStartupInfoA RtlUnwind GetSystemTime GetLocalTime RaiseException HeapSize GetACP SetStdHandle GetFileType UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree SetEnvironmentVariableA LCMapStringA LCMapStringW VirtualAlloc IsBadWritePtr GetStringTypeA GetStringTypeW SetUnhandledExceptionFilter CompareStringA CompareStringW IsBadReadPtr IsBadCodePtr GetSystemInfo IsProcessorFeaturePresent TerminateProcess GetFileSize SetFilePointer GetCurrentProcess GetWindowsDirectoryA GetSystemDirectoryA CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA WriteFile WaitForMultipleObjects CreateFileA SetEvent FindResourceA LoadResource LockResource ReadFile lstrlenW RemoveDirectoryA GetModuleFileNameA GetCurrentProcessId GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA lstrlenA WinExec lstrcpyA FindNextFileA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc GetUserDefaultLCID MultiByteToWideChar WideCharToMultiByte GetFullPathNameA FreeLibrary LoadLibraryA GetLastError GetVersionExA WritePrivateProfileStringA GetPrivateProfileStringA CreateThread CreateEventA Sleep GlobalAlloc GlobalLock GlobalUnlock GetTempPathA FindFirstFileA FindClose GetFileAttributesA DeleteFileA CreateDirectoryA SetCurrentDirectoryA GetVolumeInformationA GetModuleHandleA GetProcAddress MulDiv GetCommandLineA GetTickCount WaitForSingleObject CloseHandle InterlockedExchange GetVersion

user32

CharNextA SetWindowContextHelpId MapDialogRect GetSysColorBrush GetNextDlgGroupItem PostThreadMessageA IsDialogMessageA ScrollWindowEx SendDlgItemMessageA MapWindowPoints AdjustWindowRectEx GetScrollPos RegisterClassA CreateWindowExA GetClassLongA RemovePropA GetMessageTime GetLastActivePopup RegisterWindowMessageA GetWindowPlacement EndDialog CreateDialogIndirectParamA DestroyWindow EndPaint BeginPaint CharUpperA GetWindowTextLengthA CreateIconIndirect GetIconInfo CopyIcon LoadStringA FindWindowExA GetDlgItem GetClassNameA GetDesktopWindow GetForegroundWindow GetWindowTextA SetWindowTextA GetMenuItemCount GetMenuItemID GetMenuStringA GetMenuState GetTabbedTextExtentA GrayStringA TabbedTextOutA WindowFromDC EnumChildWindows GetWindowDC UnhookWindowsHookEx CallNextHookEx SetWindowsHookExA GetPropA MoveWindow CallWindowProcA SetPropA DrawTextA GetCursor DrawStateA FrameRect GetNextDlgTabItem LoadIconA TranslateMessage DrawFrameControl DrawEdge DrawFocusRect WindowFromPoint GetMessageA SetRectEmpty RegisterClipboardFormatA CreateIconFromResourceEx CreateIconFromResource DrawIconEx CreatePopupMenu AppendMenuA ModifyMenuA CreateMenu CreateAcceleratorTableA GetDlgCtrlID GetSubMenu EnableMenuItem ClientToScreen EnumDisplaySettingsA LoadImageA SystemParametersInfoA ShowWindow TranslateAcceleratorA GetKeyState CopyAcceleratorTableA PostQuitMessage GetWindowThreadProcessId IsWindowEnabled EnumWindows IsZoomed GetClassInfoA DefWindowProcA GetSystemMenu DeleteMenu GetMenu SetMenu PeekMessageA IsIconic SetFocus GetActiveWindow GetWindow DestroyAcceleratorTable SetWindowRgn GetMessagePos ScreenToClient ChildWindowFromPointEx CopyRect LoadBitmapA WinHelpA KillTimer SetTimer GetCapture SetCapture GetScrollRange SetScrollPos SetRect InflateRect IntersectRect DestroyIcon PtInRect OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA GetSysColor SetActiveWindow SetCursorPos LoadCursorA SetCursor GetDC FillRect IsRectEmpty ReleaseDC IsChild TrackPopupMenu DestroyMenu SetForegroundWindow GetWindowRect EqualRect UpdateWindow ValidateRect InvalidateRect GetClientRect GetFocus GetParent GetTopWindow PostMessageA IsWindow SetParent DestroyCursor SendMessageA SetWindowPos MessageBeep MessageBoxA ReleaseCapture GetCursorPos GetSystemMetrics EmptyClipboard SetClipboardData OpenClipboard GetClipboardData CloseClipboard wsprintfA GetMenuCheckMarkDimensions SetMenuItemBitmaps DispatchMessageA CheckMenuItem SetScrollRange UnregisterClassA

gdi32

CombineRgn CreateRectRgn PatBlt CreatePen SelectObject CreatePatternBrush CreateBitmap CreateBrushIndirect FillRgn CreateDCA CreateCompatibleBitmap GetPolyFillMode GetStretchBltMode GetROP2 GetBkColor GetBkMode GetTextColor CreateRoundRectRgn CreateEllipticRgn PathToRegion EndPath BeginPath GetWindowOrgEx GetViewportOrgEx GetWindowExtEx GetDIBits RealizePalette SelectPalette FrameRgn GetTextMetricsA LineTo MoveToEx SetPolyFillMode SetROP2 SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx GetClipBox ExcludeClipRect CreateSolidBrush ExtSelectClipRgn GetViewportExtEx GetMapMode SetWindowOrgEx SetDIBitsToDevice SetTextColor SetBkMode TextOutA SetBkColor CreateRectRgnIndirect CreateDIBSection SetPixel ExtCreateRegion SetStretchBltMode GetClipRgn CreatePolygonRgn SelectClipRgn DeleteObject CreateDIBitmap GetSystemPaletteEntries CreatePalette StretchBlt Escape ExtTextOutA RectVisible SetPixelV Ellipse Rectangle LPtoDP DPtoLP GetCurrentObject RoundRect PtVisible CreatePenIndirect RestoreDC CreateFontIndirectA GetStockObject GetObjectA EndPage EndDoc DeleteDC StartDocA StartPage BitBlt GetPixel GetTextExtentPoint32A CreateCompatibleDC OffsetRgn GetDeviceCaps SaveDC

msimg32

GradientFill

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

comdlg32

ChooseColorA ChooseFontA GetOpenFileNameA GetSaveFileNameA GetFileTitleA

advapi32

RegCreateKeyExA RegOpenKeyA RegQueryValueA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

SHGetSpecialFolderPathA ShellExecuteA Shell_NotifyIconA

ole32

CoGetClassObject CoTaskMemAlloc CLSIDFromProgID OleInitialize OleUninitialize CLSIDFromString CoCreateInstance OleRun StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoFreeUnusedLibraries CoRegisterMessageFilter CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard CoTaskMemFree

oleaut32

VariantCopy VariantCopyInd SafeArrayGetElement SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound VariantChangeType VariantTimeToSystemTime SysStringLen SysAllocStringLen VariantInit SysAllocString SafeArrayCreate RegisterTypeLi LHashValOfNameSys VariantClear OleCreateFontIndirect UnRegisterTypeLi SysFreeString SafeArrayGetElemsize SysAllocStringByteLen LoadTypeLi

comctl32

_TrackMouseEvent ImageList_GetImageInfo ImageList_SetBkColor ImageList_Draw ord17 ImageList_GetImageCount ImageList_GetIcon ImageList_AddMasked ImageList_Destroy ImageList_Create ImageList_Read ImageList_DrawIndirect ImageList_Duplicate

oledlg

ord8

wininet

InternetCanonicalizeUrlA InternetCrackUrlA HttpOpenRequestA HttpSendRequestA HttpQueryInfoA InternetReadFile InternetConnectA InternetSetOptionA InternetOpenA InternetCloseHandle

generic

count=9, id=11, version=8047,

count=6, id=10, version=8047,

count=5, id=12, version=7291,

count=45, id=19, version=8022,

count=1, id=28, version=9178,

count=6, id=18, version=8444,

count=117, id=29, version=9178,

count=9, id=95, version=2067,

count=2, id=93, version=2179,

count=49, id=14, version=7299,

count=771, id=1, productName=Unmarked objects,

count=35, id=19, version=8034,

count=228, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=137, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=140, id=11, productName=VS98 (6.0) build 8168, version=8168,

count=51, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=124, productName=Unmarked objects (old),

count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,