36625b5b207ed83afe5312740e898eeae86aef18d0c476528c58628981ede218

Sharing

Copy URL Twitter E-mail

General

Target
36625b5b207ed83afe5312740e898eeae86aef18d0c476528c58628981ede218
Size 2.6MB
Sample261113-vjammadz4l
SHA256 36625b5b207ed83afe5312740e898eeae86aef18d0c476528c58628981ede218
MD5 df9fbca507e441fdcf9485a0c8377592
SHA1 f13b51630c4fde672d3b9bacf61f2ae85e696b9b
SHA512 38732b1b233a96d7bb9d77f7491e8eb8d0aeff912db196a531ac66b5662a4d256d007d60d7aa85ae633a33b779dece24c5abfe56996c57bdb25bb1fbc2474844
SSDEEP 49152:arJmzi5KiAzaEtiMDy4m5mxMTYdfJcyqhjLj:arkel+nm43jfJ9qh
TLSH
T152C55A1162E98036F1731F7A5D7ADA84A83A7E702E34D55F3FA85B0C0E79F41A824367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36625b5b207ed83afe5312740e898eeae86aef18d0c476528c58628981ede218

File Explorer

36625b5b207ed83afe5312740e898eeae86aef18d0c476528c58628981ede218

.dll 2.6MB

36625b5b207ed83afe5312740e898eeae86aef18d0c476528c58628981ede218

IMPHASH 512a0c3a7e8b24f3222dc4ee19962080
SHA256 36625b5b207ed83afe5312740e898eeae86aef18d0c476528c58628981ede218
MD5 df9fbca507e441fdcf9485a0c8377592
SHA1 f13b51630c4fde672d3b9bacf61f2ae85e696b9b
SHA512 38732b1b233a96d7bb9d77f7491e8eb8d0aeff912db196a531ac66b5662a4d256d007d60d7aa85ae633a33b779dece24c5abfe56996c57bdb25bb1fbc2474844
SSDEEP 49152:arJmzi5KiAzaEtiMDy4m5mxMTYdfJcyqhjLj:arkel+nm43jfJ9qh
TLSH
T152C55A1162E98036F1731F7A5D7ADA84A83A7E702E34D55F3FA85B0C0E79F41A824367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2042880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen CreateErrorInfo GetErrorInfo SetErrorInfo GetActiveObject SysFreeString SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExW RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegFlushKey RegEnumKeyExW RegCreateKeyExW RegCloseKey

user32

GetKeyboardType LoadStringW MessageBoxA CharNextW CreateWindowExW WindowFromPoint WaitMessage UpdateWindow UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetWindowLongW SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursor SetClassLongW SetCapture SetActiveWindow SendMessageA SendMessageW ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PostQuitMessage PostMessageW PeekMessageA PeekMessageW OffsetRect MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MapWindowPoints MapVirtualKeyW LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsClipboardFormatAvailable IsChild InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowLongW GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessagePos GetMessageW GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassNameW GetClassLongW GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EqualRect EnumWindows EnumThreadWindows EnumClipboardFormats EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon ClientToScreen ChildWindowFromPoint CheckMenuItem CharUpperBuffW CharToOemW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BeginPaint AdjustWindowRectEx ActivateKeyboardLayout

kernel32

GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle CloseHandle TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc lstrcpyW lstrcmpW WriteProcessMemory WritePrivateProfileStringW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualProtect VirtualAlloc TryEnterCriticalSection SwitchToThread Sleep SizeofResource SignalObjectAndWait SetThreadLocale SetLastError SetFilePointer SetFileAttributesW SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadProcessMemory ReadFile RaiseException QueryPerformanceFrequency QueryPerformanceCounter OutputDebugStringW MultiByteToWideChar MulDiv LockResource LoadResource LoadLibraryW LeaveCriticalSection IsValidLocale IsBadWritePtr IsBadReadPtr InitializeCriticalSection HeapDestroy HeapCreate GlobalUnlock GlobalSize GlobalHandle GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetVersion GetTickCount GetThreadLocale GetTempPathW GetSystemTimeAsFileTime GetSystemInfo GetSystemDefaultLangID GetSystemDefaultLCID GetStdHandle GetProcAddress GetPrivateProfileStringW GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileSize GetFileAttributesW GetExitCodeThread GetExitCodeProcess GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetComputerNameW GetCPInfo FreeResource InterlockedIncrement InterlockedExchangeAdd InterlockedExchange InterlockedDecrement InterlockedCompareExchange FreeLibrary FormatMessageW FlushInstructionCache FindResourceW FindNextFileW FindFirstFileW FindClose FileTimeToLocalFileTime FileTimeToDosDateTime EnumCalendarInfoA EnterCriticalSection DeleteFileW DeleteCriticalSection CreateThread CreateProcessW CreateFileW CreateEventW CreateDirectoryW CopyFileW CompareStringA CompareStringW CloseHandle Sleep GetUserDefaultUILanguage

msimg32

TransparentBlt AlphaBlend

gdi32

UnrealizeObject StretchDIBits StretchBlt SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetEnhMetaFileBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SelectClipRgn SaveDC RestoreDC ResizePalette Rectangle RectVisible RealizePalette Polyline PlayEnhMetaFile PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsW GetTextExtentPoint32W GetTextExtentExPointW GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectType GetObjectW GetNearestPaletteIndex GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetCurrentObject GetClipBox GetBrushOrgEx GetBitmapBits GdiFlush FrameRgn ExtTextOutW ExcludeClipRect Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectW CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW BitBlt

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc ProgIDFromCLSID StringFromCLSID CoCreateInstance CoUninitialize CoInitialize IsEqualGUID

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawEx ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

wininet

InternetQueryOptionA

shell32

ShellExecuteExW ShellExecuteW SHGetFileInfoW SHGetSpecialFolderPathW SHGetSpecialFolderLocation SHGetPathFromIDListW

wsock32

send

winmm

timeGetTime

webres

WebUIResourceData WebUIResourceUnregister WebUIResourceRegister

ChangeRect CreateBannerA CreateBannerC CreateBannerF CreateBannerG CreateBannerNC CreateBanner_8_Summer DestroyBanner EnableClickBanner IsNeedShowBottomBtn IsNeedShowTopIcon ShowBanner UpdateFont UpdateLang UpdateSkin _testButtonTxtExists _testLoremipsum _testLoremipsumEx _testOpenDuckDuckGo db10_TopIConHint_NC db10_TopIco_Click_NC db10_TopIco_IsNeedShow_NC db7_B5_BottomBtnHint_6 db7_B5_BottomBtnHint_7 db7_B5_BottomBtn_Click db7_B5_TopIConHint_6 db7_B5_TopIConHint_7 db7_B5_TopIcon_Click db8_B0_TopIConHint_0 db8_B0_TopIco_Click_0 db8_B0_TopIco_IsNeedShow_0 db8_B2_TopIConHint_2 db8_B2_TopIco_Click_2 db8_B2_TopIco_IsNeedShow_2 db8_B5_TopIConHint_5 db8_B5_TopIco_Click_5 db8_B5_TopIco_IsNeedShow_5 db8_IconCheck_de db8_IconCheck_dk db8_IconCheck_en db8_IconCheck_es db8_IconCheck_fr db8_IconCheck_it db8_IconCheck_nl db8_IconCheck_pl db8_IconCheck_pt db8_IconCheck_ru db8_IconCheck_sv db9_B0_TopIConHint_HW db9_B0_TopIco_Click_BF_r1 db9_B0_TopIco_Click_BF_r2 db9_B0_TopIco_Click_BF_r3 db9_B0_TopIco_Click_CM_r1 db9_B0_TopIco_Click_CM_r2 db9_B0_TopIco_Click_CM_r3 db9_B0_TopIco_Click_HW db9_B0_TopIco_IsNeedShow_BF_r1 db9_B0_TopIco_IsNeedShow_BF_r2 db9_B0_TopIco_IsNeedShow_BF_r3 db9_B0_TopIco_IsNeedShow_CM_r1 db9_B0_TopIco_IsNeedShow_CM_r2 db9_B0_TopIco_IsNeedShow_CM_r3 db9_B0_TopIco_IsNeedShow_HW db9_TopIConHint_DPM db9_TopIConHint_ECOM db9_TopIConHint_IDR db9_TopIConHint_ISR db9_TopIConHint_IVB db9_TopIConHint_PDF db9_TopIConHint_RPC db9_TopIConHint_Summer db9_TopIco_Click_DPM db9_TopIco_Click_ECOM db9_TopIco_Click_IDR db9_TopIco_Click_ISR db9_TopIco_Click_IVB db9_TopIco_Click_PDF db9_TopIco_Click_RPC db9_TopIco_Click_Summer db9_TopIco_IsNeedShow_DPM db9_TopIco_IsNeedShow_ECOM db9_TopIco_IsNeedShow_IDR db9_TopIco_IsNeedShow_ISR db9_TopIco_IsNeedShow_IVB db9_TopIco_IsNeedShow_PDF db9_TopIco_IsNeedShow_RPC db9_TopIco_IsNeedShow_Summer

Name

.text

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

70KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

221KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

117KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

433KB

Virtual Size

433KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

36625b5b207ed83afe5312740e898eeae86aef18d0c476528c58628981ede218

oleaut32

advapi32

user32

kernel32

msimg32

gdi32

version

ole32

comctl32

wininet

shell32

wsock32

winmm

webres

generic