3b5661115f1de10d8775648d52c2fcdceaf6b5971e2d32302ce0d853ba6fda88

General

Target
3b5661115f1de10d8775648d52c2fcdceaf6b5971e2d32302ce0d853ba6fda88
Size 173KB
Sample230823-1tk41afg88
SHA256 3b5661115f1de10d8775648d52c2fcdceaf6b5971e2d32302ce0d853ba6fda88
MD5 876b393abc4ff051bf388f9a47ed9e97
SHA1 f0053298a38b853b9fbfb0026ab81955c905b042
SHA512 19752e482af1f2671949205f622ce7c19aa0d475be7e2bfdf2ab333db362c4c4c15d8d280b11d1f9c5e9ef3d0a8645c3d9be9db0996a6cde76152237ea505b9e
SSDEEP 3072:Jlu1jWsmGYXcux01ncJEnq9mfeTZ8kn88WiOKpO+78290:s1YXcux01cuq9mfAZj5WiOKpz7N
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b5661115f1de10d8775648d52c2fcdceaf6b5971e2d32302ce0d853ba6fda88

File Explorer

3b5661115f1de10d8775648d52c2fcdceaf6b5971e2d32302ce0d853ba6fda88

.dll 173KB

3b5661115f1de10d8775648d52c2fcdceaf6b5971e2d32302ce0d853ba6fda88

IMPHASH af7590ae8437d5433444c367931af8c2
SHA256 3b5661115f1de10d8775648d52c2fcdceaf6b5971e2d32302ce0d853ba6fda88
MD5 876b393abc4ff051bf388f9a47ed9e97
SHA1 f0053298a38b853b9fbfb0026ab81955c905b042
SHA512 19752e482af1f2671949205f622ce7c19aa0d475be7e2bfdf2ab333db362c4c4c15d8d280b11d1f9c5e9ef3d0a8645c3d9be9db0996a6cde76152237ea505b9e
SSDEEP 3072:Jlu1jWsmGYXcux01ncJEnq9mfeTZ8kn88WiOKpO+78290:s1YXcux01cuq9mfAZj5WiOKpz7N
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

133359

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetTickCount Sleep GetModuleFileNameA GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedCompareExchange InterlockedExchange TerminateThread WaitForSingleObject SetEvent CloseHandle CreateEventW LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection

ws2_32

bind socket WSAStartup closesocket WSACleanup listen inet_addr htons recv send accept

msvcr90

__clean_type_info_names_internal _except_handler4_common ?_type_info_dtor_internal_method@type_info@@QAEXXZ _crt_debugger_hook __CppXcptFilter _adjust_fdiv _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt ?terminate@@YAXXZ _decode_pointer _onexit _lock _encode_pointer __dllonexit _unlock _beginthreadex strpbrk sprintf_s malloc free sscanf memmove_s _purecall rand srand perror atof isgraph _itoa _time64 atoi _atodbl strchr strstr sprintf tolower strcpy_s ??_U@YAPAXI@Z ??_V@YAXPAX@Z ?what@exception@std@@UBEPBDXZ _invalid_parameter_noinfo ??2@YAPAXI@Z ??0exception@std@@QAE@ABV01@@Z ??0exception@std@@QAE@XZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??3@YAXPAX@Z memset memcpy __CxxFrameHandler3 _CxxThrowException

msvcp90

?length@?$char_traits@D@std@@SAIPBD@Z ?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z ?eof@?$char_traits@D@std@@SAHXZ ?good@ios_base@std@@QBE_NXZ ?flags@ios_base@std@@QBEHXZ ?setf@ios_base@std@@QAEHH@Z ?setf@ios_base@std@@QAEHHH@Z ?width@ios_base@std@@QBEHXZ ?width@ios_base@std@@QAEHH@Z ??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z ?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z ?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z ?uncaught_exception@std@@YA_NXZ ?setw@std@@YA?AU?$_Smanip@H@1@H@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z ?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z ?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z ?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z ?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z ?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z

Sharing

General

Malware Config

Signatures

File Explorer

3b5661115f1de10d8775648d52c2fcdceaf6b5971e2d32302ce0d853ba6fda88

kernel32

ws2_32

msvcr90

msvcp90