fe362418c16254e83c57a6f40bc3a35deb66666311135a48066a09ca151ff835

Sharing

Copy URL Twitter E-mail

General

Target
fe362418c16254e83c57a6f40bc3a35deb66666311135a48066a09ca151ff835
Size 668KB
Sample231014-d67gfaeb3s
SHA256 fe362418c16254e83c57a6f40bc3a35deb66666311135a48066a09ca151ff835
MD5 2646a4cb87b8cb6d4625409601dd4135
SHA1 6e65531cbe42ce2cdab7301a874e26dd5f37a2ac
SHA512 3e4d070d235b40f35559d6a827125d534a18b3c11a049710cab0e42a88c91423816af6d2e3e504aa5e74935c204bb03e7af8b280fc67af6aa7e08ce371c999cc
SSDEEP 12288:gtq7iD0/zSMr/u997Nfe9Jrz45oAUx+yEozxK0ZP4Vs/WG1lON:gCiD0/znr/w9pfeTrM5oAUkdQY+P4V
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe362418c16254e83c57a6f40bc3a35deb66666311135a48066a09ca151ff835

File Explorer

fe362418c16254e83c57a6f40bc3a35deb66666311135a48066a09ca151ff835

.dll 668KB

fe362418c16254e83c57a6f40bc3a35deb66666311135a48066a09ca151ff835

IMPHASH cf0605c83cbe2cf9e706f547cbaf0708
SHA256 fe362418c16254e83c57a6f40bc3a35deb66666311135a48066a09ca151ff835
MD5 2646a4cb87b8cb6d4625409601dd4135
SHA1 6e65531cbe42ce2cdab7301a874e26dd5f37a2ac
SHA512 3e4d070d235b40f35559d6a827125d534a18b3c11a049710cab0e42a88c91423816af6d2e3e504aa5e74935c204bb03e7af8b280fc67af6aa7e08ce371c999cc
SSDEEP 12288:gtq7iD0/zSMr/u997Nfe9Jrz45oAUx+yEozxK0ZP4Vs/WG1lON:gCiD0/znr/w9pfeTrM5oAUkdQY+P4V
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

93148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

gdiplus

GdipDrawImageI GdipDisposeImage GdipFree GdipDrawLineI GdipDeletePen GdipCreatePen1 GdipDrawString GdipDeleteFont GdipCreateFont GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipFillRectangleI GdipCreateSolidFill GdipCloneBrush GdipDeleteBrush GdipCreateLineBrushFromRectI GdipGetImageGraphicsContext GdipCreateBitmapFromScan0 GdipGetVisibleClipBoundsI GdipDeleteGraphics GdipCreateFromHDC GdiplusStartup GdipCloneImage GdipAlloc

kernel32

SetStdHandle SetFilePointer GetLocaleInfoW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetTimeFormatA GetDateFormatA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA HeapSize GetTickCount QueryPerformanceCounter CreateThread GetCommandLineW GetVersionExA CreateToolhelp32Snapshot GetLastError GetCurrentProcessId Process32First Process32Next CloseHandle GetModuleHandleW GetProcAddress CreateMutexA WaitForSingleObject ReleaseMutex SetThreadExecutionState DeviceIoControl FormatMessageW Sleep CreateFileW GetFileInformationByHandle FlushFileBuffers GetSystemTime SystemTimeToFileTime WriteConsoleA FindNextFileW FindClose GetSystemTimeAsFileTime GetFileAttributesExW GetCurrentProcess GetVolumePathNameW GetVolumeNameForVolumeMountPointW GetDiskFreeSpaceExW GetDriveTypeW GetVolumeInformationW FindFirstVolumeMountPointW FindNextVolumeMountPointW FindVolumeMountPointClose GetLogicalDriveStringsW GetModuleFileNameW GetShortPathNameW GetLongPathNameW DosDateTimeToFileTime LocalFileTimeToFileTime ReadFile GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount GetConsoleMode GetConsoleCP MultiByteToWideChar HeapDestroy HeapCreate HeapSetInformation InitializeCriticalSectionAndSpinCount LoadLibraryA FreeLibrary SetConsoleCtrlHandler RtlUnwindEx WriteConsoleW GetConsoleOutputCP SetEndOfFile SetEnvironmentVariableA GetProcessHeap CreateFileA CompareStringA CompareStringW FindFirstFileW EnterCriticalSection FatalAppExitA LeaveCriticalSection DeleteCriticalSection ExitProcess GetTimeZoneInformation HeapFree HeapAlloc HeapReAlloc DeleteFileW GetCurrentThreadId FlsSetValue GetCommandLineA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RaiseException RtlPcToFileHeader WideCharToMultiByte GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer TlsAlloc FlsGetValue FlsFree SetLastError GetCurrentThread FlsAlloc WriteFile GetStdHandle GetModuleFileNameA

user32

LoadIconA TranslateMessage DefWindowProcA EndPaint BeginPaint InvalidateRect PostQuitMessage DispatchMessageA LoadCursorA GetMessageA SetTimer UpdateWindow ShowWindow CreateWindowExW MessageBoxW RegisterClassExA LoadStringA

gdi32

GetStockObject

advapi32

LookupPrivilegeValueA RegCloseKey RegQueryValueExW RegCreateKeyExW AdjustTokenPrivileges OpenProcessToken

shell32

CommandLineToArgvW

ole32

CoLoadLibrary