177f531d10e02f34c00d3105759b3031

Sharing

Copy URL Twitter E-mail

General

Target
177f531d10e02f34c00d3105759b3031
Size 146KB
Sample231224-2xf5wsadd2
SHA256 70765af4e62f53adabe0872f38df0c84f4809321e80f341874f9f6c093fa23b8
MD5 177f531d10e02f34c00d3105759b3031
SHA1 e5412118574df74fdf444c86df1ce2d0cc51d950
SHA512 b1c4395abb95746321d538a3d3b8a113411ba6a6790dfa5f1ece952165104bc1ae3b03d58eb8184e1ad94992b4e44dc1e44fce7fd03ec3c1976c539c69d3db33
SSDEEP 3072:s/inUh2LG3l1ygQ/fjoWuoBP6N1sZ9PlybGbdLrMvKYQJakH7:s/iUh2a11ygK+OQ499bdMvRC7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
177f531d10e02f34c00d3105759b3031

File Explorer

177f531d10e02f34c00d3105759b3031

.dll 146KB

177f531d10e02f34c00d3105759b3031

IMPHASH 4988b6196ab853c7110d94e05bf2d07d
SHA256 70765af4e62f53adabe0872f38df0c84f4809321e80f341874f9f6c093fa23b8
MD5 177f531d10e02f34c00d3105759b3031
SHA1 e5412118574df74fdf444c86df1ce2d0cc51d950
SHA512 b1c4395abb95746321d538a3d3b8a113411ba6a6790dfa5f1ece952165104bc1ae3b03d58eb8184e1ad94992b4e44dc1e44fce7fd03ec3c1976c539c69d3db33
SSDEEP 3072:s/inUh2LG3l1ygQ/fjoWuoBP6N1sZ9PlybGbdLrMvKYQJakH7:s/iUh2a11ygK+OQ499bdMvRC7
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

81717

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetProcAddress lstrcatW OpenProcess ProcessIdToSessionId CloseHandle TerminateProcess InterlockedIncrement InterlockedDecrement FlushFileBuffers CompareFileTime LoadLibraryA SetFilePointer SetEndOfFile WriteFile GetVersionExA GetCurrentProcess SetUnhandledExceptionFilter DebugBreak SwitchToThread LocalAlloc SetEvent ResetEvent DisableThreadLibraryCalls CreateProcessW InitializeCriticalSectionAndSpinCount CreateSemaphoreW InterlockedExchangeAdd ReleaseSemaphore LocalFree CreateEventW WaitForSingleObject GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA HeapSize HeapReAlloc VirtualAlloc GetCPInfo GetOEMCP GetACP HeapAlloc UnhandledExceptionFilter GetCommandLineA lstrcpyW GetFileAttributesW CreateThread OpenEventW VirtualFree lstrcmpW GetSystemDirectoryW lstrlenW InterlockedExchange Sleep InterlockedCompareExchange GetStartupInfoW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime VirtualProtect MultiByteToWideChar GetEnvironmentStringsW GetLastError WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA HeapFree HeapCreate HeapDestroy GetModuleFileNameA GetStartupInfoA GetFileType GetStdHandle RtlUnwind VirtualQuery ExitProcess GetModuleHandleA SetHandleCount GetSystemInfo

user32

PostMessageW SetActiveWindow SetTimer EnumWindows GetFocus SetForegroundWindow SendMessageW PeekMessageW MsgWaitForMultipleObjects EndDialog PostThreadMessageA DispatchMessageW TranslateMessage

advapi32

RegQueryValueExA RegOpenCurrentUser StartServiceW CreateProcessAsUserW ControlService CheckTokenMembership DuplicateToken DuplicateTokenEx OpenSCManagerW OpenServiceW CloseServiceHandle QueryServiceStatus RegOpenKeyExW RegQueryValueExW FreeSid AllocateAndInitializeSid GetUserNameW RegOpenKeyExA RegCloseKey

ole32

CoUninitialize CoInitializeEx CoCreateInstance CoTaskMemAlloc CLSIDFromProgID CoTaskMemFree CLSIDFromString CoGetClassObject

rpcrt4

RpcBindingSetAuthInfoExW RpcBindingFromStringBindingW RpcBindingFree

Sharing

General

Malware Config

Signatures

File Explorer

177f531d10e02f34c00d3105759b3031

kernel32

user32

advapi32

ole32

rpcrt4

generic