19ef21e4c7480c3a8fb2fc710c2d94dc

General

Target
19ef21e4c7480c3a8fb2fc710c2d94dc
Size 956KB
Sample231230-qn89jaggap
SHA256 65029006778861f2b3fb456a1747584bc9e5d6813b9970f71672f92d7b8ad4dc
MD5 19ef21e4c7480c3a8fb2fc710c2d94dc
SHA1 3f048f17286c3f5ae1f8bb703c2a7eee5a901513
SHA512 5a553dfdc687618c6cc67e9d78ce7267d4a8d8a801008e4f35d52f7d51a4b41094bd05f2406eecd30bd89e7d4d501be104fdb2ef5dda2ab1f8ff96bd0a69cc8a
SSDEEP 12288:cgjcpLmq2lWk8gIFjJyslu0JULFwqrBEtyJIkGkL1QBNeUxLW40T2eK:HjSGl1IFFJ00SBwqV914NroT2/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19ef21e4c7480c3a8fb2fc710c2d94dc

File Explorer

19ef21e4c7480c3a8fb2fc710c2d94dc

.dll 956KB

19ef21e4c7480c3a8fb2fc710c2d94dc

IMPHASH b926a1a2c9aca5b0795ac01f9d3118b9
SHA256 65029006778861f2b3fb456a1747584bc9e5d6813b9970f71672f92d7b8ad4dc
MD5 19ef21e4c7480c3a8fb2fc710c2d94dc
SHA1 3f048f17286c3f5ae1f8bb703c2a7eee5a901513
SHA512 5a553dfdc687618c6cc67e9d78ce7267d4a8d8a801008e4f35d52f7d51a4b41094bd05f2406eecd30bd89e7d4d501be104fdb2ef5dda2ab1f8ff96bd0a69cc8a
SSDEEP 12288:cgjcpLmq2lWk8gIFjJyslu0JULFwqrBEtyJIkGkL1QBNeUxLW40T2eK:HjSGl1IFFJ00SBwqV914NroT2/
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

704228

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetCommandLineW GetUserDefaultLangID GetUserDefaultUILanguage GetLargePageMinimum UnregisterApplicationRecoveryCallback IsSystemResumeAutomatic GetACP GetCommandLineA GetTickCount64 GetLastError GetThreadUILanguage GetCurrentProcessorNumber UnregisterApplicationRestart GetEnvironmentStringsW GetLogicalDrives GetSystemDefaultLangID WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers SetStdHandle HeapReAlloc IsDebuggerPresent AreFileApisANSI HeapSize GetStringTypeW InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer GetCurrentProcess TerminateProcess ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte FreeEnvironmentStringsW LCMapStringW GetProcessHeap GetStdHandle GetFileType

user32

GetProcessWindowStation InSendMessage IsProcessDPIAware GetCursor AnyPopup GetCapture GetMenuCheckMarkDimensions CloseClipboard EmptyClipboard CountClipboardFormats GetClipboardSequenceNumber GetDesktopWindow

gdi32

GdiFlush

ole32

CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

19ef21e4c7480c3a8fb2fc710c2d94dc

kernel32

user32

gdi32

ole32

generic