2552f71685c4bd3379ebc4f971bf26c6

General

Target
2552f71685c4bd3379ebc4f971bf26c6
Size 937KB
Sample231231-decsracafl
SHA256 612f74d0a1f2f90a5a4ae11889755ea68656967cf0401e15d9c375ddcfb1d9e7
MD5 2552f71685c4bd3379ebc4f971bf26c6
SHA1 c610f0d02412a6e4f34c83ec293e737d0579c407
SHA512 3ca8e82cd62f1d1bbc1ae243c0e801e71bf4b1a7ed1d3a2eaaa0c0b30150e4d59957361f0d17c810b077657d484b63d0b878bea957662da83fa29ed39a5c7693
SSDEEP 12288:XNCXFv5G77xLH0PpGzHcHDN2gt2FbSe7ABgnjpTDGAmWjgU:E1h02sz8jN25kegGjtBJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2552f71685c4bd3379ebc4f971bf26c6

File Explorer

2552f71685c4bd3379ebc4f971bf26c6

.dll 937KB

2552f71685c4bd3379ebc4f971bf26c6

IMPHASH f1e7a11342f226904873ee64e0b2d075
SHA256 612f74d0a1f2f90a5a4ae11889755ea68656967cf0401e15d9c375ddcfb1d9e7
MD5 2552f71685c4bd3379ebc4f971bf26c6
SHA1 c610f0d02412a6e4f34c83ec293e737d0579c407
SHA512 3ca8e82cd62f1d1bbc1ae243c0e801e71bf4b1a7ed1d3a2eaaa0c0b30150e4d59957361f0d17c810b077657d484b63d0b878bea957662da83fa29ed39a5c7693
SSDEEP 12288:XNCXFv5G77xLH0PpGzHcHDN2gt2FbSe7ABgnjpTDGAmWjgU:E1h02sz8jN25kegGjtBJ
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

683348

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetUserDefaultLangID GetUserDefaultUILanguage UnregisterApplicationRecoveryCallback GetSystemDefaultLangID GetACP GetCommandLineA GetTickCount64 GetLastError GetCurrentProcessorNumber GetEnvironmentStringsW IsDebuggerPresent GetLogicalDrives GetLargePageMinimum IsSystemResumeAutomatic GetCommandLineW UnregisterApplicationRestart WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers SetStdHandle HeapReAlloc GetThreadUILanguage AreFileApisANSI HeapSize GetStringTypeW InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer GetCurrentProcess TerminateProcess ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte FreeEnvironmentStringsW LCMapStringW GetProcessHeap GetStdHandle GetFileType

user32

GetProcessWindowStation GetCursor AnyPopup InSendMessage GetCapture GetMenuCheckMarkDimensions CloseClipboard EmptyClipboard CountClipboardFormats IsProcessDPIAware GetClipboardSequenceNumber GetDesktopWindow

gdi32

GdiFlush

ole32

CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

2552f71685c4bd3379ebc4f971bf26c6

kernel32

user32

gdi32

ole32

generic