28761f0198685ead6580216f172dedf7

Sharing

Copy URL Twitter E-mail

General

Target
28761f0198685ead6580216f172dedf7
Size 32KB
Sample231231-e85ajafbg2
SHA256 9237fe873119d015e73057c0ec76242b44fe8ac9eaac25d6158000a9f74e200f
MD5 28761f0198685ead6580216f172dedf7
SHA1 50a7f73e1a54808f06c7e20497e7635a10db6012
SHA512 75d5902160ff5d2a852980562bf9016cdbd4310d288628d5bf2582617d4d7a1bb750cba511ef2d6eef720b92ec889709694adb0702c2f4f90e039a5522ed13f9
SSDEEP 768:u2Pr8feR1Geasryxdy7pF6ozhZflIRv1qqm:u2Pr8feCezB7p8gDNIRNqv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28761f0198685ead6580216f172dedf7

File Explorer

28761f0198685ead6580216f172dedf7

.dll 32KB

28761f0198685ead6580216f172dedf7

IMPHASH 8f7a7299c200579e0946338510850bf9
SHA256 9237fe873119d015e73057c0ec76242b44fe8ac9eaac25d6158000a9f74e200f
MD5 28761f0198685ead6580216f172dedf7
SHA1 50a7f73e1a54808f06c7e20497e7635a10db6012
SHA512 75d5902160ff5d2a852980562bf9016cdbd4310d288628d5bf2582617d4d7a1bb750cba511ef2d6eef720b92ec889709694adb0702c2f4f90e039a5522ed13f9
SSDEEP 768:u2Pr8feR1Geasryxdy7pF6ozhZflIRv1qqm:u2Pr8feCezB7p8gDNIRNqv
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

WaitForSingleObject ReadFile GetFileSize SetFilePointer GetLastError CreateEventA GetModuleFileNameA GetTempPathA GetWindowsDirectoryA CreateThread SetFileAttributesA Sleep GetSystemDirectoryA MultiByteToWideChar DeleteFileA GlobalLock CreateFileA WriteFile GlobalUnlock GlobalFree CloseHandle LoadLibraryA GetProcAddress GetModuleHandleA GlobalAlloc VirtualProtect GetCommandLineA ExitProcess

user32

GetClientRect CallWindowProcA GetClassNameA SetWindowLongA RegisterShellHookWindow RegisterWindowMessageA EnumWindows GetDesktopWindow wsprintfA GetWindowRect ReleaseDC GetKeyboardState MapVirtualKeyA GetWindowTextA ToAscii GetParent GetWindowThreadProcessId GetDC

gdi32

CreateDCA GetDeviceCaps DeleteDC GetObjectA GetStockObject DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetDIBits RealizePalette SelectPalette

gdiplus

GdipDisposeImage GdipLoadImageFromFile GdiplusStartup GdipGetImageEncoders GdipGetImageEncodersSize GdipFree GdipAlloc GdipCloneImage GdiplusShutdown GdipSaveImageToFile

msvcp60

??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ

ws2_32

connect htons gethostbyname inet_ntoa WSAStartup inet_addr WSACleanup send recv socket closesocket

wininet

InternetCloseHandle InternetReadFile InternetOpenUrlA InternetOpenA

msvcrt

strrchr strcat _access memset strchr atoi strncpy abs malloc wcscmp ??2@YAPAXI@Z free __dllonexit _onexit _initterm _adjust_fdiv _getpid _stricmp _strlwr _strrev __CxxFrameHandler memcpy strcmp strstr sprintf strcpy strlen

netapi32

Netbios

Sharing

General

Malware Config

Signatures

File Explorer

28761f0198685ead6580216f172dedf7

kernel32

user32

gdi32

gdiplus

msvcp60

ws2_32

wininet

msvcrt

netapi32

generic