1ddaefddddf27148a66054aa4ae3f7e38ddc72daebd67b7aab040c7602dbb174

General

Target
1ddaefddddf27148a66054aa4ae3f7e38ddc72daebd67b7aab040c7602dbb174
Size 1.1MB
Sample240125-tanbpaaaf7
SHA256 1ddaefddddf27148a66054aa4ae3f7e38ddc72daebd67b7aab040c7602dbb174
MD5 fb91af68049f9a534b1a2d8e18f83074
SHA1 01c30a3be8bfe25d1abab4ed0e3baf1c837f7906
SHA512 ce5694c6f790c1f9bba434de6f948719f89794258e7739bd46aae042f543d8992b65326d421da9e5bd9449f3c544e2ffea0ae3338d2aeb1d6da9439662422f99
SSDEEP 24576:/GvCKwR6KEuxJ26k1Xo+oZKwzrUuOHswGl4GSkZ0ZbTuH:yCKwR6KEuxJ26kVo+bmrUuOMwGl4GSkf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ddaefddddf27148a66054aa4ae3f7e38ddc72daebd67b7aab040c7602dbb174

File Explorer

1ddaefddddf27148a66054aa4ae3f7e38ddc72daebd67b7aab040c7602dbb174

.dll 1.1MB

1ddaefddddf27148a66054aa4ae3f7e38ddc72daebd67b7aab040c7602dbb174

IMPHASH bc810e9de59a7783fc0d5ca884bf68a0
SHA256 1ddaefddddf27148a66054aa4ae3f7e38ddc72daebd67b7aab040c7602dbb174
MD5 fb91af68049f9a534b1a2d8e18f83074
SHA1 01c30a3be8bfe25d1abab4ed0e3baf1c837f7906
SHA512 ce5694c6f790c1f9bba434de6f948719f89794258e7739bd46aae042f543d8992b65326d421da9e5bd9449f3c544e2ffea0ae3338d2aeb1d6da9439662422f99
SSDEEP 24576:/GvCKwR6KEuxJ26k1Xo+oZKwzrUuOHswGl4GSkZ0ZbTuH:yCKwR6KEuxJ26kVo+bmrUuOMwGl4GSkf
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

943195

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

WideCharToMultiByte GetModuleHandleExA FreeLibrary GetModuleFileNameA GetSystemTimeAsFileTime FileTimeToSystemTime GetTimeZoneInformation GetProcAddress LoadLibraryA InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection DecodePointer IsDebuggerPresent IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetTickCount64 DisableThreadLibraryCalls EncodePointer

msvcp110

?_BADOFF@std@@3_JB ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?id@?$codecvt@DDH@std@@2V0locale@2@A ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?always_noconv@codecvt_base@std@@QBE_NXZ ??Bid@locale@std@@QAEIXZ ?_Orphan_all@_Container_base0@std@@QAEXXZ ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Syserror_map@std@@YAPBDH@Z ?_Winerror_map@std@@YAPBDH@Z

msvcr110

free realloc vsprintf_s ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABV01@@Z ceil _strtoi64 strtol fputc ??1bad_cast@std@@UAE@XZ ??0bad_cast@std@@QAE@PBD@Z ??0bad_cast@std@@QAE@ABV01@@Z _unlock_file ungetc fgetpos _fseeki64 fflush fgetc fsetpos setvbuf _lock_file memcpy_s fwrite fclose _time64 _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ ?terminate@@YAXXZ _vsnprintf _crt_debugger_hook __crtUnhandledException __crtTerminateProcess __CppXcptFilter _amsg_exit _malloc_crt _initterm _initterm_e _except_handler4_common __clean_type_info_names_internal memcpy floor malloc memchr ??_V@YAXPAX@Z printf ??2@YAPAXI@Z ??3@YAXPAX@Z _purecall memmove _CxxThrowException __CxxFrameHandler3 _libm_sse2_log10_precise _libm_sse2_log_precise _libm_sse2_pow_precise _libm_sse2_sqrt_precise memset

ws2_32

inet_addr

Sharing

General

Malware Config

Signatures

File Explorer

1ddaefddddf27148a66054aa4ae3f7e38ddc72daebd67b7aab040c7602dbb174

kernel32

msvcp110

msvcr110

ws2_32

generic