f38a5d2a9e188c95d788cf75aff21e3b97c4158006526db9fe94e3e5e1403ec8

General

Target
f38a5d2a9e188c95d788cf75aff21e3b97c4158006526db9fe94e3e5e1403ec8
Size 349KB
Sample240125-taz1gsaag4
SHA256 f38a5d2a9e188c95d788cf75aff21e3b97c4158006526db9fe94e3e5e1403ec8
MD5 f4b3fe24439347428dd1945e00769487
SHA1 480bea45d1eeb9c2080e5471f90596971cae0830
SHA512 fa2d5726f5ac81d48d711b647a408f1717069eefe48e52cdae854408ea4a201febc615fb42f6f5053f38d712e7f63a905e10d5a3df412eb46bd789032032e4af
SSDEEP 3072:HUZii6+5RerwV3X06mgR1IZ7ayocBcDmi7Iwxrm9tLnhkQRw3LCms9PQMguAlntD:MiZ+7TX06mJ7ayoppVkiGFglx1MbG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f38a5d2a9e188c95d788cf75aff21e3b97c4158006526db9fe94e3e5e1403ec8

File Explorer

f38a5d2a9e188c95d788cf75aff21e3b97c4158006526db9fe94e3e5e1403ec8

.dll 349KB

f38a5d2a9e188c95d788cf75aff21e3b97c4158006526db9fe94e3e5e1403ec8

IMPHASH 03bf520c867bd20f2da2846fe71987d2
SHA256 f38a5d2a9e188c95d788cf75aff21e3b97c4158006526db9fe94e3e5e1403ec8
MD5 f4b3fe24439347428dd1945e00769487
SHA1 480bea45d1eeb9c2080e5471f90596971cae0830
SHA512 fa2d5726f5ac81d48d711b647a408f1717069eefe48e52cdae854408ea4a201febc615fb42f6f5053f38d712e7f63a905e10d5a3df412eb46bd789032032e4af
SSDEEP 3072:HUZii6+5RerwV3X06mgR1IZ7ayocBcDmi7Iwxrm9tLnhkQRw3LCms9PQMguAlntD:MiZ+7TX06mJ7ayoppVkiGFglx1MbG
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

108579

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

FreeLibrary GetProcAddress LoadLibraryA GetFileAttributesA CreateDirectoryA GetLastError GetModuleFileNameA DeleteFileA WideCharToMultiByte MultiByteToWideChar InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection DeleteCriticalSection CloseHandle CreateFileA GetCurrentProcess GetLocalTime GetCurrentThreadId GetCurrentProcessId DecodePointer IsDebuggerPresent IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime DisableThreadLibraryCalls EncodePointer

msvcp120

?_BADOFF@std@@3_JB ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exception@std@@YA_NXZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?id@?$codecvt@DDH@std@@2V0locale@2@A ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?always_noconv@codecvt_base@std@@QBE_NXZ ??Bid@locale@std@@QAEIXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Syserror_map@std@@YAPBDH@Z ?_Winerror_map@std@@YAPBDH@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ

msvcr120

malloc fopen fread strcpy_s ftell fseek fclose strstr sprintf_s vsprintf_s fputc ??1bad_cast@std@@UAE@XZ ??0bad_cast@std@@QAE@PBD@Z ??0bad_cast@std@@QAE@ABV01@@Z ??0exception@std@@QAE@ABV01@@Z _unlock_file ungetc __iob_func fgetpos _fseeki64 memchr fflush fgetc fsetpos atoll printf setvbuf _lock_file ??_V@YAXPAX@Z isdigit memcpy_s fwrite realloc isxdigit strrchr _itoa_s atoi strtoul ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@XZ ??0exception@std@@QAE@ABQBD@Z _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ _crt_debugger_hook __crtUnhandledException __crtTerminateProcess __CppXcptFilter _amsg_exit _malloc_crt _initterm _initterm_e _except_handler4_common ?terminate@@YAXXZ __clean_type_info_names_internal memcpy __CxxFrameHandler3 free ??2@YAPAXI@Z strcat_s ??3@YAXPAX@Z _purecall memmove _CxxThrowException memset

dbghelp

MiniDumpWriteDump

Sharing

General

Malware Config

Signatures

File Explorer

f38a5d2a9e188c95d788cf75aff21e3b97c4158006526db9fe94e3e5e1403ec8

kernel32

msvcp120

msvcr120

dbghelp

generic