632372b92e7059a9c0b4a0fad204c5d6fa6b1b05da3c54535b6750c430172eed

General

Target
632372b92e7059a9c0b4a0fad204c5d6fa6b1b05da3c54535b6750c430172eed
Size 79KB
Sample240125-telzesbafq
SHA256 632372b92e7059a9c0b4a0fad204c5d6fa6b1b05da3c54535b6750c430172eed
MD5 640d27f26bd99c04e6918b37a98ebcd0
SHA1 e5b8787e1ea9739634ab098432b8c034dbe4ecb7
SHA512 f902827f73aa113550368a47dd3aaee1103d20873f4db1b418c2186e31b13d097f104017ff38881c1a0d9ffbde563a7af52846c597aa58ff5771e1d8b7ce42be
SSDEEP 1536:kJxikn6DzDzoGGH3rRW3l5LPD3f1OuE9wHr2k:kJxiXkXV6l533f1OuE9e
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
632372b92e7059a9c0b4a0fad204c5d6fa6b1b05da3c54535b6750c430172eed

File Explorer

632372b92e7059a9c0b4a0fad204c5d6fa6b1b05da3c54535b6750c430172eed

.dll 79KB

632372b92e7059a9c0b4a0fad204c5d6fa6b1b05da3c54535b6750c430172eed

IMPHASH 6ae60b93c27fe52c361cf767292f95f7
SHA256 632372b92e7059a9c0b4a0fad204c5d6fa6b1b05da3c54535b6750c430172eed
MD5 640d27f26bd99c04e6918b37a98ebcd0
SHA1 e5b8787e1ea9739634ab098432b8c034dbe4ecb7
SHA512 f902827f73aa113550368a47dd3aaee1103d20873f4db1b418c2186e31b13d097f104017ff38881c1a0d9ffbde563a7af52846c597aa58ff5771e1d8b7ce42be
SSDEEP 1536:kJxikn6DzDzoGGH3rRW3l5LPD3f1OuE9wHr2k:kJxiXkXV6l533f1OuE9e
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

44671

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

commondatasetbase

?IsDirectory@File@common@@QBE_NXZ ?IsExist@File@common@@QBE_NXZ ??1File@common@@UAE@XZ ??0File@common@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?CopyLen@StringHelper@common@@YA_NPADIPBDZZ ?GUIDToString@GUIDHelper@common@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABUtag_GUID@2@@Z ?CreateGUID@GUIDHelper@common@@SA_NAAUtag_GUID@2@@Z ??1TimeStamp@common@@QAE@XZ ??0TimeStamp@common@@QAE@XZ ??0TimeStamp@common@@QAE@_J@Z ?GetZone@TimeZone@common@@SAHXZ ??1DateTime@common@@QAE@XZ ??0DateTime@common@@QAE@ABVTimeStamp@1@@Z ?Join@Thread@common@@QAEXXZ ??1Thread@common@@QAE@XZ ??0Thread@common@@QAE@P6AXPAX@Z0_N@Z ??1Mutex@common@@QAE@XZ ??0Mutex@common@@QAE@XZ ?GetProcessorCount@Environment@common@@SAIXZ

kernel32

FileTimeToDosDateTime FindFirstFileW FindClose CloseHandle FileTimeToLocalFileTime MultiByteToWideChar GetLastError MapViewOfFile UnmapViewOfFile WaitForSingleObject OpenSemaphoreA CreateSemaphoreA ReleaseSemaphore CreateFileMappingA GetExitCodeProcess CreateProcessA TerminateProcess Sleep LeaveCriticalSection EnterCriticalSection DisableThreadLibraryCalls GetTickCount64 DecodePointer IsDebuggerPresent IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime EncodePointer

msvcp110

?_BADOFF@std@@3_JB ?uncaught_exception@std@@YA_NXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?id@?$codecvt@DDH@std@@2V0locale@2@A ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?always_noconv@codecvt_base@std@@QBE_NXZ ??Bid@locale@std@@QAEIXZ ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Syserror_map@std@@YAPBDH@Z ?_Winerror_map@std@@YAPBDH@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

msvcr110

??2@YAPAXI@Z ??0exception@std@@QAE@ABV01@@Z fputc ??1bad_cast@std@@UAE@XZ ??0bad_cast@std@@QAE@PBD@Z ??0bad_cast@std@@QAE@ABV01@@Z free _unlock_file malloc ungetc fgetpos _fseeki64 fflush fgetc fsetpos setvbuf _lock_file memcpy_s fwrite fclose _difftime64 _time64 _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ _vsnprintf __CppXcptFilter _amsg_exit _malloc_crt _initterm _initterm_e _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _except_handler4_common ?terminate@@YAXXZ __clean_type_info_names_internal ??3@YAXPAX@Z _purecall _waccess memchr _wmkdir memmove memcpy __CxxFrameHandler3 _CxxThrowException memset

Sharing

General

Malware Config

Signatures

File Explorer

632372b92e7059a9c0b4a0fad204c5d6fa6b1b05da3c54535b6750c430172eed

commondatasetbase

kernel32

msvcp110

msvcr110

generic