fb4f34faa44821619830b456a3524bafda82c554ef63c5d8fa4ff3c1bcf10a28

General

Target
fb4f34faa44821619830b456a3524bafda82c554ef63c5d8fa4ff3c1bcf10a28
Size 379KB
Sample240125-tghpsabbbj
SHA256 fb4f34faa44821619830b456a3524bafda82c554ef63c5d8fa4ff3c1bcf10a28
MD5 14f1394a1a035a2b9a6030f1ea760f63
SHA1 c24b0d23a76f5b323a2b9b1da80967cb46cd7b59
SHA512 7a26ac25774054b4818952eeb8abeb15bec6653c851df29c657cefcb6ab65aeb3ad49f92fd2ef8c572a6b9a421d1d6ff6f80a2667634e6b27daf0eacf7a68f43
SSDEEP 6144:6r7K+hLKK5lOIdNe93d4UrZDlYGfXxSe/ZQZgYPjY1ZR:6ph+OY9dbrZDlYSxSnZgYP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb4f34faa44821619830b456a3524bafda82c554ef63c5d8fa4ff3c1bcf10a28

File Explorer

fb4f34faa44821619830b456a3524bafda82c554ef63c5d8fa4ff3c1bcf10a28

.dll 379KB

fb4f34faa44821619830b456a3524bafda82c554ef63c5d8fa4ff3c1bcf10a28

IMPHASH 9dfe223374f9ffb244bf85e7e2da77a3
SHA256 fb4f34faa44821619830b456a3524bafda82c554ef63c5d8fa4ff3c1bcf10a28
MD5 14f1394a1a035a2b9a6030f1ea760f63
SHA1 c24b0d23a76f5b323a2b9b1da80967cb46cd7b59
SHA512 7a26ac25774054b4818952eeb8abeb15bec6653c851df29c657cefcb6ab65aeb3ad49f92fd2ef8c572a6b9a421d1d6ff6f80a2667634e6b27daf0eacf7a68f43
SSDEEP 6144:6r7K+hLKK5lOIdNe93d4UrZDlYGfXxSe/ZQZgYPjY1ZR:6ph+OY9dbrZDlYSxSnZgYP
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

221479

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

commondatasetbase

?GetModuleDir@Environment@common@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAX@Z ?CopyLen@StringHelper@common@@YA_NPADIPBDZZ ??1TimeStamp@common@@QAE@XZ ??0TimeStamp@common@@QAE@_J@Z ??1DateTime@common@@QAE@XZ ??0DateTime@common@@QAE@ABVTimeStamp@1@@Z ?IsValid@Logger@common@@QAE_NXZ ?WriteLog@Logger@common@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?Flush@Logger@common@@QAE_NXZ ??0Logger@common@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z ?GetString@IniFile@common@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@00@Z ?Close@IniFile@common@@QAE_NXZ ?Open@IniFile@common@@QAE_NPBDH@Z ??1IniFile@common@@UAE@XZ ??0IniFile@common@@QAE@XZ

kernel32

GetProcAddress FileTimeToDosDateTime FindFirstFileW FindClose FileTimeToLocalFileTime MultiByteToWideChar FreeLibrary LoadLibraryA DecodePointer IsDebuggerPresent IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount64 DisableThreadLibraryCalls EncodePointer

msvcp110

??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?_BADOFF@std@@3_JB ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?id@?$codecvt@DDH@std@@2V0locale@2@A ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ?always_noconv@codecvt_base@std@@QBE_NXZ ??Bid@locale@std@@QAEIXZ ?_Orphan_all@_Container_base0@std@@QAEXXZ ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Syserror_map@std@@YAPBDH@Z ?_Winerror_map@std@@YAPBDH@Z

msvcr110

memchr realloc tolower toupper sprintf ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABV01@@Z ceil strtol ??_V@YAXPAX@Z _mktime64 fputc ??1bad_cast@std@@UAE@XZ ??0bad_cast@std@@QAE@PBD@Z ??0bad_cast@std@@QAE@ABV01@@Z ??0exception@std@@QAE@XZ _unlock_file ungetc _access fgetpos _fseeki64 fflush fgetc _wassert fsetpos setvbuf _lock_file memcpy_s fwrite strtoul fclose _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ _vsnprintf ?terminate@@YAXXZ __CppXcptFilter _amsg_exit _malloc_crt _initterm _initterm_e _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _except_handler4_common __clean_type_info_names_internal malloc free ??2@YAPAXI@Z ??3@YAXPAX@Z _purecall memmove memcpy floor _libm_sse2_cos_precise _CxxThrowException __CxxFrameHandler3 __RTDynamicCast memset

Sharing

General

Malware Config

Signatures

File Explorer

fb4f34faa44821619830b456a3524bafda82c554ef63c5d8fa4ff3c1bcf10a28

commondatasetbase

kernel32

msvcp110

msvcr110

generic