df82b120d734080e034d1c73dc8aa606c17cefa39c6ab7a5cda5ae8d9bc24889

General

Target
df82b120d734080e034d1c73dc8aa606c17cefa39c6ab7a5cda5ae8d9bc24889
Size 62KB
Sample240125-tglfnsaca3
SHA256 df82b120d734080e034d1c73dc8aa606c17cefa39c6ab7a5cda5ae8d9bc24889
MD5 0d79121feb8d821349ed488feb7b6e70
SHA1 0e7cbeb44a5e6c6cc02a1acc3cac5a8c87607ea0
SHA512 173a894eb310666157d0d5001aab5b0ff94219c0f8089e572d5047bff173f1c4771582dbe0fb8ea292e563b55dfad9d0569e63f54b77a83a6781132a0b20e889
SSDEEP 1536:WV/rT2FeXx6V4xhvZEv5OE78oB8pQ52Zkz952:WhNrw5OwB8pZkz95
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df82b120d734080e034d1c73dc8aa606c17cefa39c6ab7a5cda5ae8d9bc24889

File Explorer

df82b120d734080e034d1c73dc8aa606c17cefa39c6ab7a5cda5ae8d9bc24889

.dll 62KB

df82b120d734080e034d1c73dc8aa606c17cefa39c6ab7a5cda5ae8d9bc24889

IMPHASH 19bcf3d1266ab56d22eab9a0069f52f7
SHA256 df82b120d734080e034d1c73dc8aa606c17cefa39c6ab7a5cda5ae8d9bc24889
MD5 0d79121feb8d821349ed488feb7b6e70
SHA1 0e7cbeb44a5e6c6cc02a1acc3cac5a8c87607ea0
SHA512 173a894eb310666157d0d5001aab5b0ff94219c0f8089e572d5047bff173f1c4771582dbe0fb8ea292e563b55dfad9d0569e63f54b77a83a6781132a0b20e889
SSDEEP 1536:WV/rT2FeXx6V4xhvZEv5OE78oB8pQ52Zkz952:WhNrw5OwB8pZkz95
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

34943

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

commondatasetbase

?GetModuleDir@Environment@common@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAX@Z ?IsValid@XmlAttr@common@@QBE_NXZ ?GetAttrName@XmlAttr@common@@QBEPBDXZ ?GetNextSibling@XmlAttr@common@@QBE?AV12@XZ ?GetValue@XmlAttr@common@@QBEPADXZ ?GetFirstAttr@XmlNode@common@@QBE?AVXmlAttr@2@XZ ?IsValid@XmlNode@common@@QBE_NXZ ?GetNodeName@XmlNode@common@@QBEPBDXZ ?GetNextSibling@XmlNode@common@@QBE?AV12@XZ ?GetFirstChild@XmlNode@common@@QBE?AV12@XZ ?GetNodeByName@XmlDoc@common@@QBE?AVXmlNode@2@PBD@Z ?LoadXmlData@XmlDoc@common@@QAE_NPBDH@Z ??0BinaryReader@common@@QAE@XZ

kernel32

GetProcAddress FileTimeToDosDateTime FindFirstFileW FindClose FileTimeToLocalFileTime MultiByteToWideChar FreeLibrary LoadLibraryA DecodePointer IsDebuggerPresent IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount64 EncodePointer DisableThreadLibraryCalls

msvcp110

?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Syserror_map@std@@YAPBDH@Z ?_Winerror_map@std@@YAPBDH@Z

msvcr110

tolower strtod _strtoi64 strtol ??_V@YAXPAX@Z _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ __CppXcptFilter _amsg_exit _malloc_crt _initterm _initterm_e _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _except_handler4_common ?terminate@@YAXXZ __clean_type_info_names_internal memcpy __CxxFrameHandler3 _CxxThrowException memchr free ??2@YAPAXI@Z ??3@YAXPAX@Z _purecall memmove memset

Sharing

General

Malware Config

Signatures

File Explorer

df82b120d734080e034d1c73dc8aa606c17cefa39c6ab7a5cda5ae8d9bc24889

commondatasetbase

kernel32

msvcp110

msvcr110

generic