76a6ae557c6ffe8bcb74d308a3d7f004

General

Target
76a6ae557c6ffe8bcb74d308a3d7f004
Size 135KB
Sample240126-herdcsgah5
SHA256 da16ce7550b5f62142729254139858b8e833bc483e03eaa9681c48f6a03e6f0b
MD5 76a6ae557c6ffe8bcb74d308a3d7f004
SHA1 f463e571710137285a9c6b40bad51aea98fe851e
SHA512 8182c4de406cdb82e7701e434b60317bdf849ab45ea2d7ba32bf4f873c04a94040e7ba195cc578d72664849d17884c5397d127c96b275abd37bd778179033aae
SSDEEP 1536:nuSM379pilzy4aCUBGbrufhif3ba/Qtps4zWeYXuOtMlZ:nu79WdaC2urufq33UeYuOE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76a6ae557c6ffe8bcb74d308a3d7f004

File Explorer

76a6ae557c6ffe8bcb74d308a3d7f004

.dll 135KB

76a6ae557c6ffe8bcb74d308a3d7f004

IMPHASH 3034835fedd595bcace2da5a44eb7d25
SHA256 da16ce7550b5f62142729254139858b8e833bc483e03eaa9681c48f6a03e6f0b
MD5 76a6ae557c6ffe8bcb74d308a3d7f004
SHA1 f463e571710137285a9c6b40bad51aea98fe851e
SHA512 8182c4de406cdb82e7701e434b60317bdf849ab45ea2d7ba32bf4f873c04a94040e7ba195cc578d72664849d17884c5397d127c96b275abd37bd778179033aae
SSDEEP 1536:nuSM379pilzy4aCUBGbrufhif3ba/Qtps4zWeYXuOtMlZ:nu79WdaC2urufq33UeYuOE
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4807

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CopyFileW DeleteFileA GetFileTime FindAtomA OpenFile CopyFileA ReadConsoleA CreateProcessA GetLastError CopyFileExW WriteFile GlobalFree GetStdHandle CreateThread GetCommandLineA CopyFileA GetComputerNameA WriteFile GetCPInfo FindFirstFileA ReadConsoleA GetFileSize OpenFile GetStdHandle OpenFileMappingA ReadFile DeleteFileA GetConsoleMode FindAtomA DeleteFileW DeleteAtom DeleteFileA CopyFileA GetComputerNameA GetFileTime ReadConsoleA CopyFileExA CopyFileW GetCommandLineA ExitThread OpenFileMappingA FindAtomA

user32

CalcMenuBar DialogBoxParamW CloseWindow GetCursor DrawTextA GetDC AlignRects CopyImage InsertMenuA GetWindowTextLengthA DrawTextW CopyImage AlignRects GetMenu DrawIcon BlockInput CopyRect GetDlgItem GetFocus AppendMenuW IsWindow GetWindowTextLengthA CalcMenuBar EndDialog CopyIcon AppendMenuA

gdi32

DeleteDC AbortPath AddFontResourceW SetTextColor DeleteObject AddFontResourceA RestoreDC AddFontResourceExA AddFontResourceExW ClearBitmapAttributes GetBitmapBits GetPixel GetPixel AddFontMemResourceEx GetBrushOrgEx BeginPath GetBrushOrgEx CreateSolidBrush SetTextColor AddFontResourceA AddFontResourceExW CancelDC DeleteObject AddFontResourceW GetClipBox ClearBrushAttributes AddFontMemResourceEx ExcludeClipRect CloseFigure GetBitmapBits GetCurrentPositionEx ClearBitmapAttributes AddFontResourceExA GetBrushOrgEx ExtTextOutA CloseFigure CreateSolidBrush GetPixel BeginPath AddFontMemResourceEx ClearBitmapAttributes AbortPath ExtTextOutA GetPixel AddFontResourceW GetClipBox RestoreDC GetBitmapBits BeginPath AddFontResourceExA GetPixel ClearBrushAttributes SetTextColor AddFontResourceExW AddFontResourceTracking GetBrushOrgEx AddFontMemResourceEx DeleteDC CreateSolidBrush AddFontResourceA AbortPath

comctl32

ImageList_Read ImageList_DragMove ImageList_Destroy ImageList_GetIconSize ImageList_DragEnter ImageList_DragShowNolock InitCommonControls ImageList_AddIcon ImageList_GetImageCount ImageList_Replace ImageList_Copy ImageList_DragLeave ImageList_GetImageInfo ImageList_DragEnter ImageList_GetImageRect ImageList_LoadImage InitCommonControls ImageList_DrawIndirect ImageList_Remove ImageList_EndDrag ImageList_Destroy

Name

.text

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

102KB

Virtual Size

102KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bbs

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

393B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

197B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

76a6ae557c6ffe8bcb74d308a3d7f004

kernel32

user32

gdi32

comctl32

generic