8b48d71dd8ec9ab649c9286d63ec80d5

Sharing

Copy URL Twitter E-mail

General

Target
8b48d71dd8ec9ab649c9286d63ec80d5
Size 288KB
Sample240203-d2hmhsachn
SHA256 71f24251844b9e59c079cf6cc05c7ff82f0a87da4e2b1b2064f401b09169d8bd
MD5 8b48d71dd8ec9ab649c9286d63ec80d5
SHA1 330e6a01f8332cc6edc6165f26572da4d80a40f3
SHA512 5d6258f0271410c4977df1ec8f42c745cf23e621cc7ddd1672379ce051c6a7b80d9009b54302992a24031b03469f9460f6faf16c5f531d1db465345bb7360267
SSDEEP 6144:ZYHx2E4u5HVHqmb1Ij9bVbutvrOirgeh+s:ZwbnKdpJbuBjr1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b48d71dd8ec9ab649c9286d63ec80d5

File Explorer

8b48d71dd8ec9ab649c9286d63ec80d5

.dll 288KB

8b48d71dd8ec9ab649c9286d63ec80d5

IMPHASH 6763f6550032c3a8484c086414ef5602
SHA256 71f24251844b9e59c079cf6cc05c7ff82f0a87da4e2b1b2064f401b09169d8bd
MD5 8b48d71dd8ec9ab649c9286d63ec80d5
SHA1 330e6a01f8332cc6edc6165f26572da4d80a40f3
SHA512 5d6258f0271410c4977df1ec8f42c745cf23e621cc7ddd1672379ce051c6a7b80d9009b54302992a24031b03469f9460f6faf16c5f531d1db465345bb7360267
SSDEEP 6144:ZYHx2E4u5HVHqmb1Ij9bVbutvrOirgeh+s:ZwbnKdpJbuBjr1
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

135130

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

oleaut32

RegisterTypeLi UnRegisterTypeLi OleCreateFontIndirect SysStringByteLen SysAllocString SysAllocStringLen LoadTypeLi LoadRegTypeLi DispCallFunc SysStringLen VariantClear VariantInit VarUI4FromStr SysFreeString

advapi32

RegSetValueExA RegCreateKeyExA RegCloseKey RegDeleteValueA RegDeleteKeyA RegQueryInfoKeyA RegEnumKeyExA RegQueryValueExA RegOpenKeyExA

ole32

CLSIDFromString CLSIDFromProgID CoGetClassObject OleLockRunning StringFromGUID2 OleUninitialize OleInitialize CreateStreamOnHGlobal CoInitialize CoUninitialize CoCreateInstance CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc

gdi32

DeleteObject SelectObject DeleteDC CreateCompatibleBitmap CreateCompatibleDC BitBlt GetDeviceCaps CreateSolidBrush GetObjectA GetStockObject

kernel32

FindClose RtlUnwind VirtualQuery GetSystemInfo IsDebuggerPresent CompareStringW CompareStringA SetEndOfFile GetTimeZoneInformation WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess HeapReAlloc InterlockedExchange GetACP GetLocaleInfoA GetVersionExA InterlockedCompareExchange SetEnvironmentVariableA VirtualAlloc GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect VirtualFree HeapFree GetProcessHeap FreeLibrary HeapAlloc MultiByteToWideChar WideCharToMultiByte lstrlenW RaiseException WaitForSingleObject CreateThread InitializeCriticalSection DeleteCriticalSection GetLastError lstrlenA lstrcmpiA InterlockedIncrement InterlockedDecrement IsDBCSLeadByte SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleHandleA GetModuleFileNameA EnterCriticalSection LeaveCriticalSection CloseHandle ReadFile SetFilePointer CreateFileA Sleep GetCurrentThreadId lstrcmpA GlobalUnlock GlobalLock GlobalAlloc FlushInstructionCache GetCurrentProcess MulDiv SetLastError LockResource DisableThreadLibraryCalls SetThreadLocale GetThreadLocale CreateProcessA GetTempPathA LocalFree GetStringTypeW GetStringTypeA GetCurrentProcessId GetTickCount QueryPerformanceCounter FileTimeToSystemTime GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA HeapSize LCMapStringW LCMapStringA GetStartupInfoA SetHandleCount GetFileType SetStdHandle GetCurrentDirectoryA GetFullPathNameA GetConsoleMode GetConsoleCP GetStdHandle WriteFile ExitProcess TlsFree TlsSetValue TlsAlloc TlsGetValue GetOEMCP GetCPInfo HeapCreate HeapDestroy GetCommandLineA SystemTimeToFileTime LocalFileTimeToFileTime SetFileTime GetSystemTimeAsFileTime FindFirstFileA GetDriveTypeA FileTimeToLocalFileTime IsProcessorFeaturePresent

user32

SetTimer KillTimer CreateAcceleratorTableA IsWindow GetDesktopWindow GetWindow DestroyAcceleratorTable BeginPaint EndPaint CallWindowProcA FillRect ReleaseCapture GetClassNameA GetDlgItem GetParent IsChild SetCapture RedrawWindow InvalidateRgn InvalidateRect ReleaseDC GetDC ScreenToClient ClientToScreen GetClientRect SetWindowPos MoveWindow GetSysColor RegisterWindowMessageA GetClassInfoExA LoadCursorA RegisterClassExA GetWindowTextLengthA GetWindowTextA SetWindowTextA DefWindowProcA SendMessageA DestroyWindow CreateWindowExA GetWindowLongA SetWindowLongA GetForegroundWindow GetWindowThreadProcessId AttachThreadInput GetActiveWindow GetFocus ShowWindow wsprintfA SetForegroundWindow SetActiveWindow SetFocus CharNextA GetSystemMetrics UnregisterClassA

Sharing

General

Malware Config

Signatures

File Explorer

8b48d71dd8ec9ab649c9286d63ec80d5

oleaut32

advapi32

ole32

gdi32

kernel32

user32

generic