8b4e84b3e56d8cb650748f2cceced102

Sharing

Copy URL Twitter E-mail

General

Target
8b4e84b3e56d8cb650748f2cceced102
Size 48KB
Sample240203-d9rkdsafcq
SHA256 312d293c9b4508a3cdcadc23a6a815d434e269e459fd22077f5cbb7451f52eeb
MD5 8b4e84b3e56d8cb650748f2cceced102
SHA1 02bed2972a1e05bd90410c714de5fe92662a70f4
SHA512 2c378caeaf22c51eabda9b89a375f278fd0f874d3a875af1397ed9584feb3ff9646ec19a95c7668f6fb6adaa11bd45d539c991ce63e43a92bd0527c9ef86f835
SSDEEP 768:XhohWOMrNUg6SLyWMOqVvPoPZfbbKVrM5RiwFgNDydOZ+0xTAz+O6+zl0VMF:RohW5rNv6CyWMOqZPu5335cbDydOZhx4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b4e84b3e56d8cb650748f2cceced102

File Explorer

8b4e84b3e56d8cb650748f2cceced102

.dll 48KB

8b4e84b3e56d8cb650748f2cceced102

IMPHASH 5e4693ba4c354c58c75127ba01559190
SHA256 312d293c9b4508a3cdcadc23a6a815d434e269e459fd22077f5cbb7451f52eeb
MD5 8b4e84b3e56d8cb650748f2cceced102
SHA1 02bed2972a1e05bd90410c714de5fe92662a70f4
SHA512 2c378caeaf22c51eabda9b89a375f278fd0f874d3a875af1397ed9584feb3ff9646ec19a95c7668f6fb6adaa11bd45d539c991ce63e43a92bd0527c9ef86f835
SSDEEP 768:XhohWOMrNUg6SLyWMOqVvPoPZfbbKVrM5RiwFgNDydOZ+0xTAz+O6+zl0VMF:RohW5rNv6CyWMOqZPu5335cbDydOZhx4
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32947

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrlenA WideCharToMultiByte lstrlenW LocalFree Process32Next Process32First Sleep WritePrivateProfileStringA RemoveDirectoryA DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection InterlockedIncrement EnterCriticalSection InterlockedDecrement HeapDestroy GetShortPathNameA GetModuleHandleA CreateDirectoryA GetCurrentProcessId GetCommandLineW ExitProcess LoadLibraryA GetProcAddress FreeLibrary CreateThread GetSystemDirectoryA GetModuleFileNameA CreateProcessA WaitForSingleObject CloseHandle GetExitCodeProcess FindFirstFileA GetPrivateProfileStringA FindNextFileA MultiByteToWideChar SetFileAttributesA MoveFileA DeleteFileA LeaveCriticalSection

advapi32

RegSetValueExA RegCreateKeyExA RegOpenKeyExA RegQueryInfoKeyA RegEnumKeyExA RegCloseKey BuildExplicitAccessWithNameA SetEntriesInAclA GetNamedSecurityInfoA SetNamedSecurityInfoA RegDeleteKeyA RegQueryValueExA

shell32

SHGetSpecialFolderPathA CommandLineToArgvW

ole32

CoInitialize CoUninitialize CoGetInterfaceAndReleaseStream CoMarshalInterThreadInterfaceInStream CoCreateInstance

oleaut32

VariantClear SysStringLen LoadRegTypeLi SysAllocString SysFreeString

msvcrt

_wcslwr _strupr _stricmp _adjust_fdiv malloc _initterm free atoi strncmp strchr strncpy _purecall memcpy _access fopen fseek sprintf strlen strstr memset strrchr strcat strcmp ??3@YAXPAX@Z memcmp wcsstr _strlwr strcpy fclose fread ??2@YAPAXI@Z ftell

shlwapi

SHSetValueA SHDeleteKeyA SHDeleteValueA

Sharing

General

Malware Config

Signatures

File Explorer

8b4e84b3e56d8cb650748f2cceced102

kernel32

advapi32

shell32

ole32

oleaut32

msvcrt

shlwapi

generic