90d9438b34b8e0f5a7ff78f0a33057ff

Sharing

Copy URL Twitter E-mail

General

Target
90d9438b34b8e0f5a7ff78f0a33057ff
Size 668KB
Sample240205-dcbgxaagam
SHA256 3cfc6b00299603753ebe179424e34883d0dde9e9e10397655386c423ca12527c
MD5 90d9438b34b8e0f5a7ff78f0a33057ff
SHA1 509b9592d18b2b62bb59b46f21bee1ff8b7098da
SHA512 a650b594ffbd38cc515797a430014fbacf9e5912d34309638be644e662d23b23136cfd235e15075991528056ded17d3bd0b75d64f6c2a357e2250b4e9dc16c29
SSDEEP 12288:5/5er07srUc7SfRidA+Fdf2cJwAmKcH21j03TFbA+y5+9g9enh/dQRTf0T:5hQ0IrUc7SIdA+PXJnmKcH214Nhy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90d9438b34b8e0f5a7ff78f0a33057ff

File Explorer

90d9438b34b8e0f5a7ff78f0a33057ff

.dll 668KB

90d9438b34b8e0f5a7ff78f0a33057ff

IMPHASH c6b4c2eec8a93016c63563421e15f011
SHA256 3cfc6b00299603753ebe179424e34883d0dde9e9e10397655386c423ca12527c
MD5 90d9438b34b8e0f5a7ff78f0a33057ff
SHA1 509b9592d18b2b62bb59b46f21bee1ff8b7098da
SHA512 a650b594ffbd38cc515797a430014fbacf9e5912d34309638be644e662d23b23136cfd235e15075991528056ded17d3bd0b75d64f6c2a357e2250b4e9dc16c29
SSDEEP 12288:5/5er07srUc7SfRidA+Fdf2cJwAmKcH21j03TFbA+y5+9g9enh/dQRTf0T:5hQ0IrUc7SIdA+PXJnmKcH214Nhy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

493008

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

sdmf|er.pdb

BeginBufferedAnimation BeginBufferedPaint BeginPanningFeedback BufferedPaintClear BufferedPaintInit BufferedPaintRenderAnimation BufferedPaintSetAlpha BufferedPaintStopAllAnimations BufferedPaintUnInit CloseThemeData DllCanUnloadNow DllGetActivationFactory DllGetClassObject DrawThemeBackground DrawThemeBackgroundEx DrawThemeEdge DrawThemeIcon DrawThemeParentBackground DrawThemeParentBackgroundEx DrawThemeText DrawThemeTextEx EnableThemeDialogTexture EnableTheming EndBufferedAnimation EndBufferedPaint EndPanningFeedback GetBufferedPaintBits GetBufferedPaintDC GetBufferedPaintTargetDC GetBufferedPaintTargetRect GetColorFromPreference GetCurrentThemeName GetImmersiveColorFromColorSetEx GetImmersiveUserColorSetPreference GetThemeAnimationProperty GetThemeAnimationTransform GetThemeAppProperties GetThemeBackgroundContentRect GetThemeBackgroundExtent GetThemeBackgroundRegion GetThemeBitmap GetThemeBool GetThemeColor GetThemeDocumentationProperty GetThemeEnumValue GetThemeFilename GetThemeFont GetThemeInt GetThemeIntList GetThemeMargins GetThemeMetric GetThemePartSize GetThemePosition GetThemePropertyOrigin GetThemeRect GetThemeStream GetThemeString GetThemeSysBool GetThemeSysColor GetThemeSysColorBrush GetThemeSysFont GetThemeSysInt GetThemeSysSize GetThemeSysString GetThemeTextExtent GetThemeTextMetrics GetThemeTimingFunction GetThemeTransitionDuration GetUserColorPreference GetWindowTheme HitTestThemeBackground IsAppThemed IsCompositionActive IsThemeActive IsThemeBackgroundPartiallyTransparent IsThemeDialogTextureEnabled IsThemePartDefined OpenThemeData OpenThemeDataEx OpenThemeDataForDpi SetThemeAppProperties SetWindowTheme SetWindowThemeAttribute ThemeInitApiHook UpdatePanningFeedback

Name

.text

Size

496KB

Virtual Size

495KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

52KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

56KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=105, id=1, productName=Unmarked objects,

count=354, id=201, productName=VS2012 UPD3 build 60610, version=60610,

count=40, id=225, productName=VS2013 UPD4 build 31101, version=31101,

count=53, id=206, productName=VS2012 UPD2 build 60315, version=60315,

count=18, id=255, productName=VS2015 UPD2 build 23918, version=23918,

count=200, id=132, productName=VS2008 build 21022, version=21022,

count=465, id=204, productName=VS2012 UPD1 build 51106, version=51106,

count=186, id=220, productName=VS2013 build 21005, version=21005,

count=100, id=207, productName=VS2012 UPD1 build 51106, version=51106,

count=87, id=206, productName=VS2012 UPD3 build 60610, version=60610,

count=243, id=156, productName=VS2010 build 30319, version=30319,

count=291, id=222, productName=VS2013 UPD2 build 30501, version=30501,

count=155, id=201, productName=VS2012 UPD2 build 60315, version=60315,

count=451, id=205, productName=VS2012 UPD2 build 60315, version=60315,

count=229, id=223, productName=VS2013 build 21005, version=21005,

count=355, id=206, productName=VS2012 UPD1 build 51106, version=51106,

count=53, id=132, productName=VS2008 build 21022, version=21022,

count=481, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=346, id=257, productName=VS2015 UPD1 build 23506, version=23506,

count=489, id=261, productName=VS2015 UPD3 build 24213, version=24213,

count=80, id=261, productName=VS2015 [14.0] build 23026, version=23026,

count=1, id=203, productName=VS2012 UPD4 build 61030, version=61030,

count=55, id=259, productName=VS2015 UPD1 build 23506, version=23506,

count=473, id=156, productName=VS2010 SP1 build 40219, version=40219,

count=223, id=257, productName=VS2015 UPD1 build 23506, version=23506,

Sharing

General

Malware Config

Signatures

File Explorer

90d9438b34b8e0f5a7ff78f0a33057ff

crypt32

generic