9ba44e00744aa85f065a40435dae348a

Sharing

Copy URL Twitter E-mail

General

Target
9ba44e00744aa85f065a40435dae348a
Size 570KB
Sample240214-pdd5zaba83
SHA256 50f98d150c55d4f82498258317e313ecce87e6154e314f276d61ebf98aca6a3e
MD5 9ba44e00744aa85f065a40435dae348a
SHA1 55aaef3abb4c492cb97d9a38c1b519cc1fdd1f37
SHA512 b55495c38d2898c4d9208624bea6d9d91ab0f9b0f92fddfde48527c06efa1d8d45dfd8762c7e7955fc907e8e6b6156fb935665fbf7dec28509d1068731242203
SSDEEP 6144:XM8x2ZJs30wJJGbdMSrlyGOppm4q4TakUm27zt:XrxOsjJJGbBXOpmN4T/UmKt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ba44e00744aa85f065a40435dae348a

File Explorer

9ba44e00744aa85f065a40435dae348a

.dll 570KB

9ba44e00744aa85f065a40435dae348a

IMPHASH 09b8fcfe0d6c56fab8203e197d8843d6
SHA256 50f98d150c55d4f82498258317e313ecce87e6154e314f276d61ebf98aca6a3e
MD5 9ba44e00744aa85f065a40435dae348a
SHA1 55aaef3abb4c492cb97d9a38c1b519cc1fdd1f37
SHA512 b55495c38d2898c4d9208624bea6d9d91ab0f9b0f92fddfde48527c06efa1d8d45dfd8762c7e7955fc907e8e6b6156fb935665fbf7dec28509d1068731242203
SSDEEP 6144:XM8x2ZJs30wJJGbdMSrlyGOppm4q4TakUm27zt:XrxOsjJJGbBXOpmN4T/UmKt
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

227837

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalLock GlobalAlloc SetLastError FreeLibrary MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW LoadLibraryA GlobalFree GlobalHandle LockResource FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetStringTypeW GetStringTypeA LCMapStringA GetLocaleInfoA GlobalUnlock GetConsoleCP SetFilePointer InitializeCriticalSectionAndSpinCount LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount HeapSize GetModuleFileNameA GetStdHandle WriteFile ExitProcess TlsFree TlsSetValue TlsAlloc TlsGetValue HeapReAlloc HeapDestroy GetModuleFileNameW MulDiv lstrcmpW GetCurrentProcess FlushInstructionCache lstrcmpiW GetModuleHandleW GetProcAddress GetLastError InterlockedDecrement lstrlenW InterlockedIncrement GetCurrentThreadId Sleep DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection RaiseException GetConsoleMode HeapCreate CreateThread ExitThread GetCommandLineA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess RtlUnwind VirtualAlloc VirtualFree IsProcessorFeaturePresent HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange OpenMutexW CreateMutexW WaitForSingleObject ReleaseMutex CloseHandle LoadLibraryW WideCharToMultiByte

user32

SetFocus UnregisterClassA SetWindowLongW GetWindowLongW UnregisterClassW CharNextW DefWindowProcW DestroyWindow GetSysColor MoveWindow SetWindowPos MapWindowPoints MapDialogRect SetWindowContextHelpId IsWindowVisible GetWindowRect GetTopWindow CreateDialogIndirectParamW ShowWindow PeekMessageW TranslateMessage DispatchMessageW RegisterWindowMessageW GetWindowTextLengthW GetWindowTextW SetWindowTextW GetClientRect CreateWindowExW RegisterClassExW LoadCursorW GetClassInfoExW IsWindow SendMessageW CreateAcceleratorTableW GetFocus GetWindow DestroyAcceleratorTable GetDesktopWindow BeginPaint EndPaint CallWindowProcW FillRect ReleaseCapture GetClassNameW GetDlgItem GetParent IsChild SetCapture RedrawWindow InvalidateRgn InvalidateRect ReleaseDC GetDC ScreenToClient ClientToScreen

gdi32

GetObjectW CreateSolidBrush GetDeviceCaps BitBlt CreateCompatibleDC CreateCompatibleBitmap DeleteDC SelectObject DeleteObject GetStockObject

advapi32

RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW

ole32

OleUninitialize CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance CoTaskMemFree StringFromGUID2 OleLockRunning CoGetClassObject CLSIDFromProgID CLSIDFromString CreateStreamOnHGlobal OleInitialize

oleaut32

DispCallFunc LoadTypeLi LoadRegTypeLi OleCreateFontIndirect VariantClear VariantInit VarUI4FromStr SysAllocString SysAllocStringLen SysFreeString SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

9ba44e00744aa85f065a40435dae348a

kernel32

user32

gdi32

advapi32

ole32

oleaut32

generic