9baedc37662ed4b4a6138cb4ebc629b1

Sharing

Copy URL Twitter E-mail

General

Target
9baedc37662ed4b4a6138cb4ebc629b1
Size 260KB
Sample240214-prezesad5z
SHA256 444a04415c9c901dadd148e53602ee583d1bdf123bf88ff503a92f8273a4aae3
MD5 9baedc37662ed4b4a6138cb4ebc629b1
SHA1 de551762b709192408638e82d1634ce552533086
SHA512 d3e9d239164a58e22d6b5c899075f199bfda41db37c01de8bfa2792f8698171e7b0e52272b9f4616e7fa57cc118621d950e872ceb59e8fb7ade1ff6c2b02501f
SSDEEP 3072:qC7BTtBgUz1tE4jnsfaQ/LzwuyEmCSP0dLdtoTC7f25LUqanl81tRf/:q2TzVXRjnMwTqdm4fUs85f
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9baedc37662ed4b4a6138cb4ebc629b1

File Explorer

9baedc37662ed4b4a6138cb4ebc629b1

.dll 260KB

9baedc37662ed4b4a6138cb4ebc629b1

IMPHASH 30e62b3e2d98aa07c3b3c796301a020b
SHA256 444a04415c9c901dadd148e53602ee583d1bdf123bf88ff503a92f8273a4aae3
MD5 9baedc37662ed4b4a6138cb4ebc629b1
SHA1 de551762b709192408638e82d1634ce552533086
SHA512 d3e9d239164a58e22d6b5c899075f199bfda41db37c01de8bfa2792f8698171e7b0e52272b9f4616e7fa57cc118621d950e872ceb59e8fb7ade1ff6c2b02501f
SSDEEP 3072:qC7BTtBgUz1tE4jnsfaQ/LzwuyEmCSP0dLdtoTC7f25LUqanl81tRf/:q2TzVXRjnMwTqdm4fUs85f
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

112092

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

InterlockedIncrement InterlockedDecrement GetModuleHandleW GetLastError FreeLibrary MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW lstrcmpiW DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetProcAddress LoadLibraryW CloseHandle CreateFileA SetEndOfFile DisableThreadLibraryCalls GetModuleFileNameW GlobalAlloc CreateThread Sleep FormatMessageW lstrlenW LocalAlloc RaiseException LocalFree WriteConsoleW GetConsoleOutputCP WriteConsoleA GetStringTypeW GetStringTypeA CreateFileW FlushFileBuffers GetConsoleMode GetConsoleCP InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale GetVersionExA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualProtect VirtualAlloc GetModuleHandleA GetSystemInfo VirtualQuery HeapAlloc HeapFree HeapReAlloc GetCurrentThreadId GetCommandLineA GetProcessHeap TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError DebugBreak WideCharToMultiByte lstrlenA LoadLibraryA HeapSize ExitProcess ReadFile SetFilePointer WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetOEMCP LCMapStringA LCMapStringW VirtualFree HeapDestroy HeapCreate FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle

user32

UnregisterClassA CharNextW MessageBoxW

advapi32

RegQueryInfoKeyW RegSetValueExW RegEnumKeyExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW RegQueryValueExW

ole32

CoTaskMemAlloc CreateStreamOnHGlobal CoTaskMemFree CoTaskMemRealloc StringFromGUID2 CoCreateInstance

oleaut32

UnRegisterTypeLi RegisterTypeLi SysStringLen LoadTypeLi LoadRegTypeLi VarUI4FromStr SysFreeString SysAllocString VariantClear VariantInit

shlwapi

StrToIntW

Sharing

General

Malware Config

Signatures

File Explorer

9baedc37662ed4b4a6138cb4ebc629b1

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

generic