9cb1bdbfb2dec192733c7ee9e40a47c6

Sharing

Copy URL Twitter E-mail

General

Target
9cb1bdbfb2dec192733c7ee9e40a47c6
Size 52KB
Sample240215-cq39eaec6x
SHA256 f1e8fa5257318866c3d206cda349fc29f6266bf8549668632ab64788f8826f64
MD5 9cb1bdbfb2dec192733c7ee9e40a47c6
SHA1 d7247e6cafe6ee43a268a14d77d2ef27960c1af6
SHA512 63315fdcfb51d2a712e1eada537e0ed926cfdac9f1fff4f72b60145c7502322ce81f692ad607f7dc7306cc91260a18847b621363d2ba77d1f36b294bb3c96846
SSDEEP 1536:2GUmkSWlaTQwA5kJG1ql2O4oVM2xRslba+uXJ4:2GUOmKpCU0uXJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9cb1bdbfb2dec192733c7ee9e40a47c6

File Explorer

9cb1bdbfb2dec192733c7ee9e40a47c6

.dll 52KB

9cb1bdbfb2dec192733c7ee9e40a47c6

IMPHASH 9d5cb4cfd8dcf64f2035b4b45bb85a2b
SHA256 f1e8fa5257318866c3d206cda349fc29f6266bf8549668632ab64788f8826f64
MD5 9cb1bdbfb2dec192733c7ee9e40a47c6
SHA1 d7247e6cafe6ee43a268a14d77d2ef27960c1af6
SHA512 63315fdcfb51d2a712e1eada537e0ed926cfdac9f1fff4f72b60145c7502322ce81f692ad607f7dc7306cc91260a18847b621363d2ba77d1f36b294bb3c96846
SSDEEP 1536:2GUmkSWlaTQwA5kJG1ql2O4oVM2xRslba+uXJ4:2GUOmKpCU0uXJ
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33257

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrlenA GetShortPathNameA GetModuleHandleA GetModuleFileNameA Sleep ExitProcess CreateDirectoryA WideCharToMultiByte CreateProcessA RemoveDirectoryA GetCommandLineW MultiByteToWideChar CloseHandle GetSystemDirectoryA CreateThread GetExitCodeProcess WaitForSingleObject MoveFileA SetFileAttributesA Process32Next Process32First LocalFree lstrlenW HeapDestroy InterlockedDecrement EnterCriticalSection InterlockedIncrement LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection DisableThreadLibraryCalls GetProcAddress FindFirstFileA GetPrivateProfileStringA DeleteFileA FindNextFileA LoadLibraryA WritePrivateProfileStringA FreeLibrary GetCurrentProcessId

advapi32

SetEntriesInAclA BuildExplicitAccessWithNameA SetNamedSecurityInfoA RegEnumKeyExA RegDeleteKeyA RegOpenKeyExA RegQueryInfoKeyA RegCreateKeyExA RegSetValueExA RegCloseKey RegQueryValueExA GetNamedSecurityInfoA

shell32

SHGetSpecialFolderPathA CommandLineToArgvW

ole32

CoMarshalInterThreadInterfaceInStream CoUninitialize CoGetInterfaceAndReleaseStream CoInitialize CoCreateInstance

oleaut32

VariantClear SysAllocString SysStringLen LoadRegTypeLi SysFreeString

msvcrt

strncpy _stricmp _strlwr _adjust_fdiv malloc _initterm free fopen fseek ftell fread fclose _wcslwr wcsstr strcmp strcat sprintf atoi strchr strstr strrchr ??3@YAXPAX@Z memcpy _purecall ??2@YAPAXI@Z memcmp _strupr memset strncmp strlen strcpy _access

shlwapi

SHSetValueA SHDeleteKeyA SHDeleteValueA

Sharing

General

Malware Config

Signatures

File Explorer

9cb1bdbfb2dec192733c7ee9e40a47c6

kernel32

advapi32

shell32

ole32

oleaut32

msvcrt

shlwapi

generic