UDS-DangerousObject[.]Multi[.]Generic-a016c80c01146c773545f4718cd5515a943da691e49b72b6031f9139f605f724

Sharing

Copy URL Twitter E-mail

General

Target
UDS-DangerousObject.Multi.Generic-a016c80c01146c773545f4718cd5515a943da691e49b72b6031f9139f605f724
Size 124KB
Sample240229-pcjdasge4s
SHA256 a016c80c01146c773545f4718cd5515a943da691e49b72b6031f9139f605f724
MD5 7fcce07445d141d346553e4a3ecc07e7
SHA1 30fa42c63ab4a4758365a004fe62e85eb3e15b15
SHA512 6f9ef61882e16920ba3518f52ac721791467419b463fdcd0a7d892261a22bc4670e1366b8bc094a4c4e58ddcd126009a6f7e307b9a750425590dcf394b64d039
SSDEEP 1536:/uy58oS9Ytx/SSybRNGJyvc2DNIx57ecuhI:WyJxjSSybjIx5Cca
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UDS-DangerousObject.Multi.Generic-a016c80c01146c773545f4718cd5515a943da691e49b72b6031f9139f605f724

File Explorer

UDS-DangerousObject.Multi.Generic-a016c80c01146c773545f4718cd5515a943da691e49b72b6031f9139f605f724

.dll .js 124KB

UDS-DangerousObject.Multi.Generic-a016c80c01146c773545f4718cd5515a943da691e49b72b6031f9139f605f724

IMPHASH 5fad4dc6cd80a72580680cdbbc8f93c9
SHA256 a016c80c01146c773545f4718cd5515a943da691e49b72b6031f9139f605f724
MD5 7fcce07445d141d346553e4a3ecc07e7
SHA1 30fa42c63ab4a4758365a004fe62e85eb3e15b15
SHA512 6f9ef61882e16920ba3518f52ac721791467419b463fdcd0a7d892261a22bc4670e1366b8bc094a4c4e58ddcd126009a6f7e307b9a750425590dcf394b64d039
SSDEEP 1536:/uy58oS9Ytx/SSybRNGJyvc2DNIx57ecuhI:WyJxjSSybjIx5Cca
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86 polyglot

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

64627

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadResource FindResourceW GetLastError LoadLibraryExW lstrcmpiW lstrcpynW HeapDestroy GetProcAddress LoadLibraryW lstrcpyW lstrcatW GetLocalTime Sleep CreateFileA GetTempPathA FlushFileBuffers WriteFile DeleteFileA DeviceIoControl WideCharToMultiByte SizeofResource GetCurrentProcessId GetModuleHandleA WriteProcessMemory GetCurrentProcess VirtualProtect DebugBreak SetErrorMode OpenEventA ExitProcess OutputDebugStringA LoadLibraryA GetWindowsDirectoryA LocalFree lstrlenA MultiByteToWideChar FreeLibrary GetModuleFileNameW CloseHandle GetModuleHandleW GetShortPathNameW lstrlenW InterlockedDecrement EnterCriticalSection InterlockedIncrement LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection CreateThread DisableThreadLibraryCalls CreateToolhelp32Snapshot Process32FirstW Process32NextW

user32

MessageBoxW CharLowerW wsprintfA SetWindowLongW CharNextW

advapi32

RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegEnumValueW RegQueryInfoKeyW RegSetValueExW RegEnumKeyExW RegOpenKeyExW RegCloseKey RegDeleteValueW RegCreateKeyExW RegDeleteKeyW

ole32

CoTaskMemRealloc CoCreateInstance CoTaskMemAlloc CoTaskMemFree

oleaut32

VariantClear SysAllocStringLen SysStringLen LoadRegTypeLi RegisterTypeLi LoadTypeLi SysAllocString SysFreeString VarUI4FromStr

msvcrt

wcscpy _CxxThrowException _strlwr _stricmp _adjust_fdiv _initterm _onexit __dllonexit ?terminate@@YAXXZ _except_handler3 strrchr abort atoi ??1type_info@@UAE@XZ strncpy strlen strchr strcmp strstr _wcsicmp memset _purecall ??3@YAXPAX@Z ??2@YAPAXI@Z __CxxFrameHandler free malloc realloc memcpy memcmp strcat strcpy wcslen wcsstr _wcslwr sprintf

wininet

HttpQueryInfoA InternetOpenUrlA InternetReadFile InternetOpenA InternetCloseHandle