22e2bcca5afd5e52dd8c3f38733f0536

Sharing

Copy URL Twitter E-mail

General

Target
22e2bcca5afd5e52dd8c3f38733f0536
Size 2.0MB
Sample240229-tre2msee96
SHA256 ebc65a0de1181cf74562042be9a2c87fadc0e3982fb5c15d27a58570ed155746
MD5 22e2bcca5afd5e52dd8c3f38733f0536
SHA1 daa357db2376cd8bacf90ec54d463ae01285a0d7
SHA512 a657978d60524ffae6635a946b534c2c9001035d54ca0d1ed53cd9e3c5abbcdd93b65dd9f1c947fb3de32ee9286f766b5cf971ac337dc3d4bca0a6508fd35d49
SSDEEP 3072:RrUbfrh/TP/lpDbIqUKQ0yzMrPye1TMhj4fujyaVzm28NaU:ybFLP/bXHUFzAae1bujL9d8Nd
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

22e2bcca5afd5e52dd8c3f38733f0536

.dll 2.0MB

22e2bcca5afd5e52dd8c3f38733f0536

IMPHASH 9f218d386c5c8cb163315c801b4de4d7
SHA256 ebc65a0de1181cf74562042be9a2c87fadc0e3982fb5c15d27a58570ed155746
MD5 22e2bcca5afd5e52dd8c3f38733f0536
SHA1 daa357db2376cd8bacf90ec54d463ae01285a0d7
SHA512 a657978d60524ffae6635a946b534c2c9001035d54ca0d1ed53cd9e3c5abbcdd93b65dd9f1c947fb3de32ee9286f766b5cf971ac337dc3d4bca0a6508fd35d49
SSDEEP 3072:RrUbfrh/TP/lpDbIqUKQ0yzMrPye1TMhj4fujyaVzm28NaU:ybFLP/bXHUFzAae1bujL9d8Nd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

dc:a5:ed:01:11:b0:11:f2:9f:c8:2c:85:d7:d5:33:58:39:8e:43:53

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=BS TEHNIK d.o.o.,O=BS TEHNIK d.o.o.,POSTALCODE=1225,STREET=Vevrov trg 1,L=Lukovica,C=SI

Chains

Feb 29, 2024

Minor OS version

Major OS version

Entry point

4992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetModuleHandleW GetLastError VirtualAllocEx GetCurrentProcessId SetUnhandledExceptionFilter GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter lstrcmpiW lstrlenW GetTickCount lstrcpyW lstrcatW OpenEventW SetEvent CreateEventW CloseHandle CreateProcessW GetModuleFileNameW ExitProcess GetCommandLineW QueryPerformanceCounter GetCurrentThreadId GetCurrentProcess

user32

LoadIconA GetMenuContextHelpId GetLastActivePopup GetWindowTextLengthA IsClipboardFormatAvailable GetListBoxInfo GetInputState IsCharLowerW IsMenu IsCharUpperA GetCapture VkKeyScanW CountClipboardFormats GetOpenClipboardWindow OpenIcon CharUpperW GetClipboardData LoadCursorFromFileW GetKeyboardLayout GetWindowTextLengthW CloseWindowStation GetClipboardSequenceNumber GetMenuCheckMarkDimensions IsCharAlphaNumericA GetMessageTime PaintDesktop GetParent CharNextA GetSystemMetrics IsCharUpperW CharUpperA IsCharAlphaNumericW WindowFromDC DestroyMenu DestroyIcon IsWindowUnicode IsCharLowerA GetDC IsCharAlphaW VkKeyScanA EndMenu IsWindowVisible DrawMenuBar GetDialogBaseUnits CreatePopupMenu GetFocus GetWindowContextHelpId GetKeyboardType IsCharAlphaA GetDlgCtrlID DestroyCursor GetQueueStatus GetCaretBlinkTime GetThreadDesktop GetShellWindow ShowCaret CloseClipboard CopyIcon GetDesktopWindow GetDoubleClickTime GetForegroundWindow OemKeyScan LoadStringA MessageBoxA SetThreadDesktop ReleaseDC OpenInputDesktop GetWindowRect GetWindowDC GetUserObjectInformationA GetSysColor GetIconInfo FillRect DrawTextA DrawIconEx CreateIcon CloseDesktop CharLowerBuffA CharToOemA

gdi32

GetStockObject GetEnhMetaFileW GetEnhMetaFileBits StrokePath DeleteEnhMetaFile CloseMetaFile GetTextCharset DeleteObject GetStretchBltMode CreateSolidBrush GetObjectType CancelDC CreatePatternBrush GetColorSpace CloseEnhMetaFile CreateHalftonePalette FlattenPath EndPath GetPixelFormat EndPage GetEnhMetaFileA GetBkColor UpdateColors UnrealizeObject GetGraphicsMode DeleteMetaFile GetDCBrushColor GetBkMode CreateMetaFileA GetMapMode SaveDC GdiGetBatchLimit WidenPath RealizePalette CreateMetaFileW GetSystemPaletteUse BeginPath DeleteDC GetLayout

advapi32

RegOpenKeyA

Name

.text

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text8

Size

512B

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text7

Size

512B

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text6

Size

512B

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text5

Size

512B

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text4

Size

512B

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text3

Size

512B

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text2

Size

512B

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

573B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

884B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

22e2bcca5afd5e52dd8c3f38733f0536

PE Signature issue

kernel32

user32

gdi32

advapi32

generic