dae2539ec5912db5fdf388d370251b9a

General

Target
dae2539ec5912db5fdf388d370251b9a
Size 329KB
Sample240321-gwaaqsdc36
SHA256 ee54898123059e8c4d988ad7f6d746dd42b957fa6d5c4a7ffa132de5f089135b
MD5 dae2539ec5912db5fdf388d370251b9a
SHA1 f566d95037290c9143e8d8d1ee7ee933a2f7c5a9
SHA512 4f126db83ff3034aea080f316d72eb0725e1b06a7c015fe38ddf4a74c673a09b04fe3144b602b6deb76d54730c226117c1ab563daaca60ea4271f53ddff0711d
SSDEEP 6144:mInRhmK2j+kBXlUo8w72XNXNRAJVNnUMbSJrpvXrH:mSTx2RB1UoZ72XNXbAJVNnU0SJrpvL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dae2539ec5912db5fdf388d370251b9a

File Explorer

dae2539ec5912db5fdf388d370251b9a

.dll 329KB

dae2539ec5912db5fdf388d370251b9a

IMPHASH e4dd1e5a92e13ca5bda5adad3f20963b
SHA256 ee54898123059e8c4d988ad7f6d746dd42b957fa6d5c4a7ffa132de5f089135b
MD5 dae2539ec5912db5fdf388d370251b9a
SHA1 f566d95037290c9143e8d8d1ee7ee933a2f7c5a9
SHA512 4f126db83ff3034aea080f316d72eb0725e1b06a7c015fe38ddf4a74c673a09b04fe3144b602b6deb76d54730c226117c1ab563daaca60ea4271f53ddff0711d
SSDEEP 6144:mInRhmK2j+kBXlUo8w72XNXNRAJVNnUMbSJrpvXrH:mSTx2RB1UoZ72XNXbAJVNnU0SJrpvL
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

215824

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetHandleCount GetSystemTime lstrcpynA GetProcAddress LoadLibraryA VirtualQuery VirtualProtect VirtualAlloc InterlockedCompareExchange GetCurrentThreadId ResumeThread FlushInstructionCache GetCurrentProcess GetThreadContext SetThreadContext GetLastError SuspendThread GetCurrentThread SetLastError FlushFileBuffers CloseHandle CreateFileA RaiseException RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetModuleHandleA Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

oleaut32

VariantCopy SysStringByteLen SysAllocStringByteLen SysAllocString VariantChangeType VariantClear VariantInit SysFreeString SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

dae2539ec5912db5fdf388d370251b9a

kernel32

oleaut32

generic