db9900a4f916710f7294dddc8fb5a5e0

Sharing

Copy URL Twitter E-mail

General

Target
db9900a4f916710f7294dddc8fb5a5e0
Size 212KB
Sample240321-pd8dtabc27
SHA256 c13336cc683105a73966a0025a22464f60406765207b99e8b8c480e3296f3fc6
MD5 db9900a4f916710f7294dddc8fb5a5e0
SHA1 01cc004e0544dbb0628f42a504cb56892d7e0d9e
SHA512 56729d229b6f3992867bbdde074aa6f1bf552e9afe700a1fd0326008a81fb606be14d36eb16a9728d268c47bd24b333f92803339082875316c9ae01f23a21828
SSDEEP 3072:H79SsgRitYYCAEJ0CYRuA7GMNr3hCHhsddPsXFJkpf5pRrihcFTA/tpjYv3:b9SsgR7Ai0CiuAhpgH67pl5ELjo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db9900a4f916710f7294dddc8fb5a5e0

File Explorer

db9900a4f916710f7294dddc8fb5a5e0

.dll 212KB

db9900a4f916710f7294dddc8fb5a5e0

IMPHASH 2d31045dd566d4636d411e66873fa759
SHA256 c13336cc683105a73966a0025a22464f60406765207b99e8b8c480e3296f3fc6
MD5 db9900a4f916710f7294dddc8fb5a5e0
SHA1 01cc004e0544dbb0628f42a504cb56892d7e0d9e
SHA512 56729d229b6f3992867bbdde074aa6f1bf552e9afe700a1fd0326008a81fb606be14d36eb16a9728d268c47bd24b333f92803339082875316c9ae01f23a21828
SSDEEP 3072:H79SsgRitYYCAEJ0CYRuA7GMNr3hCHhsddPsXFJkpf5pRrihcFTA/tpjYv3:b9SsgR7Ai0CiuAhpgH67pl5ELjo
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

68636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrcmpiW MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW GetModuleHandleW DisableThreadLibraryCalls GetModuleFileNameW RaiseException GetLastError EnterCriticalSection FreeLibrary DeleteCriticalSection LeaveCriticalSection GetProcAddress LoadLibraryW CloseHandle CreateFileA SetEndOfFile InterlockedDecrement InterlockedIncrement GlobalAlloc Sleep CreateThread LocalAlloc lstrlenW FormatMessageW InitializeCriticalSection LocalFree WriteConsoleW GetConsoleOutputCP WriteConsoleA GetStringTypeW GetStringTypeA FlushFileBuffers SetStdHandle CreateFileW GetConsoleMode InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale GetVersionExA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc HeapFree VirtualProtect VirtualAlloc GetModuleHandleA GetSystemInfo VirtualQuery GetCurrentThreadId GetCommandLineA GetProcessHeap RtlUnwind TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapSize ExitProcess SetFilePointer ReadFile HeapDestroy HeapCreate VirtualFree WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetOEMCP LCMapStringA WideCharToMultiByte LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryA GetConsoleCP

user32

UnregisterClassA CharNextW MessageBoxW

advapi32

RegOpenKeyExW RegQueryInfoKeyW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegEnumKeyExW RegQueryValueExW

ole32

CoTaskMemRealloc CreateStreamOnHGlobal CoTaskMemFree CoTaskMemAlloc StringFromGUID2 CoCreateInstance

oleaut32

LoadTypeLi LoadRegTypeLi UnRegisterTypeLi RegisterTypeLi VarUI4FromStr SysStringLen VariantClear VariantInit SysFreeString SysAllocString

shlwapi

StrToIntW

Sharing

General

Malware Config

Signatures

File Explorer

db9900a4f916710f7294dddc8fb5a5e0

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

generic