dd96ee786b47bb4b14b938c3ebabbb5f

Sharing

Copy URL Twitter E-mail

General

Target
dd96ee786b47bb4b14b938c3ebabbb5f
Size 52KB
Sample240325-kmrefaed6y
SHA256 47d5e75d51ceb5ff67e8857e280e1b06caca776cad65069ca5495644cbceaeee
MD5 dd96ee786b47bb4b14b938c3ebabbb5f
SHA1 37d3963c21ef20fc6c572f5808af7b3e3698f8f0
SHA512 432239e9d2564e78f5874caa6ef2edd83d6ba6f400fa1a92399ac6d0045031aab37f9f0398a3e261f85849c41aa6eb8abc8b572b830fcb47c001bd20c2a318ba
SSDEEP 1536:PTB+x5k+hx4F5x9UCnMRcQGAFf8dl7wwnHXtKsAu:dD9UTG/wIHXt8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd96ee786b47bb4b14b938c3ebabbb5f

File Explorer

dd96ee786b47bb4b14b938c3ebabbb5f

.dll 52KB

dd96ee786b47bb4b14b938c3ebabbb5f

IMPHASH 18235b38ebb0144e39d780be60d42ca0
SHA256 47d5e75d51ceb5ff67e8857e280e1b06caca776cad65069ca5495644cbceaeee
MD5 dd96ee786b47bb4b14b938c3ebabbb5f
SHA1 37d3963c21ef20fc6c572f5808af7b3e3698f8f0
SHA512 432239e9d2564e78f5874caa6ef2edd83d6ba6f400fa1a92399ac6d0045031aab37f9f0398a3e261f85849c41aa6eb8abc8b572b830fcb47c001bd20c2a318ba
SSDEEP 1536:PTB+x5k+hx4F5x9UCnMRcQGAFf8dl7wwnHXtKsAu:dD9UTG/wIHXt8
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33011

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle WaitForSingleObject CreateProcessA GetSystemDirectoryA RemoveDirectoryA Process32Next Process32First CreateDirectoryA GetCurrentProcessId GetProcAddress GetCommandLineW GetExitCodeProcess LeaveCriticalSection EnterCriticalSection ExitProcess WritePrivateProfileStringA DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection InterlockedIncrement InterlockedDecrement HeapDestroy GetShortPathNameA GetModuleHandleA SetFileAttributesA Sleep LoadLibraryA FreeLibrary FindFirstFileA GetPrivateProfileStringA FindNextFileA CreateThread GetModuleFileNameA WideCharToMultiByte lstrlenA MultiByteToWideChar lstrlenW DeleteFileA LocalFree MoveFileA

advapi32

RegSetValueExA RegOpenKeyExA RegQueryInfoKeyA RegEnumKeyExA RegDeleteKeyA RegCloseKey GetNamedSecurityInfoA BuildExplicitAccessWithNameA SetEntriesInAclA SetNamedSecurityInfoA RegQueryValueExA RegCreateKeyExA

shell32

CommandLineToArgvW SHGetSpecialFolderPathA

ole32

CoUninitialize CoGetInterfaceAndReleaseStream CoCreateInstance CoMarshalInterThreadInterfaceInStream CoInitialize

oleaut32

SysFreeString SysAllocString SysStringLen LoadRegTypeLi VariantClear

shlwapi

SHSetValueA SHDeleteKeyA SHDeleteValueA

msvcrt

fseek _strupr _stricmp _adjust_fdiv malloc _initterm free _purecall strcmp atoi _access strcpy strncmp strchr strncpy strlen memcpy memcmp strstr _wcslwr ??3@YAXPAX@Z fclose fread memset ??2@YAPAXI@Z ftell _strlwr fopen strcat strrchr sprintf wcsstr

Sharing

General

Malware Config

Signatures

File Explorer

dd96ee786b47bb4b14b938c3ebabbb5f

kernel32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcrt

generic