e0eefb551acfdb3ed83ab8469f2452f4

Sharing

Copy URL Twitter E-mail

General

Target
e0eefb551acfdb3ed83ab8469f2452f4
Size 337KB
Sample240327-gp93saeb58
SHA256 ade9ee1e12902bd5d38d97bf2a9356ac50f3fea6f4f97e30214841856c942721
MD5 e0eefb551acfdb3ed83ab8469f2452f4
SHA1 5a67efd7cbaefc970a7f3df60c2746a1e9912999
SHA512 c5468f7e3927dcadc428e20256a6922277dd5ee8fbeb25645a6460c4057977087e3d5eb474353f28c683d60e38755b4523aa606b9e30c3f273f51674e117e1cd
SSDEEP 6144:2N0yr1sO/wIKS0FKtOT/OrDtgUi0uvQee7Qee/0QeesQeeglQeekQeeDC7Mt7vBx:GG6wndYtamDSU1CdL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0eefb551acfdb3ed83ab8469f2452f4

File Explorer

e0eefb551acfdb3ed83ab8469f2452f4

.dll 337KB

e0eefb551acfdb3ed83ab8469f2452f4

IMPHASH 2316e422bb60cd903d5c46e757906cbe
SHA256 ade9ee1e12902bd5d38d97bf2a9356ac50f3fea6f4f97e30214841856c942721
MD5 e0eefb551acfdb3ed83ab8469f2452f4
SHA1 5a67efd7cbaefc970a7f3df60c2746a1e9912999
SHA512 c5468f7e3927dcadc428e20256a6922277dd5ee8fbeb25645a6460c4057977087e3d5eb474353f28c683d60e38755b4523aa606b9e30c3f273f51674e117e1cd
SSDEEP 6144:2N0yr1sO/wIKS0FKtOT/OrDtgUi0uvQee7Qee/0QeesQeeglQeekQeeDC7Mt7vBx:GG6wndYtamDSU1CdL
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

253952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\DOCUME~1\bld4act\LOCALS~1\Temp\Hpolaris\optPolaris\baseline\MPVIS.pdb

msvcrt

?terminate@@YAXXZ _adjust_fdiv _amsg_exit _initterm ??_V@YAXPAX@Z memset malloc free realloc _vsnwprintf wcspbrk wcschr _CIacos _finite floor _XcptFilter __CxxFrameHandler _CIatan2 _CIsqrt rand time srand _wcsicmp _CIcos _CIsin ??_U@YAPAXI@Z _purecall memcpy ??2@YAPAXI@Z ??3@YAXPAX@Z

kernel32

IsProcessorFeaturePresent LockResource GetVersion SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount RtlUnwind GetVersionExA GetModuleHandleA FindResourceA LocalAlloc RaiseException GetVersionExW VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery MultiByteToWideChar lstrlenW lstrcpyW GetLastError InitializeCriticalSection DeleteCriticalSection InterlockedIncrement InterlockedDecrement lstrcmpiW LeaveCriticalSection EnterCriticalSection HeapDestroy DisableThreadLibraryCalls lstrcpynW GetModuleFileNameW FreeLibrary GetProcAddress LoadLibraryW lstrcatW lstrlenA SizeofResource LoadResource FindResourceW LoadLibraryExW CloseHandle WaitForSingleObject SetEvent VirtualFree FlushInstructionCache GetCurrentProcess QueryPerformanceFrequency QueryPerformanceCounter HeapFree GetProcessHeap HeapAlloc LoadLibraryA InterlockedExchange Sleep InterlockedCompareExchange

advapi32

RegOpenKeyExW RegOpenKeyA RegQueryValueExA RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryInfoKeyW RegEnumValueW RegEnumKeyExW RegQueryValueExW TraceMessage RegDeleteKeyW

ole32

CoTaskMemRealloc CoTaskMemAlloc CoTaskMemFree CoCreateInstance

oleaut32

SysFreeString SysAllocStringLen LoadTypeLi RegisterTypeLi SysStringLen VarUI4FromStr LoadRegTypeLi SysAllocString

user32

SetWindowsHookExW SetRectEmpty IsRectEmpty GetSystemMetrics LoadCursorW RegisterClassW CreateWindowExW IsWindowUnicode GetDC ShowWindow UpdateWindow GetSysColor UnhookWindowsHookEx DestroyWindow GetAsyncKeyState CallNextHookEx CallWindowProcW GetWindowLongW SetWindowLongW DefWindowProcW PostMessageW SetCursor CharNextW CharPrevW GetWindowRect MonitorFromWindow ReleaseDC IsWindow FillRect GetClientRect CopyRect

gdi32

TextOutW GetStockObject DeleteObject SetStretchBltMode SetTextAlign SetTextColor SetBkColor StretchBlt

gdiplus

GdipCreatePen1 GdipCloneBrush GdipFillRectangleI GdipDrawLineI GdipSetSmoothingMode GdipSetCompositingQuality GdipCreateFromHDC GdipCreatePathGradientFromPath GdipAddPathEllipseI GdipStartPathFigure GdipCreateLineBrushFromRectI GdipCreateSolidFill GdipDeleteGraphics GdipSetPathGradientFocusScales GdipSetPathGradientCenterPointI GdipSetPathGradientSurroundColorsWithCount GdipGetPathGradientPointCount GdipSetPathGradientCenterColor GdipDeletePath GdipCreatePath GdipDeletePen GdipCreatePen2 GdipAlloc GdipFree GdipDeleteBrush

winmm

timeBeginPeriod timeGetTime timeEndPeriod

Sharing

General

Malware Config

Signatures

File Explorer

e0eefb551acfdb3ed83ab8469f2452f4

msvcrt

kernel32

advapi32

ole32

oleaut32

user32

gdi32

gdiplus

winmm

generic