88c8b472108e0d79d16a1634499c1b45048a10a38ee799054414613cc9dccccc

Resubmissions

14/05/2024, 05:37

240514-gbnydsce7s 3

14/05/2024, 05:00

240514-fm4bsabf7y 3

Sharing

Copy URL Twitter E-mail

General

Target

88c8b472108e0d79d16a1634499c1b45048a10a38ee799054414613cc9dccccc
Size

1.2MB
MD5

6b010dcbc9c09b06b16e6a6cc6387a7b
SHA1

47dacafb5dace4c5fea931e9a7392f76fdde3e98
SHA256

88c8b472108e0d79d16a1634499c1b45048a10a38ee799054414613cc9dccccc
SHA512

4ba8e5a9d45cc492c7c2686285bd987561e62e1f6365dcb6f3b7c23fdae4d747c1e80d4f78f4259ca45dba33c3f792eec3bef2a4009b1adeb3bac96ca33c565d
SSDEEP

24576:Ta1PRRj0FOsJ/nqD8d8YdS6OioiJc9exHH25NMd:TCnKO6iDq125NQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88c8b472108e0d79d16a1634499c1b45048a10a38ee799054414613cc9dccccc

Files

88c8b472108e0d79d16a1634499c1b45048a10a38ee799054414613cc9dccccc
.dll regsvr32 windows:6 windows x86 arch:x86

1a75bb49da59159e6e480aea3a76e729

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
OutputDebugStringA
VirtualAlloc
GetEnvironmentVariableW
GetWriteWatch
GlobalGetAtomNameW
GetTickCount64
GetLastError
GetCurrentThread
CloseHandle
LoadLibraryW
GetThreadContext
GetProcAddress
HeapQueryInformation
ReadProcessMemory
QueryPerformanceCounter
IsDebuggerPresent
VirtualFree
WideCharToMultiByte
HeapFree
GetActiveProcessorCount
HeapAlloc
GetAtomNameA
GetCurrentDirectoryW
FindAtomA
GetProcessHeap
GetModuleFileNameA
DecodePointer
WriteConsoleW
CreateFileW
OutputDebugStringW
ReadConsoleW
ReadFile
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
SetLastError
CheckRemoteDebuggerPresent
GetBinaryTypeW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStdHandle
GetFileType
SetConsoleCtrlHandler
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
VirtualQuery

user32

GetActiveWindow
GetWindowThreadProcessId
GetParent
GetCursorPos
FindWindowW
SoundSentry
GetMenu

advapi32

GetCurrentHwProfileA
IsTextUnicode

Exports

Exports

CdI86abmCVt7c4iCaz_FPK52jDwQw8FFahjfv
DllRegisterServer
HEy8wlJWfJ32fjnbT94kS2Y8Cs9EVdPi1OMvlcNfPSi_5stHi2mufUmAMYkfgD2KuK8z7
LwXczirU7oAMpIYNzfmqnkSKxEp_J0vdLnRYKigpgl2s0Fcu2dkDUrkvKK4FL
S6o05fLmkDZYa0YS7dapPg
SyFVqo_NZXBldrhacXYnVBVLikfx4zPT9b8DVM7Lu7wVULnv7Jvxvi
V5JHeXwwwRDHMI_w0SrK238cvuE78VHWb5Pu33gOb2Xi_3mygRgFJKPB2r9caRiWuqQ
ZzLbny3gkrYphw9lKER0jRFjCO4EGuIH0sUHbiSun
d0xc2JZmd0vwUM85q2vX_SO6x9hcTtlkjklwbbZZYnBDVHuHDCmeaAjmXRXhk9YLPsT35gc
t4e8D8AFZ8zhonJEugknqlIVjt4Pn9aqjnglXdUUJr5HHNjMM

Sections

.text
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 718KB - Virtual size: 723KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

1a75bb49da59159e6e480aea3a76e729

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 348KB - Virtual size: 348KB

.rdata Size: 127KB - Virtual size: 126KB

.data Size: 718KB - Virtual size: 723KB

.rsrc Size: 1024B - Virtual size: 976B

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 348KB - Virtual size: 348KB

.rdata
Size: 127KB - Virtual size: 126KB

.data
Size: 718KB - Virtual size: 723KB

.rsrc
Size: 1024B - Virtual size: 976B

.reloc
Size: 10KB - Virtual size: 9KB