dd73c03786645f8edac33b4769594d1ca0ecf09dce7701a54023290405dc3187

Sharing

Copy URL Twitter E-mail

General

Target
dd73c03786645f8edac33b4769594d1ca0ecf09dce7701a54023290405dc3187
Size 3.7MB
Sample240524-b47nbagg6v
SHA256 dd73c03786645f8edac33b4769594d1ca0ecf09dce7701a54023290405dc3187
MD5 e32d6a4bbb0e0b5d26252ae83ba08e75
SHA1 a7a5a2d52f94390e3cfbeb41c5a1b13e5d083ad6
SHA512 206dada3004c363dcf411114bd756e03293a53861aa27603957db41ea39939a2d73b5ff576d85a1639d0a8627e97d09e58d91c19d747c381493aa20c8376dac8
SSDEEP 49152:KvVg82UQShIL7M0jaEG0udsuWWzp2UnPJg+ORflg3ufeW6IUD5sy9G9aNAVd4ywl:W2U7U7bSuuWWFBghaue31D5su2hLF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd73c03786645f8edac33b4769594d1ca0ecf09dce7701a54023290405dc3187

File Explorer

dd73c03786645f8edac33b4769594d1ca0ecf09dce7701a54023290405dc3187

.dll 3.7MB

dd73c03786645f8edac33b4769594d1ca0ecf09dce7701a54023290405dc3187

IMPHASH 004a941cc8b4ae848d254cfbcf4b894d
SHA256 dd73c03786645f8edac33b4769594d1ca0ecf09dce7701a54023290405dc3187
MD5 e32d6a4bbb0e0b5d26252ae83ba08e75
SHA1 a7a5a2d52f94390e3cfbeb41c5a1b13e5d083ad6
SHA512 206dada3004c363dcf411114bd756e03293a53861aa27603957db41ea39939a2d73b5ff576d85a1639d0a8627e97d09e58d91c19d747c381493aa20c8376dac8
SSDEEP 49152:KvVg82UQShIL7M0jaEG0udsuWWzp2UnPJg+ORflg3ufeW6IUD5sy9G9aNAVd4ywl:W2U7U7bSuuWWFBghaue31D5su2hLF
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

452224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey

user32

MessageBoxA CharNextW LoadStringW MessageBoxW LoadStringW GetSystemMetrics CharUpperW

kernel32

Sleep VirtualFree VirtualAlloc HeapFree HeapAlloc GetProcessHeap lstrlenW lstrcpynW VirtualQuery GetTickCount GetSystemInfo GetVersion CompareStringW IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwindEx RtlUnwind RaiseException ExitProcess GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose WriteFile GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc FreeLibrary WriteFile WideCharToMultiByte WaitForSingleObject VirtualQueryEx VirtualQuery VirtualProtect VirtualFree VirtualAlloc SizeofResource SetFilePointer SetEvent SetEndOfFile ResetEvent ReadFile LockResource LocalFree LoadResource LoadLibraryA IsValidLocale GetVersionExW GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentProcess GetCPInfoExW GetCPInfo GetACP FreeResource FreeLibrary FormatMessageW FindResourceW EnumSystemLocalesW EnumCalendarInfoW CreateFileW CreateEventW CompareStringW CloseHandle Sleep

Name

.text

Size

438KB

Virtual Size

437KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

36KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

512B

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

dd73c03786645f8edac33b4769594d1ca0ecf09dce7701a54023290405dc3187

oleaut32

advapi32

user32

kernel32

generic