82d1e91b0deaa1e11702d6605c579f3bd9cde26aa9c6efe95cfdcb80dcdbf400[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
82d1e91b0deaa1e11702d6605c579f3bd9cde26aa9c6efe95cfdcb80dcdbf400.dll
Size 49.4MB
Sample240608-pwbskacf35
SHA256 82d1e91b0deaa1e11702d6605c579f3bd9cde26aa9c6efe95cfdcb80dcdbf400
MD5 b5f80a768ad7a390ba4313171f95775c
SHA1 5f47b0c4f5bdffe8f9633b1dcc2f3d52ac99be0f
SHA512 6517bf9b69a6e9266d251ab0b977c70330490f6a42305641c1a6c6355b5f699e37c9a224f3bd071d7f1e530191d2d053e8243022de6d630658dee42dadd1ba8c
SSDEEP 98304:JcRxM5EgGy7bi7ANPHYFTt/YicN7gzNJkiUjbRw7TA++4eV+rbuvCQfCTV9PvoOT:JKPKnM3
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82d1e91b0deaa1e11702d6605c579f3bd9cde26aa9c6efe95cfdcb80dcdbf400.dll

File Explorer

82d1e91b0deaa1e11702d6605c579f3bd9cde26aa9c6efe95cfdcb80dcdbf400.dll

.exe 49.4MB

82d1e91b0deaa1e11702d6605c579f3bd9cde26aa9c6efe95cfdcb80dcdbf400.dll

IMPHASH 3dc037d450f5d2714129923f1be5537a
SHA256 82d1e91b0deaa1e11702d6605c579f3bd9cde26aa9c6efe95cfdcb80dcdbf400
MD5 b5f80a768ad7a390ba4313171f95775c
SHA1 5f47b0c4f5bdffe8f9633b1dcc2f3d52ac99be0f
SHA512 6517bf9b69a6e9266d251ab0b977c70330490f6a42305641c1a6c6355b5f699e37c9a224f3bd071d7f1e530191d2d053e8243022de6d630658dee42dadd1ba8c
SSDEEP 98304:JcRxM5EgGy7bi7ANPHYFTt/YicN7gzNJkiUjbRw7TA++4eV+rbuvCQfCTV9PvoOT:JKPKnM3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2500912

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

kernel32

lstrlenW lstrcpyW lstrcpyA lstrcmpA lstrcatW WriteFileEx WriteFile WaitForSingleObjectEx WaitForSingleObject VirtualQuery VirtualFree VirtualAlloc VerLanguageNameA UnmapViewOfFile TerminateProcess Sleep SizeofResource SetThreadLocale SetPriorityClass SetLastError SetFilePointer SetFileAttributesW SetFileAttributesA SetEvent SetErrorMode SetEndOfFile ResetEvent ReleaseMutex ReadFileEx ReadFile QueryPerformanceFrequency QueryPerformanceCounter QueryDosDeviceA PeekNamedPipe MultiByteToWideChar MulDiv MoveFileExW MapViewOfFile LockResource LoadResource LoadLibraryW LoadLibraryA LeaveCriticalSection InitializeCriticalSection HeapFree HeapAlloc GlobalUnlock GlobalReAlloc GlobalMemoryStatus GlobalHandle GlobalLock GlobalFree GlobalFindAtomA GlobalDeleteAtom GlobalAlloc GlobalAddAtomA GetWindowsDirectoryW GetWindowsDirectoryA GetVolumeInformationA GetVersionExW GetVersionExA GetVersion GetTickCount GetThreadLocale GetTempPathW GetTempPathA GetSystemInfo GetSystemDirectoryW GetSystemDirectoryA GetSystemDefaultLangID GetStringTypeExA GetStdHandle GetProfileStringA GetProcessHeap GetProcAddress GetModuleHandleW GetModuleHandleA GetModuleFileNameA GetLogicalDriveStringsA GetLocaleInfoA GetLocalTime GetLastError GetFullPathNameW GetFullPathNameA GetFileSize GetFileInformationByHandle GetFileAttributesW GetFileAttributesA GetExitCodeProcess GetEnvironmentVariableA GetDriveTypeA GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetComputerNameA GetCPInfo GetACP FreeResource InterlockedExchange FreeLibrary FormatMessageA FindResourceA FindNextFileW FindNextFileA FindFirstFileW FindFirstFileA FindClose FileTimeToSystemTime FileTimeToLocalFileTime FileTimeToDosDateTime ExitProcess EnumCalendarInfoA EnterCriticalSection DeviceIoControl DeleteFileW DeleteFileA DeleteCriticalSection CreateThread CreateProcessA CreatePipe CreateMutexA CreateMailslotW CreateFileMappingW CreateFileW CreateFileA CreateEventA CreateDirectoryW CreateDirectoryA CopyFileW CopyFileA CompareStringA CloseHandle Sleep TlsSetValue TlsGetValue LocalAlloc GetModuleHandleA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection VirtualFree VirtualAlloc LocalFree LocalAlloc GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenA lstrcpynA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLastError GetCommandLineA FreeLibrary FindFirstFileA FindClose CreateDirectoryA ExitProcess WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException GetStdHandle GetFileSize GetFileType CreateFileA CloseHandle

advapi32

ReportEventW RegisterEventSourceW RegSetValueExW RegSetValueExA RegQueryValueExW RegQueryValueExA RegQueryInfoKeyA RegOpenKeyExW RegOpenKeyExA RegOpenKeyW RegFlushKey RegEnumValueW RegEnumValueA RegEnumKeyExW RegEnumKeyExA RegDeleteValueW RegCreateKeyExW RegCreateKeyExA RegConnectRegistryA RegCloseKey OpenThreadToken OpenProcessToken LookupPrivilegeValueW LookupPrivilegeNameW InitiateSystemShutdownW GetTokenInformation FreeSid EqualSid DeregisterEventSource AllocateAndInitializeSid AdjustTokenPrivileges RegQueryValueExA RegOpenKeyExA RegCloseKey LsaNtStatusToWinError CloseServiceHandle ControlService QueryServiceStatus DeleteService QueryServiceConfigW StartServiceW OpenServiceW CreateServiceW OpenSCManagerW

comctl32

ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_SetDragCursorImage ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

comdlg32

GetSaveFileNameA GetOpenFileNameA

gdi32

UnrealizeObject TextOutW TextOutA StrokePath StretchBlt StartPage StartDocA SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetTextAlign SetStretchBltMode SetROP2 SetPixel SetMapMode SetEnhMetaFileBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SelectClipRgn SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline Polygon PlayEnhMetaFile Pie PatBlt MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsA GetTextExtentPointA GetTextExtentPoint32A GetTextAlign GetSystemPaletteEntries GetStockObject GetPixel GetPaletteEntries GetObjectA GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBkMode GetBkColor GetBitmapBits GdiFlush ExtTextOutA ExtSelectClipRgn ExtCreatePen ExcludeClipRect EndPath EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgn CreatePolygonRgn CreatePenIndirect CreatePalette CreateICA CreateHalftonePalette CreateFontIndirectA CreateDIBitmap CreateDIBSection CreateDCA CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileA BitBlt BeginPath Arc

ntdll

NtQueryInformationFile NtOpenFile NtFsControlFile

ole32

IsEqualGUID CoTaskMemFree StringFromCLSID OleInitialize CoTaskMemAlloc CoCreateInstance CoUninitialize CoInitializeEx CoInitialize

oleaut32

SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopyInd VariantCopy VariantClear VariantInit GetErrorInfo SysFreeString SysFreeString SysReAllocStringLen SysAllocStringLen

setupapi

SetupDiGetActualSectionToInstallW SetupDiGetDeviceInstanceIdW SetupDiSetClassInstallParamsW SetupDiGetDeviceInstallParamsW SetupDiSetDeviceRegistryPropertyW SetupDiGetDeviceRegistryPropertyW SetupDiCallClassInstaller SetupDiGetINFClassW SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiCreateDeviceInfoW SetupDiCreateDeviceInfoList SetupGetSourceInfoW SetupGetSourceFileLocationW SetupGetStringFieldW SetupGetIntField SetupIterateCabinetW SetupFindNextLine SetupFindFirstLineW SetupCloseInfFile SetupOpenInfFileW

shell32

SHGetPathFromIDListA SHGetMalloc SHGetDesktopFolder SHBrowseForFolderA ShellExecuteA SHFileOperationW

user32

CreateWindowExA mouse_event keybd_event WindowFromPoint WinHelpA WaitMessage UpdateWindow UnregisterClassA UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoA ShowWindow ShowScrollBar ShowOwnedPopups ShowCursor SetWindowsHookExA SetWindowTextA SetWindowPos SetWindowPlacement SetWindowLongA SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropA SetParent SetMenuItemInfoA SetMenu SetForegroundWindow SetFocus SetCursor SetClipboardData SetClassLongA SetCapture SetActiveWindow SendMessageTimeoutA SendMessageA ScrollWindow ScreenToClient RemovePropA RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageA RegisterClipboardFormatA RegisterClassA RedrawWindow PtInRect PostQuitMessage PostMessageA PeekMessageA OpenClipboard OffsetRect OemToCharA MessageBoxA MessageBeep MapWindowPoints MapVirtualKeyA LoadStringA LoadKeyboardLayoutA LoadIconA LoadCursorA LoadBitmapA KillTimer IsZoomed IsWindowVisible IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageA IsChild InvalidateRect IntersectRect InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId GetWindowTextA GetWindowRect GetWindowPlacement GetWindowLongA GetWindowDC GetUpdateRect GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropA GetParent GetWindow GetMessagePos GetMenuStringA GetMenuState GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextA GetIconInfo GetForegroundWindow GetFocus GetDlgItem GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassNameA GetClassInfoA GetCapture GetActiveWindow FrameRect FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EnumClipboardFormats EndPaint EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextA DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcA DefMDIChildProcA DefFrameProcA CreatePopupMenu CreateMenu CreateIconIndirect CreateIcon CloseClipboard ClientToScreen ChildWindowFromPoint CheckMenuItem CallWindowProcA CallNextHookEx BeginPaint CharNextA CharLowerBuffA CharLowerA CharUpperBuffA CharToOemA AdjustWindowRectEx ActivateKeyboardLayout GetKeyboardType LoadStringA MessageBoxA CharNextA

version

VerQueryValueW VerQueryValueA GetFileVersionInfoSizeW GetFileVersionInfoSizeA GetFileVersionInfoW GetFileVersionInfoA

wininet

InternetSetOptionA InternetReadFile InternetQueryOptionA InternetOpenUrlA InternetOpenA InternetCloseHandle

winspool.drv

OpenPrinterA EnumPrintersA DocumentPropertiesA ClosePrinter