77120cd819c7408d38d0fa99dcae0dca82bf6b506ec0e435857f160707672de4

Sharing

Copy URL Twitter E-mail

General

Target
77120cd819c7408d38d0fa99dcae0dca82bf6b506ec0e435857f160707672de4
Size 233KB
Sample240619-3d4brawglc
SHA256 77120cd819c7408d38d0fa99dcae0dca82bf6b506ec0e435857f160707672de4
MD5 2a238ee5d92d0572c4d65284b3bfd643
SHA1 3f1a55cca656cf52344a8785ed7034bc419734a4
SHA512 d681d1fe00bd02bc37c54eca40a62103ed34494f4e0acf03b0b871388a673a6cc60811859486396c8fd2dc528e50548c2fcdf6633c3782782e83cc02185cdb7e
SSDEEP 6144:xAhw85cgrrdSV1U773PfeUVS8hbQzX4DT3OKNz:x+nVhSV1U33P2UVbBAWz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77120cd819c7408d38d0fa99dcae0dca82bf6b506ec0e435857f160707672de4

File Explorer

77120cd819c7408d38d0fa99dcae0dca82bf6b506ec0e435857f160707672de4

.dll 233KB

77120cd819c7408d38d0fa99dcae0dca82bf6b506ec0e435857f160707672de4

IMPHASH 483d40359f0235b62e35a1791e343595
SHA256 77120cd819c7408d38d0fa99dcae0dca82bf6b506ec0e435857f160707672de4
MD5 2a238ee5d92d0572c4d65284b3bfd643
SHA1 3f1a55cca656cf52344a8785ed7034bc419734a4
SHA512 d681d1fe00bd02bc37c54eca40a62103ed34494f4e0acf03b0b871388a673a6cc60811859486396c8fd2dc528e50548c2fcdf6633c3782782e83cc02185cdb7e
SSDEEP 6144:xAhw85cgrrdSV1U773PfeUVS8hbQzX4DT3OKNz:x+nVhSV1U33P2UVbBAWz
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

107490

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\code\git\pluginstall\pdb\IEPlugin.pdb

kernel32

CloseHandle Process32NextW Process32FirstW CreateToolhelp32Snapshot InitializeCriticalSection DeleteCriticalSection WriteFile SetFilePointer ReadFile GetFileSize CreateFileW FindNextFileW FindFirstFileW DeleteFileW GetLastError ResumeThread CreateProcessW VirtualQuery VirtualProtect VirtualAlloc InterlockedCompareExchange GetCurrentThreadId FlushInstructionCache GetCurrentProcess GetThreadContext SetThreadContext SuspendThread GetCurrentThread SetLastError GetModuleHandleW RaiseException InitializeCriticalSectionAndSpinCount InterlockedIncrement InterlockedDecrement LoadLibraryW GetModuleFileNameW EnterCriticalSection LeaveCriticalSection lstrlenW GetTickCount IsBadReadPtr lstrcmpiW MultiByteToWideChar LoadLibraryExW DeviceIoControl Sleep WritePrivateProfileStringW GetPrivateProfileIntW GetPrivateProfileStringW WaitForSingleObject MoveFileExW SetThreadPriority CreateThread SetThreadLocale GetThreadLocale ResetEvent CreateEventW GetModuleFileNameA OutputDebugStringA FormatMessageA lstrlenA WideCharToMultiByte GetTempPathW CompareStringW FlushFileBuffers WriteConsoleW GetProcAddress GetFileAttributesW FindResourceExW FindResourceW LoadResource LockResource FreeLibrary SizeofResource SetStdHandle GetConsoleMode GetConsoleCP SetEnvironmentVariableA GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStartupInfoW GetFileType SetHandleCount GetTimeZoneInformation HeapCreate GetStdHandle GetStringTypeW ExitProcess LCMapStringW TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetOEMCP GetACP GetCPInfo IsProcessorFeaturePresent TerminateProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCommandLineA GetSystemTimeAsFileTime DecodePointer EncodePointer RtlUnwind GetProcessHeap HeapSize HeapReAlloc HeapFree HeapAlloc HeapDestroy

user32

wsprintfW CharNextW

advapi32

RegQueryInfoKeyW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegCloseKey RegOpenKeyExW RegEnumKeyExW

shell32

CommandLineToArgvW SHGetSpecialFolderPathW

ole32

CoUninitialize CoInitialize StringFromGUID2 CoCreateInstance CoTaskMemRealloc CoTaskMemFree CoTaskMemAlloc

oleaut32

LoadTypeLi VariantChangeType VariantClear SysFreeString VarUI4FromStr SysStringLen LoadRegTypeLi SysAllocString UnRegisterTypeLi RegisterTypeLi VariantInit

shlwapi

PathAppendW PathMatchSpecW PathRemoveFileSpecW PathFileExistsW StrStrIW

wininet

InternetOpenW InternetOpenUrlW InternetReadFile InternetCloseHandle HttpQueryInfoW InternetCreateUrlW InternetCrackUrlW

ws2_32

ntohs WSAStartup WSAGetLastError getpeername

winhttp

WinHttpCrackUrl WinHttpOpen WinHttpConnect WinHttpCloseHandle WinHttpReadData WinHttpSendRequest WinHttpReceiveResponse WinHttpOpenRequest

imagehlp

CheckSumMappedFile

Sharing

General

Malware Config

Signatures

File Explorer

77120cd819c7408d38d0fa99dcae0dca82bf6b506ec0e435857f160707672de4

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

wininet

ws2_32

winhttp

imagehlp

generic