wdhdref

General

Target
wdhdref
Size 403KB
Sample240913-2a487sscrl
SHA256 9913053ba47efd472cb78d5af642b2525a2a173e95598e555aebbd9d8a5f62f0
MD5 5e7634b31f15921f3edf6dfa0aef28e0
SHA1 51464d65ff828b62d5f90237e4f3b74039ff7a02
SHA512 787b0003c08724223eebff94506e200551304a246572bf34056982a3c47a7d899d1d21b010672be306df3520ae90ad17a60fbe4a5da55ea9a7175d65ecbaf541
SSDEEP 6144:ZLLMn4A0lTubbF3jvIpDae9t978L7nx2iSY:ZfM8T0b9r0z9f8JtT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wdhdref

File Explorer

wdhdref

.exe 403KB

IMPHASH 3db609d4227cf2765fb47eb54c2d687e
SHA256 9913053ba47efd472cb78d5af642b2525a2a173e95598e555aebbd9d8a5f62f0
MD5 5e7634b31f15921f3edf6dfa0aef28e0
SHA1 51464d65ff828b62d5f90237e4f3b74039ff7a02
SHA512 787b0003c08724223eebff94506e200551304a246572bf34056982a3c47a7d899d1d21b010672be306df3520ae90ad17a60fbe4a5da55ea9a7175d65ecbaf541
SSDEEP 6144:ZLLMn4A0lTubbF3jvIpDae9t978L7nx2iSY:ZfM8T0b9r0z9f8JtT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

19506

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW CreateJobObjectW InterlockedCompareExchange UnlockFile CreateHardLinkA GetTickCount GetNumberFormatA GetConsoleAliasExesW SetCommState GlobalAlloc LoadLibraryW LocalShrink GetCalendarInfoA CreateEventA SetVolumeMountPointA GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW SetConsoleCP GetFileAttributesA VerifyVersionInfoA CreateActCtxA GetThreadPriorityBoost GetShortPathNameA GetLogicalDriveStringsA GetCurrentDirectoryW SetLastError GetProcAddress PeekConsoleInputW SetDefaultCommConfigW GetProcessVersion LoadLibraryA InterlockedExchangeAdd CreateFileMappingW GetNumberFormatW OpenEventA QueryDosDeviceW SetConsoleWindowInfo GlobalWire GetModuleFileNameA EnumResourceNamesA VirtualProtect EnumDateFormatsW SetProcessShutdownParameters SetFileShortNameA GetDiskFreeSpaceExA ReadConsoleInputW GetTempPathA EnumCalendarInfoExA LCMapStringW HeapReAlloc HeapSize Sleep GetStringTypeW GetCurrentProcess GetLocaleInfoA SetEndOfFile CommConfigDialogA CreateNamedPipeA MultiByteToWideChar GetLastError HeapFree HeapAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess HeapCreate WriteFile GetStdHandle GetModuleFileNameW IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException WideCharToMultiByte

user32

CharUpperW GetSysColor GetMenuStringA GetCaretPos LoadMenuW

gdi32

CreateDCW GetBitmapBits GetCharWidthFloatA GetCharWidth32A

Sharing