d58195acc0e65c876aa0bfe944d74c464bbc060794915b783c1d621f1be66afe

General

Target
d58195acc0e65c876aa0bfe944d74c464bbc060794915b783c1d621f1be66afe
Size 426KB
Sample241120-3zdcfswckc
SHA256 d58195acc0e65c876aa0bfe944d74c464bbc060794915b783c1d621f1be66afe
MD5 7c7485b7c05aa786d4150206e107f2b8
SHA1 b3659fe570974a758131be7f169c4fa3a58efccf
SHA512 f2d3b435e1dad3bf019792fd31061bd2fb2d745c4ede929cf8603de7aedc1d653245eebdb93ff8308bb9c05f7537238052262b342a42b175521ce5f5021c57e1
SSDEEP 12288:8fLKaJ1Ig1hxgsjtuEiCKRVQuQrbxauuq2MA/vX23jTU:+FJ1SEi7RtQrdaIA/v
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d58195acc0e65c876aa0bfe944d74c464bbc060794915b783c1d621f1be66afe

File Explorer

d58195acc0e65c876aa0bfe944d74c464bbc060794915b783c1d621f1be66afe

.dll 426KB

d58195acc0e65c876aa0bfe944d74c464bbc060794915b783c1d621f1be66afe

IMPHASH 3404930783fa1620e9f519a7ecde3361
SHA256 d58195acc0e65c876aa0bfe944d74c464bbc060794915b783c1d621f1be66afe
MD5 7c7485b7c05aa786d4150206e107f2b8
SHA1 b3659fe570974a758131be7f169c4fa3a58efccf
SHA512 f2d3b435e1dad3bf019792fd31061bd2fb2d745c4ede929cf8603de7aedc1d653245eebdb93ff8308bb9c05f7537238052262b342a42b175521ce5f5021c57e1
SSDEEP 12288:8fLKaJ1Ig1hxgsjtuEiCKRVQuQrbxauuq2MA/vX23jTU:+FJ1SEi7RtQrdaIA/v
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

15501

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

B:\cliprgn_src\Release\ClipRgn.pdb

kernel32

ReadConsoleW ReadFile SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers SetStdHandle HeapReAlloc HeapSize GetStringTypeW SetConsoleCtrlHandler OutputDebugStringW GetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar CreateFileW CloseHandle WriteConsoleW IsBadReadPtr FreeLibrary VirtualQuery VirtualFree VirtualProtect GetNativeSystemInfo GetProcessHeap HeapFree HeapAlloc SetLastError LoadLibraryA GetProcAddress VirtualAllocExNuma VirtualAlloc GetVersionExA GetCurrentProcess GetFileType WriteFileGather IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetCurrentThread FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW DecodePointer

user32

CheckMenuRadioItem GetClassLongA FillRect MapWindowPoints MessageBoxA GetClientRect RedrawWindow ValidateRect EndPaint BeginPaint ReleaseDC GetDCEx GetDC UpdateWindow LoadCursorA CheckMenuItem GetMenuState GetMenu ShowWindow DestroyWindow CreateWindowExA RegisterClassExA PostQuitMessage DefWindowProcA SendMessageA DispatchMessageA TranslateMessage GetMessageA LoadStringA GetSubMenu

gdi32

MoveToEx PathToRegion EndPath CloseFigure BeginPath SelectObject SetMetaRgn SelectClipRgn SaveDC RestoreDC OffsetRgn LineTo FrameRgn DeleteObject CreateSolidBrush CreateRectRgnIndirect CreateRectRgn CreatePen CreateEllipticRgnIndirect CombineRgn

Sharing

General

Malware Config

Signatures

File Explorer

d58195acc0e65c876aa0bfe944d74c464bbc060794915b783c1d621f1be66afe

kernel32

user32

gdi32

generic