80620c675ce852ca632fa44a0d3ca7fab1aa32a746df9a439d4cf7ea6363ef3e

Sharing

Copy URL Twitter E-mail

General

Target
80620c675ce852ca632fa44a0d3ca7fab1aa32a746df9a439d4cf7ea6363ef3e
Size 529KB
Sample241120-tw86aazeqm
SHA256 80620c675ce852ca632fa44a0d3ca7fab1aa32a746df9a439d4cf7ea6363ef3e
MD5 0fb0e86f4f087943fee9c1b8a16926fb
SHA1 750c566d6e29dfec05ab703adc50e717a07c7853
SHA512 928ca5e97e05f56ec5a812987517b55f0763b88181be86d76e19e5ea7c67ba9e4ff92e84d727335adccb1839b0777a2c615e121e6e93c28589848a0056cf9079
SSDEEP 6144:CvmTyW3ZBck+bvI0dfzJoQ/hVOjkIrkYK3GK6VWWOI0edWx7IBq9B:Cw09X38SGtWWOwdWlIB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80620c675ce852ca632fa44a0d3ca7fab1aa32a746df9a439d4cf7ea6363ef3e

File Explorer

80620c675ce852ca632fa44a0d3ca7fab1aa32a746df9a439d4cf7ea6363ef3e

.dll 529KB

80620c675ce852ca632fa44a0d3ca7fab1aa32a746df9a439d4cf7ea6363ef3e

IMPHASH dd552575e0cf9d6f021ffe8e0937be8a
SHA256 80620c675ce852ca632fa44a0d3ca7fab1aa32a746df9a439d4cf7ea6363ef3e
MD5 0fb0e86f4f087943fee9c1b8a16926fb
SHA1 750c566d6e29dfec05ab703adc50e717a07c7853
SHA512 928ca5e97e05f56ec5a812987517b55f0763b88181be86d76e19e5ea7c67ba9e4ff92e84d727335adccb1839b0777a2c615e121e6e93c28589848a0056cf9079
SSDEEP 6144:CvmTyW3ZBck+bvI0dfzJoQ/hVOjkIrkYK3GK6VWWOI0edWx7IBq9B:Cw09X38SGtWWOwdWlIB
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24616

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

gdiplus

GdipCreateSolidFill GdipDisposeImage GdipDrawImageI GdipDrawLineI GdipDeletePen GdipCreatePen1 GdipDrawString GdipDeleteFont GdipCreateFont GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipFillRectangleI GdipFree GdipCloneBrush GdipDeleteBrush GdipCreateLineBrushFromRectI GdipGetImageGraphicsContext GdipCreateBitmapFromScan0 GdipGetVisibleClipBoundsI GdipDeleteGraphics GdipCreateFromHDC GdiplusStartup GdipCloneImage GdipAlloc

crypt32

CryptStringToBinaryA

kernel32

LCMapStringW HeapSize GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetStartupInfoW GetFileType SetHandleCount GetConsoleMode GetConsoleCP MultiByteToWideChar HeapDestroy SetFilePointer CreateThread GetCommandLineW GetVersionExA CreateToolhelp32Snapshot GetLastError GetCurrentProcessId Process32First Process32Next CloseHandle VirtualAlloc CreateMutexA WaitForSingleObject ReleaseMutex SetThreadExecutionState DeviceIoControl FormatMessageW Sleep CreateFileW GetFileInformationByHandle FlushFileBuffers GetSystemTime FindFirstFileW FindNextFileW FindClose GetSystemTimeAsFileTime GetFileAttributesExW GetCurrentProcess GetVolumePathNameW GetVolumeNameForVolumeMountPointW GetDiskFreeSpaceExW GetDriveTypeW GetVolumeInformationW FindFirstVolumeMountPointW FindNextVolumeMountPointW FindVolumeMountPointClose GetLogicalDriveStringsW GetModuleFileNameW GetShortPathNameW GetLongPathNameW DosDateTimeToFileTime LocalFileTimeToFileTime ReadFile GetStdHandle WriteFile RtlUnwindEx HeapSetInformation LoadLibraryW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetStringTypeW FlsAlloc SetLastError FlsFree SetStdHandle WriteConsoleW SetEndOfFile GetProcessHeap CompareStringW SystemTimeToFileTime SetEnvironmentVariableA FlsGetValue IsValidCodePage HeapCreate GetVersion GetProcAddress GetModuleHandleW ExitProcess DecodePointer HeapAlloc GetTimeZoneInformation HeapFree HeapReAlloc DeleteFileW GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer WideCharToMultiByte GetCPInfo GetACP GetOEMCP

user32

DefWindowProcA EndPaint BeginPaint InvalidateRect PostQuitMessage DispatchMessageA TranslateMessage GetMessageA SetTimer UpdateWindow CreateWindowExW MessageBoxW RegisterClassExA LoadIconA LoadCursorA ShowWindow LoadStringA

gdi32

GetStockObject

advapi32

RegQueryValueExW RegCreateKeyExW AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey

shell32

CommandLineToArgvW

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

80620c675ce852ca632fa44a0d3ca7fab1aa32a746df9a439d4cf7ea6363ef3e

gdiplus

crypt32

kernel32

user32

gdi32

advapi32

shell32

ole32

generic