68065abd6482405614d245537600ea60857c6ec9febac4870486b5227589d35c

Sharing

Copy URL Twitter E-mail

General

Target
68065abd6482405614d245537600ea60857c6ec9febac4870486b5227589d35c
Size 207KB
Sample250901-1k2emasls2
SHA256 68065abd6482405614d245537600ea60857c6ec9febac4870486b5227589d35c
MD5 12a9fff59de1663dec1b45ea2ede22f5
SHA1 d00ac5498d0735d5ae0dea42a1f477cf8b8b0826
SHA512 b62e843b3743b3006bac3121523470cc5ad3ec14246f46bb381e7d77c0e930f54a73058adc2215b9c8f7adfcbf3a14ddc922b6d28b1f4bde560b9a6d47944410
SSDEEP 6144:iuxzRXfyEZzG1hf97yaloowvtJG5g6Jht:iyzNfyEZzOhDoowvtJKpr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68065abd6482405614d245537600ea60857c6ec9febac4870486b5227589d35c

File Explorer

68065abd6482405614d245537600ea60857c6ec9febac4870486b5227589d35c

.dll 207KB

68065abd6482405614d245537600ea60857c6ec9febac4870486b5227589d35c

IMPHASH 11a304421c7c2fc554e2d0e97a11c287
SHA256 68065abd6482405614d245537600ea60857c6ec9febac4870486b5227589d35c
MD5 12a9fff59de1663dec1b45ea2ede22f5
SHA1 d00ac5498d0735d5ae0dea42a1f477cf8b8b0826
SHA512 b62e843b3743b3006bac3121523470cc5ad3ec14246f46bb381e7d77c0e930f54a73058adc2215b9c8f7adfcbf3a14ddc922b6d28b1f4bde560b9a6d47944410
SSDEEP 6144:iuxzRXfyEZzG1hf97yaloowvtJG5g6Jht:iyzNfyEZzOhDoowvtJKpr
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

88204

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

ReadFile GetFileSize FindClose FindNextFileW DeleteFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime FindFirstFileW GetProcAddress GetModuleHandleW CreateFileW SetFilePointer GetLocalTime GetVolumeInformationW CreateProcessW FreeLibrary LoadLibraryW GetFileAttributesW lstrcatW WriteFile GetLastError GetTickCount CreateMutexW GetEnvironmentVariableW WideCharToMultiByte ReleaseMutex WaitForSingleObject GetExitCodeThread CreateThread TerminateThread CloseHandle Sleep FlushFileBuffers WriteConsoleW SetStdHandle GetStringTypeW LCMapStringW MultiByteToWideChar GetConsoleMode GetConsoleCP HeapReAlloc IsValidCodePage GetOEMCP GetACP GetCPInfo EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW DecodePointer EncodePointer HeapFree RtlUnwind RaiseException InterlockedExchange HeapAlloc GetCurrentThreadId GetCommandLineA IsProcessorFeaturePresent GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapSize ExitProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW

user32

wsprintfW

advapi32

RegCreateKeyExW RegEnumKeyExW GetUserNameW RegOpenKeyExW RegQueryValueExW RegCloseKey RegSetValueExW

shell32

ShellExecuteW

ole32

StringFromCLSID

ws2_32

WSACleanup WSAStartup

shlwapi

PathFileExistsW SHDeleteKeyW

urlmon

ObtainUserAgentString

wininet

InternetReadFile HttpAddRequestHeadersW HttpOpenRequestA InternetConnectW InternetOpenW InternetQueryDataAvailable HttpQueryInfoW HttpSendRequestW HttpSendRequestExW InternetCloseHandle

DllCanUnloadNow DllGetClassObject DllGetVersion DllRegisterServer DllUnregisterServer Migrate10CachedPackagesA Migrate10CachedPackagesW MsiAdvertiseProductA MsiAdvertiseProductExA MsiAdvertiseProductExW MsiAdvertiseProductW MsiAdvertiseScriptA MsiAdvertiseScriptW MsiApplyMultiplePatchesA MsiApplyMultiplePatchesW MsiApplyPatchA MsiApplyPatchW MsiBeginTransactionA MsiBeginTransactionW MsiCloseAllHandles MsiCloseHandle MsiCollectUserInfoA MsiCollectUserInfoW MsiConfigureFeatureA MsiConfigureFeatureFromDescriptorA MsiConfigureFeatureFromDescriptorW MsiConfigureFeatureW MsiConfigureProductA MsiConfigureProductExA MsiConfigureProductExW MsiConfigureProductW MsiCreateAndVerifyInstallerDirectory MsiCreateRecord MsiCreateTransformSummaryInfoA MsiCreateTransformSummaryInfoW MsiDatabaseApplyTransformA MsiDatabaseApplyTransformW MsiDatabaseCommit MsiDatabaseExportA MsiDatabaseExportW MsiDatabaseGenerateTransformA MsiDatabaseGenerateTransformW MsiDatabaseGetPrimaryKeysA MsiDatabaseGetPrimaryKeysW MsiDatabaseImportA MsiDatabaseImportW MsiDatabaseIsTablePersistentA MsiDatabaseIsTablePersistentW MsiDatabaseMergeA MsiDatabaseMergeW MsiDatabaseOpenViewA MsiDatabaseOpenViewW MsiDecomposeDescriptorA MsiDecomposeDescriptorW MsiDeleteUserDataA MsiDeleteUserDataW MsiDetermineApplicablePatchesA MsiDetermineApplicablePatchesW MsiDeterminePatchSequenceA MsiDeterminePatchSequenceW MsiDoActionA MsiDoActionW MsiEnableLogA MsiEnableLogW MsiEnableUIPreview MsiEndTransaction MsiEnumClientsA MsiEnumClientsExA MsiEnumClientsExW MsiEnumClientsW MsiEnumComponentCostsA MsiEnumComponentCostsW MsiEnumComponentQualifiersA MsiEnumComponentQualifiersW MsiEnumComponentsA MsiEnumComponentsExA MsiEnumComponentsExW MsiEnumComponentsW MsiEnumFeaturesA MsiEnumFeaturesW MsiEnumPatchesA MsiEnumPatchesExA MsiEnumPatchesExW MsiEnumPatchesW MsiEnumProductsA MsiEnumProductsExA MsiEnumProductsExW MsiEnumProductsW MsiEnumRelatedProductsA MsiEnumRelatedProductsW MsiEvaluateConditionA MsiEvaluateConditionW MsiExtractPatchXMLDataA MsiExtractPatchXMLDataW MsiFormatRecordA MsiFormatRecordW MsiGetActiveDatabase MsiGetComponentPathA MsiGetComponentPathExA MsiGetComponentPathExW MsiGetComponentPathW MsiGetComponentStateA MsiGetComponentStateW MsiGetDatabaseState MsiGetFeatureCostA MsiGetFeatureCostW MsiGetFeatureInfoA MsiGetFeatureInfoW MsiGetFeatureStateA MsiGetFeatureStateW MsiGetFeatureUsageA MsiGetFeatureUsageW MsiGetFeatureValidStatesA MsiGetFeatureValidStatesW MsiGetFileHashA MsiGetFileHashW MsiGetFileSignatureInformationA MsiGetFileSignatureInformationW MsiGetFileVersionA MsiGetFileVersionW MsiGetLanguage MsiGetLastErrorRecord MsiGetMode MsiGetPatchFileListA MsiGetPatchFileListW MsiGetPatchInfoA MsiGetPatchInfoExA MsiGetPatchInfoExW MsiGetPatchInfoW MsiGetProductCodeA MsiGetProductCodeFromPackageCodeA MsiGetProductCodeFromPackageCodeW MsiGetProductCodeW MsiGetProductInfoA MsiGetProductInfoExA MsiGetProductInfoExW MsiGetProductInfoFromScriptA MsiGetProductInfoFromScriptW MsiGetProductInfoW MsiGetProductPropertyA MsiGetProductPropertyW MsiGetPropertyA MsiGetPropertyW MsiGetShortcutTargetA MsiGetShortcutTargetW MsiGetSourcePathA MsiGetSourcePathW MsiGetSummaryInformationA MsiGetSummaryInformationW MsiGetTargetPathA MsiGetTargetPathW MsiGetUserInfoA MsiGetUserInfoW MsiInstallMissingComponentA MsiInstallMissingComponentW MsiInstallMissingFileA MsiInstallMissingFileW MsiInstallProductA MsiInstallProductW MsiInvalidateFeatureCache MsiIsProductElevatedA MsiIsProductElevatedW MsiJoinTransaction MsiLoadStringA MsiLoadStringW MsiLocateComponentA MsiLocateComponentW MsiMessageBoxA MsiMessageBoxExA MsiMessageBoxExW MsiMessageBoxW MsiNotifySidChangeA MsiNotifySidChangeW MsiOpenDatabaseA MsiOpenDatabaseW MsiOpenPackageA MsiOpenPackageExA MsiOpenPackageExW MsiOpenPackageW MsiOpenProductA MsiOpenProductW MsiPreviewBillboardA MsiPreviewBillboardW MsiPreviewDialogA MsiPreviewDialogW MsiProcessAdvertiseScriptA MsiProcessAdvertiseScriptW MsiProcessMessage MsiProvideAssemblyA MsiProvideAssemblyW MsiProvideComponentA MsiProvideComponentFromDescriptorA MsiProvideComponentFromDescriptorW MsiProvideComponentW MsiProvideQualifiedComponentA MsiProvideQualifiedComponentExA MsiProvideQualifiedComponentExW MsiProvideQualifiedComponentW MsiQueryComponentStateA MsiQueryComponentStateW MsiQueryFeatureStateA MsiQueryFeatureStateExA MsiQueryFeatureStateExW MsiQueryFeatureStateFromDescriptorA MsiQueryFeatureStateFromDescriptorW MsiQueryFeatureStateW MsiQueryProductStateA MsiQueryProductStateW MsiRecordClearData MsiRecordDataSize MsiRecordGetFieldCount MsiRecordGetInteger MsiRecordGetStringA MsiRecordGetStringW MsiRecordIsNull MsiRecordReadStream MsiRecordSetInteger MsiRecordSetStreamA MsiRecordSetStreamW MsiRecordSetStringA MsiRecordSetStringW MsiReinstallFeatureA MsiReinstallFeatureFromDescriptorA MsiReinstallFeatureFromDescriptorW MsiReinstallFeatureW MsiReinstallProductA MsiReinstallProductW MsiRemovePatchesA MsiRemovePatchesW MsiSequenceA MsiSequenceW MsiSetComponentStateA MsiSetComponentStateW MsiSetExternalUIA MsiSetExternalUIRecord MsiSetExternalUIW MsiSetFeatureAttributesA MsiSetFeatureAttributesW MsiSetFeatureStateA MsiSetFeatureStateW MsiSetInstallLevel MsiSetInternalUI MsiSetMode MsiSetOfflineContextW MsiSetPropertyA MsiSetPropertyW MsiSetTargetPathA MsiSetTargetPathW MsiSourceListAddMediaDiskA MsiSourceListAddMediaDiskW MsiSourceListAddSourceA MsiSourceListAddSourceExA MsiSourceListAddSourceExW MsiSourceListAddSourceW MsiSourceListClearAllA MsiSourceListClearAllExA MsiSourceListClearAllExW MsiSourceListClearAllW MsiSourceListClearMediaDiskA MsiSourceListClearMediaDiskW MsiSourceListClearSourceA MsiSourceListClearSourceW MsiSourceListEnumMediaDisksA MsiSourceListEnumMediaDisksW MsiSourceListEnumSourcesA MsiSourceListEnumSourcesW MsiSourceListForceResolutionA MsiSourceListForceResolutionExA MsiSourceListForceResolutionExW MsiSourceListForceResolutionW MsiSourceListGetInfoA MsiSourceListGetInfoW MsiSourceListSetInfoA MsiSourceListSetInfoW MsiSummaryInfoGetPropertyA MsiSummaryInfoGetPropertyCount MsiSummaryInfoGetPropertyW MsiSummaryInfoPersist MsiSummaryInfoSetPropertyA MsiSummaryInfoSetPropertyW MsiUseFeatureA MsiUseFeatureExA MsiUseFeatureExW MsiUseFeatureW MsiVerifyDiskSpace MsiVerifyPackageA MsiVerifyPackageW MsiViewClose MsiViewExecute MsiViewFetch MsiViewGetColumnInfo MsiViewGetErrorA MsiViewGetErrorW MsiViewModify QueryInstanceCount

Sharing

General

Malware Config

Signatures

File Explorer

68065abd6482405614d245537600ea60857c6ec9febac4870486b5227589d35c

kernel32

user32

advapi32

shell32

ole32

ws2_32

shlwapi

urlmon

wininet

generic