ebd533de7ca16daa70093b0b1084fb6136b6ba091d6ee0e4199762581e1b2e5a[.]bin[.]dll

General

Target
ebd533de7ca16daa70093b0b1084fb6136b6ba091d6ee0e4199762581e1b2e5a.bin.dll
Size 177KB
Sample260702-lkvvhsft9x
SHA256 ebd533de7ca16daa70093b0b1084fb6136b6ba091d6ee0e4199762581e1b2e5a
MD5 028c8658580e8f41da4202a141527f2f
SHA1 747fa43be6508a256ad19b9cdc78215ffb5e355f
SHA512 c350b0c00ff14f11baf34bbf7870225d869d501d2347164a9cdf4d7bf0213854050d81f3a3f01725270b9978f4105fd273b58cfb4f75c8e356e48a9c13ffcd89
SSDEEP 3072:UEjI/dDYjeWeIM77tXePyuW+ox2uUqxmbPV4xp6U+TxnMi4n8HGMIro+gSxRk5ol:jKez/UrxlphYRxn/VAwc
TLSH
T1910439C171D0B0B5C5FA15390D6247FD0E5E78309B36D9ABEE8BB1659DB84E21A20B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebd533de7ca16daa70093b0b1084fb6136b6ba091d6ee0e4199762581e1b2e5a.bin.dll

File Explorer

ebd533de7ca16daa70093b0b1084fb6136b6ba091d6ee0e4199762581e1b2e5a.bin.dll

.dll 177KB

ebd533de7ca16daa70093b0b1084fb6136b6ba091d6ee0e4199762581e1b2e5a.bin.dll

IMPHASH 67285adebb23a85ac78a8132748a8e02
SHA256 ebd533de7ca16daa70093b0b1084fb6136b6ba091d6ee0e4199762581e1b2e5a
MD5 028c8658580e8f41da4202a141527f2f
SHA1 747fa43be6508a256ad19b9cdc78215ffb5e355f
SHA512 c350b0c00ff14f11baf34bbf7870225d869d501d2347164a9cdf4d7bf0213854050d81f3a3f01725270b9978f4105fd273b58cfb4f75c8e356e48a9c13ffcd89
SSDEEP 3072:UEjI/dDYjeWeIM77tXePyuW+ox2uUqxmbPV4xp6U+TxnMi4n8HGMIro+gSxRk5ol:jKez/UrxlphYRxn/VAwc
TLSH
T1910439C171D0B0B5C5FA15390D6247FD0E5E78309B36D9ABEE8BB1659DB84E21A20B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

44462

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

VirtualAlloc TerminateProcess GetModuleFileNameW lstrlenA CreateFileW SetFileAttributesW CreateEventW lstrlenW GetLastError lstrcatW ExitProcess CopyFileW GetCurrentProcess VirtualProtect EnumSystemLocalesA UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW EncodePointer RaiseException InterlockedFlushSList SetLastError RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetModuleHandleExW GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte HeapFree HeapAlloc LCMapStringW GetStdHandle GetFileType GetACP GetFileAttributesExW CreateDirectoryW FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap GetStringTypeW FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode SetStdHandle HeapSize HeapReAlloc CloseHandle SetFilePointerEx WriteConsoleW DecodePointer

user32

MessageBoxW

advapi32

RegSetValueExA RegOpenKeyExW RegCloseKey

Sharing