74f7dd4a022f3a6eb3e860807349485c16f6208e6974658a7d8a6ee88c2cc5c7

General

Target
74f7dd4a022f3a6eb3e860807349485c16f6208e6974658a7d8a6ee88c2cc5c7
Size 3.9MB
Sample260710-ppgp8sbw3j
SHA256 74f7dd4a022f3a6eb3e860807349485c16f6208e6974658a7d8a6ee88c2cc5c7
MD5 1c714cbafb93c3d9b1c95d420dee061e
SHA1 66188d5a12e0bfb17daaa4725801c7288bc7fcaf
SHA512 573770025cd3fcfe5a2236e6d77b1c041d70dc886003e805ea6c9f2fd0a65b7be26464d25c4a103f69cc1e8adb14b7ab9d10cea939d98eacf7247d806f73ed28
SSDEEP 98304:4MMrpEVTBRLkf4dXmJUxnvbka/UiXTwc:4MKpEVTBRLG4BZzsij
TLSH
T1C91612076CC01275E2F38335E1DB064BE3C1A10AEA9BAE1D359918421792D977A8F77F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74f7dd4a022f3a6eb3e860807349485c16f6208e6974658a7d8a6ee88c2cc5c7

File Explorer

74f7dd4a022f3a6eb3e860807349485c16f6208e6974658a7d8a6ee88c2cc5c7

.dll 3.9MB

74f7dd4a022f3a6eb3e860807349485c16f6208e6974658a7d8a6ee88c2cc5c7

IMPHASH 9f9988c72d0a57e1af8c3a28ee1248af
SHA256 74f7dd4a022f3a6eb3e860807349485c16f6208e6974658a7d8a6ee88c2cc5c7
MD5 1c714cbafb93c3d9b1c95d420dee061e
SHA1 66188d5a12e0bfb17daaa4725801c7288bc7fcaf
SHA512 573770025cd3fcfe5a2236e6d77b1c041d70dc886003e805ea6c9f2fd0a65b7be26464d25c4a103f69cc1e8adb14b7ab9d10cea939d98eacf7247d806f73ed28
SSDEEP 98304:4MMrpEVTBRLkf4dXmJUxnvbka/UiXTwc:4MKpEVTBRLG4BZzsij
TLSH
T1C91612076CC01275E2F38335E1DB064BE3C1A10AEA9BAE1D359918421792D977A8F77F
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

33700

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryW Sleep ReadFile GetModuleFileNameW CreateFileW GetLastError SetLastError GetProcAddress VirtualAlloc LoadLibraryA GlobalMemoryStatusEx WriteFile GetModuleFileNameA CloseHandle GetCurrentProcessId GetModuleHandleW WriteConsoleW SetStdHandle HeapSize GetSystemTimeAsFileTime VirtualFree GetTickCount GetCurrentProcess FreeLibrary GetSystemInfo GetFileSize GetStringTypeW GetConsoleMode GetConsoleCP SetFilePointer QueryPerformanceCounter GetEnvironmentStringsW HeapFree HeapAlloc HeapReAlloc ExitProcess DecodePointer GetCurrentThreadId FlsSetValue GetCommandLineA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapSetInformation GetVersion HeapCreate HeapDestroy GetStdHandle EncodePointer GetCPInfo GetACP GetOEMCP IsValidCodePage FlsGetValue FlsFree FlsAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection RtlUnwindEx RaiseException RtlPcToFileHeader SetHandleCount GetFileType GetStartupInfoW FreeEnvironmentStringsW FlushFileBuffers

user32

EnumWindows IsWindowVisible MessageBoxA FindWindowExA GetWindowTextA

advapi32

RegFlushKey RegOpenKeyExA RegCreateKeyExA RegQueryValueExA RegSetValueExA RegCloseKey

rpcrt4

RpcStringFreeA UuidCreate UuidToStringA

Name

.text

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.t'Q

Size

3.8MB

Virtual Size

3.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

860B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

74f7dd4a022f3a6eb3e860807349485c16f6208e6974658a7d8a6ee88c2cc5c7

kernel32

user32

advapi32

rpcrt4

generic