7590578f1f5bcc237532984e33425771b150a61a891e7844b149e91f79d691a6

Sharing

Copy URL Twitter E-mail

General

Target
7590578f1f5bcc237532984e33425771b150a61a891e7844b149e91f79d691a6
Size 468KB
Sample260714-x2caaab19j
SHA256 7590578f1f5bcc237532984e33425771b150a61a891e7844b149e91f79d691a6
MD5 cb8e665ac0be3b371ff9a31d6a38e144
SHA1 93beeb3d317b11c8f3625661da785658ef695177
SHA512 fc57e29678f0bf1290f01370eb70a7b7a10c8a8816b7231739b3ab75bf8e6ce52b40db5555c8c41b13035ee21f744d02a7d8a97e7accd5aa8c72e4ee0f7e9128
SSDEEP 6144:zFyqd9QW/UAN6z57d24466sdIqVS+l48ZIWeapwta:zFyy9QrA0UsdIz+l48ZIWekl
TLSH
T11DA41B05B69285E3D42709705A6BE7BF5B2DBA02F9605EBAFB0CCD491F339607538720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7590578f1f5bcc237532984e33425771b150a61a891e7844b149e91f79d691a6

File Explorer

7590578f1f5bcc237532984e33425771b150a61a891e7844b149e91f79d691a6

.dll 468KB

7590578f1f5bcc237532984e33425771b150a61a891e7844b149e91f79d691a6

IMPHASH 1093a7f636388eff4863c130dacbb001
SHA256 7590578f1f5bcc237532984e33425771b150a61a891e7844b149e91f79d691a6
MD5 cb8e665ac0be3b371ff9a31d6a38e144
SHA1 93beeb3d317b11c8f3625661da785658ef695177
SHA512 fc57e29678f0bf1290f01370eb70a7b7a10c8a8816b7231739b3ab75bf8e6ce52b40db5555c8c41b13035ee21f744d02a7d8a97e7accd5aa8c72e4ee0f7e9128
SSDEEP 6144:zFyqd9QW/UAN6z57d24466sdIqVS+l48ZIWeapwta:zFyy9QrA0UsdIz+l48ZIWekl
TLSH
T11DA41B05B69285E3D42709705A6BE7BF5B2DBA02F9605EBAFB0CCD491F339607538720
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegOpenKeyW RegQueryValueExW

comctl32

CreateStatusWindowW ImageList_Destroy ImageList_LoadImageW

gdi32

GetDeviceCaps

kernel32

ActivateActCtx CloseHandle CreateActCtxW CreateFileW CreateProcessW DeactivateActCtx DisableThreadLibraryCalls EnumResourceNamesW ExitProcess FindClose FindFirstFileW FindNextFileW FindResourceW GetEnvironmentVariableW GetModuleFileNameW GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetSystemDirectoryW GetTickCount GlobalAlloc GlobalFree HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryW LoadResource MulDiv MultiByteToWideChar ReleaseActCtx SizeofResource WideCharToMultiByte Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection WriteFile lstrcmpW lstrcmpiW

ntdll

_vsnprintf

ole32

CoCreateInstance CoInitialize CoRegisterClassObject CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CoTaskMemRealloc CoUninitialize CreateOleAdviseHolder CreateStreamOnHGlobal OleRegGetUserType PropVariantClear StgCreateStorageEx

oleaut32

SysAllocString SysAllocStringLen SysFreeString SysStringLen VariantInit VariantClear SafeArrayDestroy SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetElement LoadRegTypeLib SafeArrayCreateVector

shell32

SHGetFolderPathW ShellAboutW ShellExecuteExW

shlwapi

ord167 PathAppendW PathCreateFromUrlW PathFindExtensionW PathIsURLW SHRegCloseUSKey SHRegEnumUSValueW SHRegOpenUSKeyW SHRegQueryUSValueW UrlApplySchemeW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _assert _strdup _wcsdup _wcsnicmp calloc free fwrite getenv malloc memcmp memcpy memmove realloc strchr strcmp strcspn strlen wcschr wcslen wcsncmp wcstol

urlmon

CoInternetParseUrl CreateAsyncBindCtx CreateURLMoniker CreateURLMonikerEx2 ReleaseBindInfo

user32

CreatePopupMenu CreateWindowExW DdeCmpStringHandles DdeCreateStringHandleW DdeFreeStringHandle DdeGetData DdeGetLastError DdeInitializeW DdeNameService DdeUninitialize DefWindowProcW DestroyIcon DestroyWindow DialogBoxParamW DispatchMessageW EnableWindow EndDialog GetClientRect GetDC GetDlgItem GetMenuItemCount GetMenuItemInfoW GetMessageW GetPropW GetSubMenu GetSystemMetrics GetWindowLongW GetWindowTextLengthW GetWindowTextW InsertMenuItemW IsWindowVisible LoadCursorW LoadIconW LoadImageW LoadMenuW LoadStringW PostMessageW PostQuitMessage RegisterClassExW ReleaseDC SendMessageW SetFocus SetMenu SetPropW SetWindowLongW SetWindowPos ShowWindow TranslateMessage UnregisterClassW

Name

.text

Size

184KB

Virtual Size

181KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

652B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

4KB

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

104KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

276B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

260B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

292B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

136KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

7590578f1f5bcc237532984e33425771b150a61a891e7844b149e91f79d691a6

advapi32

comctl32

gdi32

kernel32

ntdll

ole32

oleaut32

shell32

shlwapi

ucrtbase

urlmon

user32

generic