f6241dc2ed116a30eb0bc27059b5decf93c879610ee23a488446c67ca6b809d2

Sharing

Copy URL Twitter E-mail

General

Target
f6241dc2ed116a30eb0bc27059b5decf93c879610ee23a488446c67ca6b809d2
Size 136KB
Sample260714-x2cwtab19k
SHA256 f6241dc2ed116a30eb0bc27059b5decf93c879610ee23a488446c67ca6b809d2
MD5 25a57cecec596eff4e940afbf0a5065c
SHA1 af7e3967be74a8b6c16e4f95f4e1bf9558d44ae7
SHA512 cc06775fc9ec574b4808a816993542c7c291f376c4e29db78ffcec378d7995ebdf42d48e1b288bee196ff862847576f1eaaa1b5bba0750c52911a184f41f49e5
SSDEEP 1536:iZ2geaBx3+/RKkaznZjibJOT6qym3tIxFWkxWu:iZ2SDeYkaz+By3S3Zx
TLSH
T187D3F871E7979071E0720F3D2A59D3BEA7753670CBEACD0BEF0499C939229B4A624701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6241dc2ed116a30eb0bc27059b5decf93c879610ee23a488446c67ca6b809d2

File Explorer

f6241dc2ed116a30eb0bc27059b5decf93c879610ee23a488446c67ca6b809d2

.dll 136KB

f6241dc2ed116a30eb0bc27059b5decf93c879610ee23a488446c67ca6b809d2

IMPHASH 1f6c4cf30547cc72910d536429f057d9
SHA256 f6241dc2ed116a30eb0bc27059b5decf93c879610ee23a488446c67ca6b809d2
MD5 25a57cecec596eff4e940afbf0a5065c
SHA1 af7e3967be74a8b6c16e4f95f4e1bf9558d44ae7
SHA512 cc06775fc9ec574b4808a816993542c7c291f376c4e29db78ffcec378d7995ebdf42d48e1b288bee196ff862847576f1eaaa1b5bba0750c52911a184f41f49e5
SSDEEP 1536:iZ2geaBx3+/RKkaznZjibJOT6qym3tIxFWkxWu:iZ2SDeYkaz+By3S3Zx
TLSH
T187D3F871E7979071E0720F3D2A59D3BEA7753670CBEACD0BEF0499C939229B4A624701
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5760

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegDeleteValueA RegEnumValueA RegOpenKeyExA RegSetValueExA

comctl32

InitCommonControlsEx

gdi32

CreateCompatibleDC CreateDIBSection CreateHalftonePalette DeleteDC DeleteObject RealizePalette SelectObject SelectPalette StretchBlt

kernel32

DisableThreadLibraryCalls FreeLibrary GetModuleHandleW GetPrivateProfileSectionA GetPrivateProfileStringW GetProcAddress GetTickCount GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryA MulDiv MultiByteToWideChar RaiseException WideCharToMultiByte lstrcmpW

ntdll

RtlCreateUnicodeStringFromAsciiz RtlFreeUnicodeString _vsnprintf

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _strdup _strnicmp _wcsdup calloc free fwrite getenv isprint malloc memcmp memcpy memmove strchr strcmp strcspn strlen tolower wcschr wcslen

user32

AdjustWindowRect BeginPaint CreateWindowExW DefMDIChildProcW DefWindowProcW DestroyWindow DialogBoxParamW EnableWindow EndDialog EndPaint GetClientRect GetDlgItem GetWindow GetWindowLongW InvalidateRect IsWindowUnicode KillTimer LoadCursorW LoadStringW MessageBoxW RegisterClassW SendDlgItemMessageW SendMessageW SetCursor SetFocus SetTimer SetWindowLongW SetWindowPos SetWindowTextA SetWindowTextW ShowWindow wsprintfA wsprintfW

winmm

CloseDriver OpenDriver SendDriverMessage mciGetErrorStringA mciGetErrorStringW mciSendCommandA mciSendCommandW mciSendStringA mciSendStringW mmioStringToFOURCCA

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

4KB

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

36KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

f6241dc2ed116a30eb0bc27059b5decf93c879610ee23a488446c67ca6b809d2

advapi32

comctl32

gdi32

kernel32

ntdll

ucrtbase

user32

winmm

generic