3f1a250e9088b63935e59b87d3d4d2796b8e90c7b2fa170e96d24e1a78c46c80

Sharing

Copy URL Twitter E-mail

General

Target
3f1a250e9088b63935e59b87d3d4d2796b8e90c7b2fa170e96d24e1a78c46c80
Size 156KB
Sample260716-vgkd2sdv3x
SHA256 3f1a250e9088b63935e59b87d3d4d2796b8e90c7b2fa170e96d24e1a78c46c80
MD5 be38afb4fcf01b1e4ec220231b7e2d5a
SHA1 22f76805e999553ed12715e0f96e9544a2de9249
SHA512 7b9dc2cde1e93e9dc5af2bbf158b51d5b8ad84eef19259a038c56807dcf4c8eae1c01ae658ed97c7dfd692bf1e8c7b77605eb551964969e62a737343c3f37edf
SSDEEP 3072:hYhKBUVhrPlFiAn+/ORNFtYnrVKu9XtXlVv4ma1uijudals0v2PdGSUFR+Bm:OmUVVPlFiAnd
TLSH
T167F3842463DD41A2F1B36F342AFA47766A33BD25AE39CD1EDF005A6D5832D40DE21722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f1a250e9088b63935e59b87d3d4d2796b8e90c7b2fa170e96d24e1a78c46c80

File Explorer

3f1a250e9088b63935e59b87d3d4d2796b8e90c7b2fa170e96d24e1a78c46c80

.dll 156KB

3f1a250e9088b63935e59b87d3d4d2796b8e90c7b2fa170e96d24e1a78c46c80

IMPHASH 203fcca3e5b602c1957c6ead3a5e296f
SHA256 3f1a250e9088b63935e59b87d3d4d2796b8e90c7b2fa170e96d24e1a78c46c80
MD5 be38afb4fcf01b1e4ec220231b7e2d5a
SHA1 22f76805e999553ed12715e0f96e9544a2de9249
SHA512 7b9dc2cde1e93e9dc5af2bbf158b51d5b8ad84eef19259a038c56807dcf4c8eae1c01ae658ed97c7dfd692bf1e8c7b77605eb551964969e62a737343c3f37edf
SSDEEP 3072:hYhKBUVhrPlFiAn+/ORNFtYnrVKu9XtXlVv4ma1uijudals0v2PdGSUFR+Bm:OmUVVPlFiAnd
TLSH
T167F3842463DD41A2F1B36F342AFA47766A33BD25AE39CD1EDF005A6D5832D40DE21722
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

comctl32

PropertySheetW

gdi32

CreateCompatibleDC DeleteDC GetTextExtentPoint32A GetTextExtentPoint32W

kernel32

GlobalLock GlobalReAlloc GlobalUnlock HeapAlloc HeapReAlloc IsBadStringPtrW

kernelbase

DisableThreadLibraryCalls GetLocaleInfoA GetLocaleInfoEx GetModuleHandleW GetProcAddress GetTickCount GlobalAlloc GlobalFree MulDiv MultiByteToWideChar RegCloseKey RegCreateKeyExA RegGetValueA RegOpenKeyExA RegSetValueExA

ntdll

LdrGetDllHandle NtQueryVirtualMemory RtlFindExportedRoutineByName _vsnprintf

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsdup atoi calloc free fwrite getenv malloc memmove realloc strchr strcmp strcpy strcspn strlen strncmp wcscmp wcstombs

user32

CreateDialogParamW DestroyWindow DispatchMessageW EnableWindow GetDialogBaseUnits GetDlgCtrlID GetDlgItem GetScrollInfo GetWindowRect IsDialogMessageW IsWindowEnabled LoadStringW MessageBoxW PeekMessageW SendDlgItemMessageW SendMessageA SendMessageW SetDlgItemInt SetDlgItemTextW SetWindowPos SetWindowTextA SetWindowTextW ShowWindow TranslateMessage

Name

.text

Size

52KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

412B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1000B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

60KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

3f1a250e9088b63935e59b87d3d4d2796b8e90c7b2fa170e96d24e1a78c46c80

comctl32

gdi32

kernel32

kernelbase

ntdll

ucrtbase

user32

generic