d302b8e7590f9a0e1d6bd9d12b2636957dbd05acb18452243a373c7edba6b7bc

Sharing

Copy URL Twitter E-mail

General

Target
d302b8e7590f9a0e1d6bd9d12b2636957dbd05acb18452243a373c7edba6b7bc
Size 232KB
Sample260723-rel83sytes
SHA256 d302b8e7590f9a0e1d6bd9d12b2636957dbd05acb18452243a373c7edba6b7bc
MD5 524442f9a1a1cb61677e95f3ddd080c6
SHA1 4bac28c9e338c75b73672f8dc2595091e23a57b7
SHA512 3477f065893576f791d42273c1729f9114b607bb67ce026205eef50e6580cf1aa7117d9994965ceb206c0db30411d1168a31d8bf8adc8005c7b1b486d532a760
SSDEEP 3072:cnLlKp2M1giaha9qyrCDM/XICr0yoitNaRcp7fMQWF/YrrDD2ojcnU7YtyiZg4P:cnaRghPy+DMfIINOYrSUOyq
TLSH
T180349D0275A0C0BAD79F02354DAB6F7A77BDA9A08F62CA837314DF1C5D32B806727156
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d302b8e7590f9a0e1d6bd9d12b2636957dbd05acb18452243a373c7edba6b7bc

File Explorer

d302b8e7590f9a0e1d6bd9d12b2636957dbd05acb18452243a373c7edba6b7bc

.dll 232KB

d302b8e7590f9a0e1d6bd9d12b2636957dbd05acb18452243a373c7edba6b7bc

IMPHASH 6c4b0a7109ba8b75b0a1b2c75a26ed88
SHA256 d302b8e7590f9a0e1d6bd9d12b2636957dbd05acb18452243a373c7edba6b7bc
MD5 524442f9a1a1cb61677e95f3ddd080c6
SHA1 4bac28c9e338c75b73672f8dc2595091e23a57b7
SHA512 3477f065893576f791d42273c1729f9114b607bb67ce026205eef50e6580cf1aa7117d9994965ceb206c0db30411d1168a31d8bf8adc8005c7b1b486d532a760
SSDEEP 3072:cnLlKp2M1giaha9qyrCDM/XICr0yoitNaRcp7fMQWF/YrrDD2ojcnU7YtyiZg4P:cnaRghPy+DMfIINOYrSUOyq
TLSH
T180349D0275A0C0BAD79F02354DAB6F7A77BDA9A08F62CA837314DF1C5D32B806727156
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

61480

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalFlags WritePrivateProfileStringA GetModuleHandleA GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA GetProcessVersion FileTimeToSystemTime FileTimeToLocalFileTime GetCPInfo GetOEMCP HeapAlloc RtlUnwind GetCommandLineA HeapFree GetTimeZoneInformation GetSystemTime HeapReAlloc ExitProcess TerminateProcess RaiseException HeapSize GetACP GetEnvironmentVariableA GetVersionExA HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetStdHandle GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetUnhandledExceptionFilter IsBadReadPtr IsBadCodePtr CompareStringA CompareStringW SetEnvironmentVariableA GetFileTime GetFileSize GetFileAttributesA SetLastError GetVersion lstrcatA SetErrorMode TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle GlobalUnlock GlobalFree DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetCurrentThread LocalFree WideCharToMultiByte InterlockedDecrement InterlockedIncrement lstrcmpiA GetFullPathNameA lstrcpynA GetVolumeInformationA FindFirstFileA FindClose lstrcpyA lstrlenA MultiByteToWideChar SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer GetCurrentProcess DuplicateHandle GetCurrentThreadId FreeLibrary CreateThread SetEvent CreateEventA Sleep ResetEvent WaitForSingleObject TerminateThread GetLocalTime OutputDebugStringA LoadLibraryA GetProcAddress ReadFile WriteFile CloseHandle GetLastError CreateFileA HeapDestroy GetModuleFileNameA

user32

DefWindowProcA RemovePropA CallWindowProcA GetPropA SetPropA GetClassLongA CreateWindowExA DestroyWindow GetMenuItemID GetSubMenu GetMenu RegisterClassA GetClassInfoA WinHelpA GetCapture GetTopWindow CopyRect GetClientRect AdjustWindowRectEx GetSysColor MapWindowPoints LoadIconA LoadCursorA GetSysColorBrush DestroyMenu RegisterWindowMessageA SystemParametersInfoA IsIconic GetWindowPlacement SetFocus ShowWindow SetWindowLongA GetDlgItem GetMessageTime DrawTextA TabbedTextOutA ReleaseDC GetDC GetMenuItemCount GetWindowTextA SetWindowTextA ClientToScreen GetWindow GetDlgCtrlID PtInRect GetClassNameA LoadStringA UnregisterClassA UnhookWindowsHookEx LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA GetLastActivePopup IsWindowEnabled MessageBoxA EnableWindow SetCursor SendMessageA PostQuitMessage PostMessageA SetForegroundWindow SetWindowPos GetParent GetSystemMetrics CharUpperA wsprintfA GetWindowRect GetWindowLongA GetMessagePos GrayStringA GetForegroundWindow GetMenuCheckMarkDimensions

gdi32

SetTextColor SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx GetClipBox SetBkColor PtVisible RectVisible TextOutA ExtTextOutA Escape GetStockObject RestoreDC SaveDC CreateBitmap GetDeviceCaps SelectObject DeleteDC GetObjectA DeleteObject

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA ClosePrinter DocumentPropertiesA

advapi32

RegOpenKeyExA RegSetValueExA RegCreateKeyExA RegCloseKey

comctl32

ord17

ole32

CoInitialize CoUninitialize

setupapi

SetupDiGetDeviceInterfaceDetailA SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA SetupDiDestroyDeviceInfoList

Beeps CPU_Command CPU_Reset CPU_SelectType CloseUsb GK_GetFileProperty GK_UpdateFW GK_UpdateFW_Key Gk_CreateDir Gk_CreateFile Gk_DeleteDir Gk_DeleteFile Gk_Dir Gk_Format Gk_GetFileSize Gk_GetFreeSpace Gk_GetResponse Gk_ReadFile Gk_WriteFile Infrared_CheckKeyExist Infrared_Close Infrared_Command Infrared_GetKeyUpgradeStatus Infrared_Open Infrared_SetBaud K_AddRecord K_AddRecordEx K_AuthWriteKey K_ClearRecordFile K_CreateHexFile K_CreateRecordFile K_DeleteFile K_DeleteRecord K_EncData K_FindRecord K_Format K_GetChallenge K_GetClock K_GetID K_ReadFileAttribute K_ReadHexFile K_ReadRecord K_ReadRecordEx K_SetClock K_SetDelay K_WriteHexFile M1_AddVal M1_Anticoll M1_AuthKey M1_ChangeCB M1_Config M1_DecVal M1_DirectAuthKey M1_Halt M1_LoadKey M1_ReadCard M1_ReadSect M1_ReadVal M1_Request M1_RestCard M1_SearchCard M1_Select M1_WriteAccount M1_WriteCard M1_WriteSect M1_initValue OpenUsb OpenUsbEx RD_AddRecord RD_AddRecordEx RD_CreateRecordFile RD_DeleteFile RD_DeleteRecord RD_FindRecord RD_FormatRAM RD_ReadAccount RD_ReadFileAttribute RD_ReadRecord RD_ReadRecordEx RD_WriteAccount ReadStatus

Sharing

General

Malware Config

Signatures

File Explorer

d302b8e7590f9a0e1d6bd9d12b2636957dbd05acb18452243a373c7edba6b7bc

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

ole32

setupapi

generic