d80d802deb1cdef5da47c360a90b398076a02d4946e9154b10d68cf8e07497ce

General

Target
d80d802deb1cdef5da47c360a90b398076a02d4946e9154b10d68cf8e07497ce
Size 88KB
Sample260729-bb9bfa1clg
SHA256 d80d802deb1cdef5da47c360a90b398076a02d4946e9154b10d68cf8e07497ce
MD5 1cc38c690e8ae4ec7dc91d0283441f9f
SHA1 a5c18be2c408613149f21a04f163ffe19d0016b8
SHA512 ae1f204ecddb7928549f7e172e680a89f4f7686836fb4a85466626409fc12ebddfc2c8ddec9d204cc5b2aa3ef4720d0fa02d8355100c1a7555094480fec4e1fd
SSDEEP 768:EZG9d3dgvDIYBd/zDLapIIMSteQ2EsSK3VJ5PBI9ArumzSAEPA93odpQOhk+ZTRH:ZNJYBguIMueNhrPyyuTJ5fJ/KdrAe3m
TLSH
T1DF934A04E3E11069E6E2C5357A756712D336FD016BB0A2DF1795091AAEF5FC0BE38BA0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d80d802deb1cdef5da47c360a90b398076a02d4946e9154b10d68cf8e07497ce

File Explorer

d80d802deb1cdef5da47c360a90b398076a02d4946e9154b10d68cf8e07497ce

.dll 88KB

d80d802deb1cdef5da47c360a90b398076a02d4946e9154b10d68cf8e07497ce

IMPHASH 9f09597b8e590d9140e267c12e8953e2
SHA256 d80d802deb1cdef5da47c360a90b398076a02d4946e9154b10d68cf8e07497ce
MD5 1cc38c690e8ae4ec7dc91d0283441f9f
SHA1 a5c18be2c408613149f21a04f163ffe19d0016b8
SHA512 ae1f204ecddb7928549f7e172e680a89f4f7686836fb4a85466626409fc12ebddfc2c8ddec9d204cc5b2aa3ef4720d0fa02d8355100c1a7555094480fec4e1fd
SSDEEP 768:EZG9d3dgvDIYBd/zDLapIIMSteQ2EsSK3VJ5PBI9ArumzSAEPA93odpQOhk+ZTRH:ZNJYBguIMueNhrPyyuTJ5fJ/KdrAe3m
TLSH
T1DF934A04E3E11069E6E2C5357A756712D336FD016BB0A2DF1795091AAEF5FC0BE38BA0
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

35056

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d3d9

Direct3DCreate9

ddraw

DirectDrawCreateEx

dsound

DirectSoundCaptureEnumerateW DirectSoundEnumerateW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

ole32

CLSIDFromString CoCreateInstance CoTaskMemFree PropVariantClear StringFromGUID2

oleaut32

SafeArrayAccessData SafeArrayUnaccessData SysAllocString SysFreeString VariantChangeType VariantClear VariantCopy VariantInit

user32

EnumDisplayDevicesW LoadStringW wsprintfW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsicmp _wcsnicmp free fwrite getenv memcpy memmove strchr strcmp strcpy strcspn strlen wcschr wcslen wcsrchr wcsstr

kernel32

CloseHandle DisableThreadLibraryCalls EnumResourceNamesW FindResourceW FormatMessageW GetComputerNameW GetDateFormatW GetEnvironmentVariableW GetLocalTime GetLocaleInfoW GetModuleFileNameW GetModuleHandleW GetProcAddress GetSystemDirectoryW GetTickCount GetTimeFormatW GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx HeapAlloc HeapFree HeapReAlloc IsBadStringPtrW K32EnumProcessModules K32EnumProcesses K32GetModuleBaseNameW LoadLibraryW LoadResource MultiByteToWideChar OpenProcess SizeofResource __chkstk lstrcmpW

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

d80d802deb1cdef5da47c360a90b398076a02d4946e9154b10d68cf8e07497ce

d3d9

ddraw

dsound

version

ole32

oleaut32

user32

ucrtbase

kernel32

ntdll

generic