e8e23202bdd71e8e544b7595a66ef1e08c2102616025c0218a1da366c7e42ca9

Sharing

Copy URL Twitter E-mail

General

Target
e8e23202bdd71e8e544b7595a66ef1e08c2102616025c0218a1da366c7e42ca9
Size 208KB
Sample260729-bkbfrsdc78
SHA256 e8e23202bdd71e8e544b7595a66ef1e08c2102616025c0218a1da366c7e42ca9
MD5 08a66b6a05510a82c96995a8cca4ef66
SHA1 77264be4a66348f67087bdda677b574a52fba484
SHA512 523341cbdb2af13607a1228fb7bdc85dc2a8f540dc1f95e58b867c5265fe813dbb051e6482d30ba706cdc0d75139ed77253894f144605f96d7e0c5337429bb87
SSDEEP 3072:7B74hFfFhOABuEoGSBxc7PLEqnk5dHYElT0KLZ388G7Od37Yipb76AG37sRab3fs:mFdAABtKBxm
TLSH
T10524A46227E4D219F4B25B386AB913912F66BC43AF74C18FA680754E08B4BE0DD75733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8e23202bdd71e8e544b7595a66ef1e08c2102616025c0218a1da366c7e42ca9

File Explorer

e8e23202bdd71e8e544b7595a66ef1e08c2102616025c0218a1da366c7e42ca9

.dll 208KB

e8e23202bdd71e8e544b7595a66ef1e08c2102616025c0218a1da366c7e42ca9

IMPHASH a6c63e74e40e03bd6840c3f1001ffbab
SHA256 e8e23202bdd71e8e544b7595a66ef1e08c2102616025c0218a1da366c7e42ca9
MD5 08a66b6a05510a82c96995a8cca4ef66
SHA1 77264be4a66348f67087bdda677b574a52fba484
SHA512 523341cbdb2af13607a1228fb7bdc85dc2a8f540dc1f95e58b867c5265fe813dbb051e6482d30ba706cdc0d75139ed77253894f144605f96d7e0c5337429bb87
SSDEEP 3072:7B74hFfFhOABuEoGSBxc7PLEqnk5dHYElT0KLZ388G7Od37Yipb76AG37sRab3fs:mFdAABtKBxm
TLSH
T10524A46227E4D219F4B25B386AB913912F66BC43AF74C18FA680754E08B4BE0DD75733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

dinput8

DirectInput8Create

ole32

OleInitialize OleUninitialize

comctl32

InitCommonControlsEx PropertySheetW

user32

BeginPaint CreateWindowExW DefWindowProcW DispatchMessageW DrawTextW EnableWindow EndPaint FillRect FindWindowExW GetAncestor GetClientRect GetDlgItem GetSysColor GetWindowLongW InvalidateRect MsgWaitForMultipleObjects PeekMessageW RegisterClassW RegisterDeviceNotificationW SendDlgItemMessageW SendMessageW SetWindowLongW ShowWindow TranslateMessage UnregisterClassW UnregisterDeviceNotification

gdi32

CreateFontIndirectW DeleteObject Ellipse GetStockObject LineTo MoveToEx Polygon Rectangle RoundRect SelectObject SetBkMode SetDCBrushColor SetDCPenColor SetTextColor

advapi32

RegCloseKey RegCreateKeyExW RegDeleteValueW RegEnumValueW RegGetValueW RegQueryInfoKeyW RegSetValueExW

xinput1_3

XInputGetCapabilities XInputGetStateEx XInputSetState

combase

RoGetActivationFactory RoInitialize RoUninitialize WindowsCreateString WindowsDeleteString WindowsGetStringRawBuffer

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup calloc free fwrite getenv memcmp memmove memset round strchr strcmp strcpy strcspn strlen wcscmp wcsrchr wcsstr

kernel32

ActivateActCtx CloseHandle CreateActCtxW CreateEventW CreateThread DeactivateActCtx DisableThreadLibraryCalls EnterCriticalSection GetModuleHandleW GetProcAddress GetTickCount HeapAlloc HeapReAlloc LeaveCriticalSection MulDiv ReleaseActCtx SetEvent WaitForMultipleObjects WaitForSingleObject

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

e8e23202bdd71e8e544b7595a66ef1e08c2102616025c0218a1da366c7e42ca9

dinput8

ole32

comctl32

user32

gdi32

advapi32

xinput1_3

combase

ucrtbase

kernel32

ntdll

generic