3d826aad508d9944d6aaf747c2cb353cee6167293fc6a7c08b0231cc32cca055

Sharing

Copy URL Twitter E-mail

General

Target
3d826aad508d9944d6aaf747c2cb353cee6167293fc6a7c08b0231cc32cca055
Size 1.0MB
Sample260729-bl376sdc99
SHA256 3d826aad508d9944d6aaf747c2cb353cee6167293fc6a7c08b0231cc32cca055
MD5 db185992c5ace4613125012e9835c580
SHA1 4908c7049f41886ffcf131b68756585134a4e792
SHA512 72ddc37ff97a87f126bf1bae402eb717985df130f0d20b25aacdd3e14b4ba92f272e3dd16db79e1ee5f662bca34c48e26e0d60e62c63c3362aab6f6c49373c6d
SSDEEP 6144:kqzp5ZZMOZZvIoLbKNQ6EdMLBukkPP789mSS:k8T0mIoL6gkk3u6
TLSH
T1A0257322E7FD8A06F6F36B3C6DB952511E36BDA5AE34CA0E0601265D08F0E94DD74723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d826aad508d9944d6aaf747c2cb353cee6167293fc6a7c08b0231cc32cca055

File Explorer

3d826aad508d9944d6aaf747c2cb353cee6167293fc6a7c08b0231cc32cca055

.dll 1.0MB

3d826aad508d9944d6aaf747c2cb353cee6167293fc6a7c08b0231cc32cca055

IMPHASH 116a8efec2fb3a2c661f5682749315b5
SHA256 3d826aad508d9944d6aaf747c2cb353cee6167293fc6a7c08b0231cc32cca055
MD5 db185992c5ace4613125012e9835c580
SHA1 4908c7049f41886ffcf131b68756585134a4e792
SHA512 72ddc37ff97a87f126bf1bae402eb717985df130f0d20b25aacdd3e14b4ba92f272e3dd16db79e1ee5f662bca34c48e26e0d60e62c63c3362aab6f6c49373c6d
SSDEEP 6144:kqzp5ZZMOZZvIoLbKNQ6EdMLBukkPP789mSS:k8T0mIoL6gkk3u6
TLSH
T1A0257322E7FD8A06F6F36B3C6DB952511E36BDA5AE34CA0E0601265D08F0E94DD74723
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

61920

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

crypt32

CertAddCRLContextToStore CertAddCTLContextToStore CertAddCertificateContextToStore CertAddStoreToCollection CertCloseStore CertCreateCertificateChainEngine CertDeleteCertificateFromStore CertDuplicateCertificateContext CertEnumCRLsInStore CertEnumCTLsInStore CertEnumCertificatesInStore CertEnumSystemStore CertFindExtension CertFreeCRLContext CertFreeCTLContext CertFreeCertificateChain CertFreeCertificateChainEngine CertFreeCertificateContext CertGetCertificateChain CertGetCertificateContextProperty CertGetEnhancedKeyUsage CertGetNameStringW CertGetPublicKeyLength CertGetStoreProperty CertGetValidUsages CertNameToStrW CertOpenStore CertOpenSystemStoreW CertRDNValueToStrW CertSaveStore CertSetCertificateContextProperty CertSetEnhancedKeyUsage CryptBinaryToStringA CryptDecodeObjectEx CryptFindLocalizedName CryptFindOIDInfo CryptFormatObject CryptQueryObject PFXExportCertStore

ole32

CreateBindCtx OleCreateDefaultHandler

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy ImageList_SetBkColor PropertySheetW

comdlg32

GetOpenFileNameW GetSaveFileNameW

user32

DialogBoxParamW EnableWindow EndDialog EnumChildWindows GetClassLongW GetDC GetDlgItem GetParent GetWindowLongW GetWindowRect IsDlgButtonChecked LoadBitmapW LoadImageW LoadStringW MapWindowPoints MessageBoxW PostMessageW ReleaseDC SendMessageA SendMessageW SetFocus SetWindowLongW SetWindowPos ShowScrollBar ShowWindow

gdi32

CreateFontW DeleteObject GetDeviceCaps

advapi32

CryptAcquireContextW CryptDestroyKey CryptGetKeyParam CryptGetUserKey CryptReleaseContext CryptSetProvParam RegCloseKey RegCreateKeyExW RegDeleteValueA RegQueryValueExA RegSetValueExA

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsdup _wcsicmp calloc free fwrite getenv iswprint iswspace malloc memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen wcslen wcsrchr

kernel32

CloseHandle CompareFileTime CreateFileW DelayLoadFailureHook DisableThreadLibraryCalls EnumResourceNamesW FileTimeToSystemTime FindResourceW FormatMessageW FreeLibrary GetDateFormatW GetEnvironmentVariableW GetLocaleInfoW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount HeapAlloc HeapFree HeapReAlloc IsBadStringPtrW LoadLibraryW LoadResource LocalFree MulDiv MultiByteToWideChar RaiseException ResolveDelayLoadedAPI SizeofResource WriteFile lstrcmpW

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

3d826aad508d9944d6aaf747c2cb353cee6167293fc6a7c08b0231cc32cca055

crypt32

ole32

comctl32

comdlg32

user32

gdi32

advapi32

ucrtbase

kernel32

ntdll

generic