9a62826b864965b14215a51984b85d56ad0268ed7a8e9977afce9be1cbc068e1

Sharing

Copy URL Twitter E-mail

General

Target
9a62826b864965b14215a51984b85d56ad0268ed7a8e9977afce9be1cbc068e1
Size 1.0MB
Sample260729-e8645athrg
SHA256 9a62826b864965b14215a51984b85d56ad0268ed7a8e9977afce9be1cbc068e1
MD5 2d52a8ad98daf9726c97d6c7dfd82766
SHA1 f2884ab7613d5fb5da7de00a2ea4c4cc38dc489c
SHA512 739a21c8a638c49f5786998e5bb04e1b18bcda757146d48f3d1c0f6c08796adf75c0631c4f52196df893bcf02bba1f003e45eb6442f9520449106e3d61d94288
SSDEEP 6144:mu82Kp1k59YzVjwRl8mGvZgXu8Se8GLVlPq+l48ZIWKHw+Et02ml6dZUGtgXYP:I2Kp1kt6eVS+l48ZIWKHrX1YgXYP
TLSH
T1B9351B8172DC5CD7EA32433988B7D3316B3ABB825352DB17A604C92D1E73BC72E95A05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a62826b864965b14215a51984b85d56ad0268ed7a8e9977afce9be1cbc068e1

File Explorer

9a62826b864965b14215a51984b85d56ad0268ed7a8e9977afce9be1cbc068e1

.dll 1.0MB

9a62826b864965b14215a51984b85d56ad0268ed7a8e9977afce9be1cbc068e1

IMPHASH ef6d023f9df0a1e55a6464abcc5a5560
SHA256 9a62826b864965b14215a51984b85d56ad0268ed7a8e9977afce9be1cbc068e1
MD5 2d52a8ad98daf9726c97d6c7dfd82766
SHA1 f2884ab7613d5fb5da7de00a2ea4c4cc38dc489c
SHA512 739a21c8a638c49f5786998e5bb04e1b18bcda757146d48f3d1c0f6c08796adf75c0631c4f52196df893bcf02bba1f003e45eb6442f9520449106e3d61d94288
SSDEEP 6144:mu82Kp1k59YzVjwRl8mGvZgXu8Se8GLVlPq+l48ZIWKHw+Et02ml6dZUGtgXYP:I2Kp1kt6eVS+l48ZIWKHrX1YgXYP
TLSH
T1B9351B8172DC5CD7EA32433988B7D3316B3ABB825352DB17A604C92D1E73BC72E95A05
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

30144

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegOpenKeyA RegOpenKeyW RegQueryValueExA RegQueryValueExW

comctl32

CreateStatusWindowW ImageList_Destroy ImageList_LoadImageW

gdi32

GetDeviceCaps

kernel32

ActivateActCtx CloseHandle CreateActCtxW CreateFileW CreateProcessW DeactivateActCtx DisableThreadLibraryCalls EnumResourceNamesW ExitProcess FindClose FindFirstFileW FindNextFileW FindResourceW GetEnvironmentVariableW GetModuleFileNameA GetModuleFileNameW GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetSystemDirectoryW GetTickCount GlobalAlloc GlobalFree HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryW LoadResource MulDiv MultiByteToWideChar ReleaseActCtx SizeofResource WideCharToMultiByte Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection WriteFile lstrcmpW lstrcmpiW

ntdll

_vsnprintf

ole32

CoCreateInstance CoInitialize CoRegisterClassObject CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CoTaskMemRealloc CoUninitialize CreateOleAdviseHolder CreateStreamOnHGlobal OleRegGetUserType PropVariantClear StgCreateStorageEx

oleaut32

SysAllocString SysAllocStringLen SysFreeString SysStringLen VariantInit VariantClear SafeArrayDestroy SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetElement LoadRegTypeLib SafeArrayCreateVector

shell32

SHGetFolderPathW ShellAboutW ShellExecuteExW

shlwapi

ord167 PathAppendW PathCreateFromUrlW PathFindExtensionW PathIsURLW SHRegCloseUSKey SHRegEnumUSValueW SHRegOpenUSKeyW SHRegQueryUSValueW UrlApplySchemeW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _assert _strdup _stricmp _wcsdup _wcsnicmp calloc free fwrite getenv malloc memcmp memcpy memmove realloc strchr strcmp strcspn strlen strrchr toupper wcschr wcslen wcsncmp wcstol

urlmon

CoInternetParseUrl CreateAsyncBindCtx CreateURLMoniker CreateURLMonikerEx2 ReleaseBindInfo

user32

CreatePopupMenu CreateWindowExW DdeCmpStringHandles DdeCreateStringHandleW DdeFreeStringHandle DdeGetData DdeGetLastError DdeInitializeW DdeNameService DdeUninitialize DefWindowProcW DestroyIcon DestroyWindow DialogBoxParamW DispatchMessageW EnableWindow EndDialog GetClientRect GetDC GetDlgItem GetMenuItemCount GetMenuItemInfoW GetMessageW GetPropW GetSubMenu GetSystemMetrics GetWindowLongPtrW GetWindowTextLengthW GetWindowTextW InsertMenuItemW IsWindowVisible LoadCursorW LoadIconW LoadImageW LoadMenuW LoadStringW PeekMessageW PostMessageW PostQuitMessage RegisterClassExW ReleaseDC SendMessageW SetFocus SetMenu SetPropW SetWindowLongPtrW SetWindowPos ShowWindow TranslateMessage UnregisterClassW

Name

.text

Size

188KB

Virtual Size

185KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

736B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

124KB

Virtual Size

123KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

464B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

292B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

136KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

4KB

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

4KB

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

4KB

Virtual Size

92B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

4KB

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

4KB

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

4KB

Virtual Size

142B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

9a62826b864965b14215a51984b85d56ad0268ed7a8e9977afce9be1cbc068e1

advapi32

comctl32

gdi32

kernel32

ntdll

ole32

oleaut32

shell32

shlwapi

ucrtbase

urlmon

user32

generic