de1ea08db90cf889236269462c3d3cd18e0dd86883ae2c2fd5ba3f3deaf49a12

Sharing

Copy URL Twitter E-mail

General

Target
de1ea08db90cf889236269462c3d3cd18e0dd86883ae2c2fd5ba3f3deaf49a12
Size 400KB
Sample260729-ed1c4atdpc
SHA256 de1ea08db90cf889236269462c3d3cd18e0dd86883ae2c2fd5ba3f3deaf49a12
MD5 dc7773792cb2bbd59f4b6d92a6020dab
SHA1 1741f3fd1dda33572eb5dada94dd3e1dab799a8a
SHA512 3b54c095a35b69facf352ae1ca12e772fb36376306e17c522e2bd718ba7a97b1e80fa47995fa2df8ed1effaa14094cc8009cd63dfeec6a8f9e8b0629bc48f536
SSDEEP 6144:YeQAZHXNhv994t+IWbCrgnPXDWpwaElq513Sxm8tjrgnPXDWpwaEl:Ye5ZdrmtkwJ
TLSH
T1F1941961F60288B2E4320978169DE37B1239733185A79F57FA44EF8DB832DF06A65317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de1ea08db90cf889236269462c3d3cd18e0dd86883ae2c2fd5ba3f3deaf49a12

File Explorer

de1ea08db90cf889236269462c3d3cd18e0dd86883ae2c2fd5ba3f3deaf49a12

.dll 400KB

de1ea08db90cf889236269462c3d3cd18e0dd86883ae2c2fd5ba3f3deaf49a12

IMPHASH fa8a33e858fdb1c7ea62732959aa60ea
SHA256 de1ea08db90cf889236269462c3d3cd18e0dd86883ae2c2fd5ba3f3deaf49a12
MD5 dc7773792cb2bbd59f4b6d92a6020dab
SHA1 1741f3fd1dda33572eb5dada94dd3e1dab799a8a
SHA512 3b54c095a35b69facf352ae1ca12e772fb36376306e17c522e2bd718ba7a97b1e80fa47995fa2df8ed1effaa14094cc8009cd63dfeec6a8f9e8b0629bc48f536
SSDEEP 6144:YeQAZHXNhv994t+IWbCrgnPXDWpwaElq513Sxm8tjrgnPXDWpwaEl:Ye5ZdrmtkwJ
TLSH
T1F1941961F60288B2E4320978169DE37B1239733185A79F57FA44EF8DB832DF06A65317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5824

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegDeleteValueA RegEnumValueA RegOpenKeyExA RegSetValueExA

comctl32

InitCommonControlsEx

gdi32

CreateCompatibleDC CreateDIBSection CreateHalftonePalette DeleteDC DeleteObject RealizePalette SelectObject SelectPalette StretchBlt

kernel32

DisableThreadLibraryCalls FreeLibrary GetModuleHandleW GetPrivateProfileSectionA GetPrivateProfileStringW GetProcAddress GetTickCount GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryA MulDiv MultiByteToWideChar RaiseException WideCharToMultiByte lstrcmpW

ntdll

RtlCreateUnicodeStringFromAsciiz RtlFreeUnicodeString _vsnprintf

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _strdup _strnicmp _wcsdup calloc free fwrite getenv isprint malloc memcmp memcpy memmove memset strchr strcmp strcspn strlen tolower wcschr wcslen

user32

AdjustWindowRect BeginPaint CreateWindowExW DefMDIChildProcW DefWindowProcW DestroyWindow DialogBoxParamW EnableWindow EndDialog EndPaint GetClientRect GetDlgItem GetWindow GetWindowLongW InvalidateRect IsWindowUnicode KillTimer LoadCursorW LoadStringW MessageBoxW RegisterClassW SendDlgItemMessageW SendMessageW SetCursor SetFocus SetTimer SetWindowLongW SetWindowPos SetWindowTextA SetWindowTextW ShowWindow wsprintfA wsprintfW

winmm

CloseDriver OpenDriver SendDriverMessage mciGetErrorStringA mciGetErrorStringW mciSendCommandA mciSendCommandW mciSendStringA mciSendStringW mmioStringToFOURCCA

Name

.text

Size

60KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

36KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

de1ea08db90cf889236269462c3d3cd18e0dd86883ae2c2fd5ba3f3deaf49a12

advapi32

comctl32

gdi32

kernel32

ntdll

ucrtbase

user32

winmm

generic