72067e5546b15d91307f7dbd918d584edf1dd3ef9a95eb85b7ab731c0cee2034

Sharing

Copy URL Twitter E-mail

General

Target
72067e5546b15d91307f7dbd918d584edf1dd3ef9a95eb85b7ab731c0cee2034
Size 3.5MB
Sample260729-ed2adstdqh
SHA256 72067e5546b15d91307f7dbd918d584edf1dd3ef9a95eb85b7ab731c0cee2034
MD5 abb97129fdf0cdf435e84f29f2e81036
SHA1 64b3bc2fadfd09cc6c6877435c0135031e4f1f61
SHA512 c77b9ff7754db760b9d083202855fc61b47ff14be6735440c32ffa28863602ae84ad94469b45aa56400b569cbea5c0161798f556ba34704c35b4d868433c982f
SSDEEP 98304:us7r4VMivCzI97uoAZ8oT3PW+Fdr/JV/N+e2E:Kvj7uoA9JN/V
TLSH
T1FAF54C54F2E264EAD627C2384AA7D2727B34BD400325AF278640FE392E32FD37D59519
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72067e5546b15d91307f7dbd918d584edf1dd3ef9a95eb85b7ab731c0cee2034

File Explorer

72067e5546b15d91307f7dbd918d584edf1dd3ef9a95eb85b7ab731c0cee2034

.dll 3.5MB

72067e5546b15d91307f7dbd918d584edf1dd3ef9a95eb85b7ab731c0cee2034

IMPHASH 7641c043f4c6ad0055ea20cac38a5e79
SHA256 72067e5546b15d91307f7dbd918d584edf1dd3ef9a95eb85b7ab731c0cee2034
MD5 abb97129fdf0cdf435e84f29f2e81036
SHA1 64b3bc2fadfd09cc6c6877435c0135031e4f1f61
SHA512 c77b9ff7754db760b9d083202855fc61b47ff14be6735440c32ffa28863602ae84ad94469b45aa56400b569cbea5c0161798f556ba34704c35b4d868433c982f
SSDEEP 98304:us7r4VMivCzI97uoAZ8oT3PW+Fdr/JV/N+e2E:Kvj7uoA9JN/V
TLSH
T1FAF54C54F2E264EAD627C2384AA7D2727B34BD400325AF278640FE392E32FD37D59519
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

123216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegCreateKeyExW RegCreateKeyW RegOpenKeyA RegOpenKeyExW RegQueryValueExA RegQueryValueExW RegSetValueExW

gdi32

BitBlt CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateFontIndirectW CreatePatternBrush CreatePen CreatePenIndirect CreatePolygonRgn CreateRectRgn CreateRectRgnIndirect CreateRoundRectRgn CreateSolidBrush DPtoLP DeleteDC DeleteObject ExcludeClipRect ExtCreatePen ExtCreateRegion ExtSelectClipRgn ExtTextOutW FillRgn FrameRgn GdiAlphaBlend GdiGetCharDimensions GdiGetCodePage GetBkColor GetBkMode GetCharABCWidthsW GetCharWidthInfo GetCharWidthW GetClipBox GetClipRgn GetCurrentObject GetDIBColorTable GetDIBits GetDeviceCaps GetLayout GetNearestColor GetObjectType GetObjectW GetPixel GetStockObject GetTextCharsetInfo GetTextColor GetTextExtentExPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextExtentPointW GetTextMetricsW IntersectClipRect LineTo MoveToEx OffsetWindowOrgEx PatBlt PlayEnhMetaFile PolyPolyline Polygon RectVisible Rectangle ScriptBreak ScriptStringAnalyse ScriptStringCPtoX ScriptStringFree ScriptStringGetLogicalWidths ScriptStringOut ScriptStringXtoCP ScriptString_pSize ScriptString_pcOutChars SelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetDIBColorTable SetDIBits SetPixel SetPolyFillMode SetRectRgn SetTextAlign SetTextColor SetViewportOrgEx SetWindowOrgEx StretchBlt StretchDIBits TextOutW

imm32

ImmGetCompositionStringW ImmGetContext ImmReleaseContext ImmSetCompositionFontW ImmSetCompositionWindow

kernel32

DelayLoadFailureHook FindResourceA GetModuleHandleW GlobalAddAtomW GlobalDeleteAtom GlobalLock GlobalUnlock IsBadCodePtr IsBadStringPtrA IsBadStringPtrW IsBadWritePtr LocalSize RaiseException ResolveDelayLoadedAPI RtlUnwind

kernelbase

CloseHandle CompareFileTime CompareStringA CompareStringW CreateEventW CreateThread DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FindResourceW FreeResource GetDateFormatW GetDriveTypeW GetLocalTime GetLocaleInfoW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetProcAddress GetThreadLocale GetTickCount GetUserDefaultLCID GetVersion GlobalAlloc GlobalFree HeapAlloc HeapFree HeapReAlloc InitializeCriticalSectionEx IsValidLocale LeaveCriticalSection LoadLibraryW LoadResource LocalAlloc LocalFree LocalLock LocalReAlloc LocalUnlock LockResource MulDiv MultiByteToWideChar SetEvent SizeofResource StrCmpIW StrCmpNIW SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte lstrcmpW lstrcmpiW

ntdll

_vsnprintf

oleaut32

SysAllocString SysAllocStringLen

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _assert _strdup _stricmp _wcsdup _wcsicmp _wcsnicmp floor free fwrite getenv isprint iswalnum memcmp memcpy memmove memset qsort strcat strchr strcmp strcpy strcspn strlen strrchr wcscat wcschr wcscpy wcsncmp wcsrchr wcsstr wcstol

user32

AdjustWindowRect AdjustWindowRectEx AppendMenuW BeginDeferWindowPos BeginPaint CallWindowProcA CallWindowProcW CharLowerBuffW CharLowerW CharUpperBuffW CharUpperW CheckMenuItem ChildWindowFromPoint ClientToScreen CloseClipboard CopyIcon CopyImage CopyRect CreateCaret CreateDialogIndirectParamA CreateDialogIndirectParamW CreateIconIndirect CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcW DeferWindowPos DeleteMenu DestroyCaret DestroyCursor DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamW DialogBoxParamW DispatchMessageW DragDetect DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawStateW DrawTextA DrawTextW EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndDeferWindowPos EndDialog EndPaint EnumChildWindows FillRect FrameRect GetActiveWindow GetAsyncKeyState GetCapture GetCaretPos GetClassLongPtrW GetClassNameW GetClientRect GetClipboardData GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgCtrlID GetDlgItem GetDoubleClickTime GetDpiForWindow GetFocus GetGUIThreadInfo GetIconInfo GetKeyNameTextW GetKeyState GetMenuState GetMessagePos GetMessageTime GetMessageW GetMonitorInfoW GetNextDlgGroupItem GetNextDlgTabItem GetParent GetPropW GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongPtrW GetWindowLongW GetWindowRect GetWindowRgn GetWindowTextA GetWindowTextLengthA GetWindowTextLengthW GetWindowTextW InternalGetWindowText IntersectRect InvalidateRect InvalidateRgn InvertRect IsChild IsClipboardFormatAvailable IsDialogMessageW IsWindow IsWindowEnabled IsWindowUnicode IsWindowVisible KillSystemTimer KillTimer LoadBitmapW LoadCursorW LoadIconW LoadImageA LoadImageW LoadMenuA LoadStringW MapDialogRect MapVirtualKeyW MapWindowPoints MonitorFromRect MonitorFromWindow MoveWindow NotifyWinEvent OpenClipboard PeekMessageW PostMessageW PostQuitMessage RedrawWindow RegisterClassW RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient ScrollWindow ScrollWindowEx SendDlgItemMessageW SendMessageA SendMessageW SetCapture SetCaretPos SetClipboardData SetCursor SetFocus SetParent SetPropW SetScrollInfo SetScrollPos SetScrollRange SetSystemTimer SetTimer SetWindowLongPtrA SetWindowLongPtrW SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextA SetWindowTextW ShowCaret ShowScrollBar ShowWindow SubtractRect SystemParametersInfoW TabbedTextOutW TrackMouseEvent TrackPopupMenu TranslateMessage UnionRect UnregisterClassW UpdateWindow ValidateRect WindowFromPoint wsprintfW

AddMRUStringW CreateMRUListW CreateMappedBitmap CreatePropertySheetPage CreatePropertySheetPageA CreatePropertySheetPageW CreateStatusWindow CreateStatusWindowA CreateStatusWindowW CreateToolbar CreateToolbarEx CreateUpDownControl DPA_Clone DPA_Create DPA_CreateEx DPA_DeleteAllPtrs DPA_DeletePtr DPA_Destroy DPA_DestroyCallback DPA_EnumCallback DPA_GetPtr DPA_GetPtrIndex DPA_GetSize DPA_Grow DPA_InsertPtr DPA_Search DPA_SetPtr DPA_Sort DSA_Clone DSA_Create DSA_DeleteAllItems DSA_DeleteItem DSA_Destroy DSA_DestroyCallback DSA_EnumCallback DSA_GetItem DSA_GetItemPtr DSA_GetSize DSA_InsertItem DSA_SetItem DefSubclassProc DestroyPropertySheetPage DllGetVersion DllInstall DrawInsert DrawShadowText DrawStatusText DrawStatusTextA DrawStatusTextW EnumMRUListW FlatSB_EnableScrollBar FlatSB_GetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollProp FlatSB_GetScrollRange FlatSB_SetScrollInfo FlatSB_SetScrollPos FlatSB_SetScrollProp FlatSB_SetScrollRange FlatSB_ShowScrollBar GetEffectiveClientRect GetMUILanguage GetWindowSubclass HIMAGELIST_QueryInterface ImageList_Add ImageList_AddIcon ImageList_AddMasked ImageList_BeginDrag ImageList_CoCreateInstance ImageList_Copy ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_DrawIndirect ImageList_Duplicate ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetFlags ImageList_GetIcon ImageList_GetIconSize ImageList_GetImageCount ImageList_GetImageInfo ImageList_GetImageRect ImageList_LoadImage ImageList_LoadImageA ImageList_LoadImageW ImageList_Merge ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetFilter ImageList_SetFlags ImageList_SetIconSize ImageList_SetImageCount ImageList_SetOverlayImage ImageList_Write ImageList_WriteEx InitCommonControls InitCommonControlsEx InitMUILanguage InitializeFlatSB LBItemFromPt LoadIconMetric LoadIconWithScaleDown MakeDragList MenuHelp PropertySheet PropertySheetA PropertySheetW RegisterClassNameW RemoveWindowSubclass SetWindowSubclass ShowHideMenuCtl TaskDialog TaskDialogIndirect UninitializeFlatSB _TrackMouseEvent

Name

.text

Size

736KB

Virtual Size

732KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

172KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

16KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

324KB

Virtual Size

323KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

800B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

4KB

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

4KB

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

4KB

Virtual Size

92B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

4KB

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

4KB

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/91

Size

4KB

Virtual Size

142B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

72067e5546b15d91307f7dbd918d584edf1dd3ef9a95eb85b7ab731c0cee2034

advapi32

gdi32

imm32

kernel32

kernelbase

ntdll

oleaut32

ucrtbase

user32

generic