f552f87811e0ac4c6757926e79bbf3a38fe6648634aaadb5a01f6e87e3a4951a

General

Target
f552f87811e0ac4c6757926e79bbf3a38fe6648634aaadb5a01f6e87e3a4951a
Size 593KB
Sample260729-yherqseq3s
SHA256 f552f87811e0ac4c6757926e79bbf3a38fe6648634aaadb5a01f6e87e3a4951a
MD5 982a04e87ee9784ae34a059f94e13c47
SHA1 143de44afc38923c93a7d3c312c12e98378ac7c5
SHA512 a3085c03a9d0110c2e7ef12af8c40e2ccd38392ae6574cb1a1c0ebfb0defdaf227f1d4f36be697d9ce05f4014c0cbea13a07f9c4ce7d55e3349cb8e8e4be6d34
SSDEEP 6144:I+Dh1PrCbTsyit1xj8niAhoDsAiv5pTGBNN9hR5wKHqj6f3rdJhnt/eGWv4r4BMF:I+d1TrtAiUXTsN9hMjsLeJMqj4zWY
TLSH
T1AAD46B5238D514DAC13682F2CF93E1749713FC781DA4852BA2CD2E165F0AEA12D63EF6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f552f87811e0ac4c6757926e79bbf3a38fe6648634aaadb5a01f6e87e3a4951a

File Explorer

f552f87811e0ac4c6757926e79bbf3a38fe6648634aaadb5a01f6e87e3a4951a

.dll 593KB

f552f87811e0ac4c6757926e79bbf3a38fe6648634aaadb5a01f6e87e3a4951a

IMPHASH 741f0bf68a28ce3a873985d135617016
SHA256 f552f87811e0ac4c6757926e79bbf3a38fe6648634aaadb5a01f6e87e3a4951a
MD5 982a04e87ee9784ae34a059f94e13c47
SHA1 143de44afc38923c93a7d3c312c12e98378ac7c5
SHA512 a3085c03a9d0110c2e7ef12af8c40e2ccd38392ae6574cb1a1c0ebfb0defdaf227f1d4f36be697d9ce05f4014c0cbea13a07f9c4ce7d55e3349cb8e8e4be6d34
SSDEEP 6144:I+Dh1PrCbTsyit1xj8niAhoDsAiv5pTGBNN9hR5wKHqj6f3rdJhnt/eGWv4r4BMF:I+d1TrtAiUXTsN9hMjsLeJMqj4zWY
TLSH
T1AAD46B5238D514DAC13682F2CF93E1749713FC781DA4852BA2CD2E165F0AEA12D63EF6
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7396

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentProcessId CreateProcessW GlobalMemoryStatusEx GetSystemInfo GetTickCount64 DisableThreadLibraryCalls CloseHandle lstrcpyW lstrcatW lstrlenW CreateToolhelp32Snapshot Process32FirstW Process32NextW WriteConsoleW GetTempPathW WriteFile DeleteFileW GetModuleFileNameW CreateFileW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx InterlockedFlushSList GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW VirtualProtect LoadLibraryExW LCMapStringW GetProcessHeap GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx

advapi32

RegDeleteKeyW RegCreateKeyExW RegCloseKey RegSetValueExW

user32

GetSystemMetrics

Sharing

General

Malware Config

Signatures

File Explorer

f552f87811e0ac4c6757926e79bbf3a38fe6648634aaadb5a01f6e87e3a4951a

kernel32

advapi32

user32

generic