c5ef948128e45e09c275fddf70e39e9614fa186c3add8a5f3be9c3a70e5f57e4

Sharing

Copy URL Twitter E-mail

General

Target
c5ef948128e45e09c275fddf70e39e9614fa186c3add8a5f3be9c3a70e5f57e4
Size 152KB
Sample260730-n8awcsxane
SHA256 c5ef948128e45e09c275fddf70e39e9614fa186c3add8a5f3be9c3a70e5f57e4
MD5 b678d46707811e993020c7bcebae099e
SHA1 d5f9bdcbb3e34b83b8b39bde45503506ddd19f1e
SHA512 17c0f9eb3fe985b068f163c5c7b6e46a8e6ac12ffe879102255bfaef1a7e1ddd1d585cda80e3345a7567e5c584ea373ede0271b037a032c8540727f7284a421b
SSDEEP 3072:5F5Ho8d/iHoSa4Gu1LPXjJjNDE/ojm9/JnJx:TqyT4GELrJjNDSzn
TLSH
T101E38D2177E1C47AE20F0038B8246FB9E7BE2E348E650943BF603F996F74551DD25A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5ef948128e45e09c275fddf70e39e9614fa186c3add8a5f3be9c3a70e5f57e4

File Explorer

c5ef948128e45e09c275fddf70e39e9614fa186c3add8a5f3be9c3a70e5f57e4

.dll 152KB

c5ef948128e45e09c275fddf70e39e9614fa186c3add8a5f3be9c3a70e5f57e4

IMPHASH 18bd5d493cb294788245888d7bf64c6a
SHA256 c5ef948128e45e09c275fddf70e39e9614fa186c3add8a5f3be9c3a70e5f57e4
MD5 b678d46707811e993020c7bcebae099e
SHA1 d5f9bdcbb3e34b83b8b39bde45503506ddd19f1e
SHA512 17c0f9eb3fe985b068f163c5c7b6e46a8e6ac12ffe879102255bfaef1a7e1ddd1d585cda80e3345a7567e5c584ea373ede0271b037a032c8540727f7284a421b
SSDEEP 3072:5F5Ho8d/iHoSa4Gu1LPXjJjNDE/ojm9/JnJx:TqyT4GELrJjNDSzn
TLSH
T101E38D2177E1C47AE20F0038B8246FB9E7BE2E348E650943BF603F996F74551DD25A0A
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

66709

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrcpynA DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EnterCriticalSection CloseHandle FlushFileBuffers SetStdHandle LoadLibraryA InterlockedDecrement GetStringTypeW GetStringTypeA SetFilePointer IsBadCodePtr SetUnhandledExceptionFilter WriteFile GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetStartupInfoA GetFileType InterlockedIncrement GetCurrentProcess FlushInstructionCache IsBadWritePtr lstrlenA MultiByteToWideChar lstrcmpA lstrcpyA lstrlenW WideCharToMultiByte lstrcatA IsBadReadPtr Sleep InterlockedExchange RtlUnwind HeapReAlloc HeapAlloc HeapFree GetCommandLineA GetVersion RaiseException ExitProcess TerminateProcess HeapSize GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue GetLastError VirtualFree VirtualAlloc GetModuleHandleA GetModuleFileNameA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW GetProcAddress SetHandleCount GetStdHandle

user32

SetRectEmpty DefWindowProcA DestroyWindow IsWindow SendMessageA LoadBitmapA OffsetRect PostMessageA SetFocus MoveWindow CreateWindowExA ShowWindow CallWindowProcA GetWindowLongA SetWindowLongA GetParent

ole32

CoTaskMemFree StringFromCLSID CoCreateGuid CoTaskMemAlloc

oleaut32

SysStringLen SysAllocStringLen SysAllocString SysFreeString

atl

ord18 ord15 ord16 ord21 ord23 ord31 ord32 ord43 ord44 ord46 ord30 ord57

Sharing

General

Malware Config

Signatures

File Explorer

c5ef948128e45e09c275fddf70e39e9614fa186c3add8a5f3be9c3a70e5f57e4

kernel32

user32

ole32

oleaut32

atl

generic