960561fe873f1365b5f054ffeecff09e3e837a5ed49e071dbf9555d671498d6a

General

Target
960561fe873f1365b5f054ffeecff09e3e837a5ed49e071dbf9555d671498d6a
Size 80KB
Sample260730-nrtxxagg23
SHA256 960561fe873f1365b5f054ffeecff09e3e837a5ed49e071dbf9555d671498d6a
MD5 41ed3bfa3f679beb4658c2961b426700
SHA1 5eb7b34c4c310204627ce71ca33001bdeacf987d
SHA512 2e0a31a74f517e357301f80765ec9d187ec10b8d812d4a8a6bc769104b6b27acde120ea314bf5411a1a097a6388b8bf7bac8deaa936e7454173bd1d046d96798
SSDEEP 1536:CKK+A5sTYJ0czDzooT9Vo34cMnQIoylY2:71E0c0aXcMnQIoyl
TLSH
T1C6838E1173E640B7C24A11327956A77BA6B9AE504FD80983EF69FB1E2C315E3D13B309
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
960561fe873f1365b5f054ffeecff09e3e837a5ed49e071dbf9555d671498d6a

File Explorer

960561fe873f1365b5f054ffeecff09e3e837a5ed49e071dbf9555d671498d6a

.dll 80KB

960561fe873f1365b5f054ffeecff09e3e837a5ed49e071dbf9555d671498d6a

IMPHASH 43801a387d4242b5619a9953888e46f7
SHA256 960561fe873f1365b5f054ffeecff09e3e837a5ed49e071dbf9555d671498d6a
MD5 41ed3bfa3f679beb4658c2961b426700
SHA1 5eb7b34c4c310204627ce71ca33001bdeacf987d
SHA512 2e0a31a74f517e357301f80765ec9d187ec10b8d812d4a8a6bc769104b6b27acde120ea314bf5411a1a097a6388b8bf7bac8deaa936e7454173bd1d046d96798
SSDEEP 1536:CKK+A5sTYJ0czDzooT9Vo34cMnQIoylY2:71E0c0aXcMnQIoyl
TLSH
T1C6838E1173E640B7C24A11327956A77BA6B9AE504FD80983EF69FB1E2C315E3D13B309
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

21062

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

HeapDestroy DeleteCriticalSection DisableThreadLibraryCalls InitializeCriticalSection LeaveCriticalSection EnterCriticalSection InterlockedIncrement InterlockedDecrement lstrlenW MultiByteToWideChar lstrlenA GetShortPathNameA GetModuleHandleA GetModuleFileNameA FreeLibrary GetProcAddress LoadLibraryA lstrcpyA lstrcatA WideCharToMultiByte IsBadReadPtr GetCurrentThreadId IsBadWritePtr FlushInstructionCache GetCurrentProcess GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetOEMCP GetACP GetCPInfo IsBadCodePtr SetUnhandledExceptionFilter WriteFile GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetStartupInfoA GetFileType GetStdHandle SetHandleCount HeapSize TerminateProcess RtlUnwind HeapFree HeapReAlloc HeapAlloc GetCommandLineA GetVersion TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue GetLastError GetEnvironmentVariableA GetVersionExA HeapCreate VirtualFree VirtualAlloc ExitProcess

user32

CreateWindowExA CharNextA DefWindowProcA DestroyWindow IsWindow GetClassInfoExA LoadCursorA wsprintfA SendMessageA SetFocus MoveWindow SetRectEmpty RegisterClassExA ShowWindow CallWindowProcA GetWindowLongA SetWindowLongA GetParent PostMessageA

ole32

CoCreateInstance CoTaskMemFree StringFromCLSID CoCreateGuid CoTaskMemAlloc

oleaut32

SysStringLen RegisterTypeLi LoadTypeLi SysAllocString SysFreeString SysAllocStringLen

Sharing

General

Malware Config

Signatures

File Explorer

960561fe873f1365b5f054ffeecff09e3e837a5ed49e071dbf9555d671498d6a

kernel32

user32

ole32

oleaut32

generic