cee9450fa7c0760e9ae3f99289f20bc14552e06ecf3e2ea99b69ddaaadad0477

Sharing

Copy URL Twitter E-mail

General

Target
cee9450fa7c0760e9ae3f99289f20bc14552e06ecf3e2ea99b69ddaaadad0477
Size 76KB
Sample260730-nya4dahn8t
SHA256 cee9450fa7c0760e9ae3f99289f20bc14552e06ecf3e2ea99b69ddaaadad0477
MD5 dcc9d628ecc64dd423921c9932ea0278
SHA1 1736c7c808a37b069f333e575db1000c029a4181
SHA512 e1e15763bf1dc5509bb40e849ce26865a9441a43b7d7d4b0d5cdd772ef63a8ecd533953bdbe9f862d2621c8f633d0c1e80d1cb6bb85436500dc414235c965a50
SSDEEP 1536:sT3WwYl1Etp9lFYw8qsIUFiZhI79PZ/4FSyBtsPipaTqgys4:sSwYotpR8QjFHpaTqgys
TLSH
T134735C0133D780DADA4A10327116E7BB99698FA8CFE41F83AF2FFE6D55355D0A039219
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cee9450fa7c0760e9ae3f99289f20bc14552e06ecf3e2ea99b69ddaaadad0477

File Explorer

cee9450fa7c0760e9ae3f99289f20bc14552e06ecf3e2ea99b69ddaaadad0477

.dll 76KB

cee9450fa7c0760e9ae3f99289f20bc14552e06ecf3e2ea99b69ddaaadad0477

IMPHASH 21abae602882606ff9d4e83c616a2b45
SHA256 cee9450fa7c0760e9ae3f99289f20bc14552e06ecf3e2ea99b69ddaaadad0477
MD5 dcc9d628ecc64dd423921c9932ea0278
SHA1 1736c7c808a37b069f333e575db1000c029a4181
SHA512 e1e15763bf1dc5509bb40e849ce26865a9441a43b7d7d4b0d5cdd772ef63a8ecd533953bdbe9f862d2621c8f633d0c1e80d1cb6bb85436500dc414235c965a50
SSDEEP 1536:sT3WwYl1Etp9lFYw8qsIUFiZhI79PZ/4FSyBtsPipaTqgys4:sSwYotpR8QjFHpaTqgys
TLSH
T134735C0133D780DADA4A10327116E7BB99698FA8CFE41F83AF2FFE6D55355D0A039219
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47594

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetTickCount CreateEventA CloseHandle lstrlenW WideCharToMultiByte MultiByteToWideChar lstrlenA InterlockedIncrement WaitForSingleObject ResetEvent InterlockedDecrement SetEvent CancelWaitableTimer SetWaitableTimer CreateWaitableTimerA lstrcpyA HeapDestroy DeleteCriticalSection DisableThreadLibraryCalls InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetShortPathNameA GetModuleHandleA GetModuleFileNameA FreeLibrary GetProcAddress LoadLibraryA lstrcatA IsBadReadPtr CreateFileA DeviceIoControl GetCurrentThreadId IsBadWritePtr FlushInstructionCache GetCurrentProcess GetVersionExA GetComputerNameA GetVolumeInformationA GetDiskFreeSpaceExA GetLastError

user32

OffsetRect MessageBoxA DispatchMessageA PeekMessageA MsgWaitForMultipleObjects CharNextA GetClassInfoExA LoadCursorA wsprintfA RegisterClassExA SetFocus MoveWindow CreateWindowExA ShowWindow CallWindowProcA GetWindowLongA SetWindowLongA GetParent PostMessageA IsWindow DestroyWindow DefWindowProcA SetRectEmpty

ole32

StringFromCLSID CoCreateInstance CoTaskMemAlloc CoTaskMemFree CoCreateGuid

oleaut32

SysAllocString LoadTypeLi RegisterTypeLi SysAllocStringLen SysFreeString SysStringLen

msvcp60

??0Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ

msvcrt

_onexit __dllonexit isalnum tolower isspace isprint _snprintf strncat _initterm free _purecall ??2@YAPAXI@Z _mbsnbcpy atoi _mbscmp wcscmp __CxxFrameHandler sprintf malloc _adjust_fdiv realloc

ws2_32

WSAStartup gethostname gethostbyname WSACleanup inet_ntoa

netapi32

Netbios

Sharing

General

Malware Config

Signatures

File Explorer

cee9450fa7c0760e9ae3f99289f20bc14552e06ecf3e2ea99b69ddaaadad0477

kernel32

user32

ole32

oleaut32

msvcp60

msvcrt

ws2_32

netapi32

generic