20fa96447b94dd37ca2898a6a371332b3cddf6f4fdabd5662996da82ed208db5

General

Target
20fa96447b94dd37ca2898a6a371332b3cddf6f4fdabd5662996da82ed208db5
Size 136KB
Sample260730-nyj2aagh24
SHA256 20fa96447b94dd37ca2898a6a371332b3cddf6f4fdabd5662996da82ed208db5
MD5 451b0be413ffd8956e10d552d9097f9b
SHA1 d41aaf58ea8f083e8f70d701b8d7116cd7979813
SHA512 b15a158dd6157a83965c189bac3e5eb001749184612e3b1719ee31eb38f5a0b8229442f13152c049996c14c925ac00c752c6893b177bfb851d0ee149e73f4db1
SSDEEP 1536:koMqckiXQzrWv790RFQstxBvAY6vT7HsYpaMFTOMwnAK9fnNojwRomP8Gh:FMqckSJ7WR+vEWaMm9/NojwRNZh
TLSH
T146D37C2172E2C4B7E18A0039A9649FBAD37ABF398C745443AB503F1D3FB1994D91960A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20fa96447b94dd37ca2898a6a371332b3cddf6f4fdabd5662996da82ed208db5

File Explorer

20fa96447b94dd37ca2898a6a371332b3cddf6f4fdabd5662996da82ed208db5

.dll 136KB

20fa96447b94dd37ca2898a6a371332b3cddf6f4fdabd5662996da82ed208db5

IMPHASH 69fc2db2456d290988df2e6d97f30011
SHA256 20fa96447b94dd37ca2898a6a371332b3cddf6f4fdabd5662996da82ed208db5
MD5 451b0be413ffd8956e10d552d9097f9b
SHA1 d41aaf58ea8f083e8f70d701b8d7116cd7979813
SHA512 b15a158dd6157a83965c189bac3e5eb001749184612e3b1719ee31eb38f5a0b8229442f13152c049996c14c925ac00c752c6893b177bfb851d0ee149e73f4db1
SSDEEP 1536:koMqckiXQzrWv790RFQstxBvAY6vT7HsYpaMFTOMwnAK9fnNojwRomP8Gh:FMqckSJ7WR+vEWaMm9/NojwRNZh
TLSH
T146D37C2172E2C4B7E18A0039A9649FBAD37ABF398C745443AB503F1D3FB1994D91960A
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

55982

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

DisableThreadLibraryCalls InitializeCriticalSection HeapDestroy DeleteCriticalSection LeaveCriticalSection EnterCriticalSection lstrlenW MultiByteToWideChar lstrlenA GetShortPathNameA GetModuleHandleA GetModuleFileNameA FreeLibrary GetProcAddress LoadLibraryA lstrcpyA lstrcatA WideCharToMultiByte InterlockedDecrement InterlockedIncrement IsBadReadPtr lstrcmpA IsBadWritePtr GetCurrentThreadId FlushInstructionCache GetCurrentProcess CloseHandle FlushFileBuffers SetStdHandle LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA SetFilePointer IsBadCodePtr SetUnhandledExceptionFilter WriteFile GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetOEMCP GetACP Sleep InterlockedExchange RtlUnwind HeapFree HeapReAlloc HeapAlloc GetCommandLineA GetVersion RaiseException TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue GetLastError GetEnvironmentVariableA GetVersionExA HeapCreate VirtualFree VirtualAlloc ExitProcess TerminateProcess HeapSize GetCPInfo

user32

SetRectEmpty CharNextA DestroyWindow IsWindow MessageBoxA GetClassInfoExA LoadCursorA wsprintfA PostMessageA CreateWindowExA SetFocus MoveWindow RegisterClassExA ShowWindow CallWindowProcA GetWindowLongA SetWindowLongA DefWindowProcA GetParent

ole32

CoCreateInstance CoTaskMemFree StringFromCLSID CoCreateGuid CoTaskMemAlloc

oleaut32

SysStringLen SysAllocStringLen RegisterTypeLi LoadTypeLi SysAllocString SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

20fa96447b94dd37ca2898a6a371332b3cddf6f4fdabd5662996da82ed208db5

kernel32

user32

ole32

oleaut32

generic