1accff532dd2f7a53077bfdab38776e921aa2663a7337b448beaa9aa7006e2a3

Sharing

Copy URL Twitter E-mail

General

Target
1accff532dd2f7a53077bfdab38776e921aa2663a7337b448beaa9aa7006e2a3
Size 88KB
Sample260730-nz289agh28
SHA256 1accff532dd2f7a53077bfdab38776e921aa2663a7337b448beaa9aa7006e2a3
MD5 82f6286d91e36a3230ea321a56b9818c
SHA1 3e85cda99592ed155e8c25763b21b53ea7be1a45
SHA512 59f542954a23f4efe0b98a808e0b1b762dd09d2149b8e1b55ccbee150183ada1fcc1f2995a0344e71c53f3e952e7e5f6c1eef413f2aa31ded1d109c9dd70f8e6
SSDEEP 768:hIlZ+uxGy2Kz8moPmJZ2DsQe7xmAbjz3TS34fAEBLyMhzLLvE8q5NMHoKz3x8vgO:WHE+zgKJ/z3TS34fdBLyuu5CoI3x8
TLSH
T190938E113AD2C8B2D29B0231E8B35B2EB7BE7E314DF10447AF653B5D6D31550DA39606
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1accff532dd2f7a53077bfdab38776e921aa2663a7337b448beaa9aa7006e2a3

File Explorer

1accff532dd2f7a53077bfdab38776e921aa2663a7337b448beaa9aa7006e2a3

.dll 88KB

1accff532dd2f7a53077bfdab38776e921aa2663a7337b448beaa9aa7006e2a3

IMPHASH 8969916d261734a2a7590ab9b287a04c
SHA256 1accff532dd2f7a53077bfdab38776e921aa2663a7337b448beaa9aa7006e2a3
MD5 82f6286d91e36a3230ea321a56b9818c
SHA1 3e85cda99592ed155e8c25763b21b53ea7be1a45
SHA512 59f542954a23f4efe0b98a808e0b1b762dd09d2149b8e1b55ccbee150183ada1fcc1f2995a0344e71c53f3e952e7e5f6c1eef413f2aa31ded1d109c9dd70f8e6
SSDEEP 768:hIlZ+uxGy2Kz8moPmJZ2DsQe7xmAbjz3TS34fAEBLyMhzLLvE8q5NMHoKz3x8vgO:WHE+zgKJ/z3TS34fdBLyuu5CoI3x8
TLSH
T190938E113AD2C8B2D29B0231E8B35B2EB7BE7E314DF10447AF653B5D6D31550DA39606
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21477

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EnterCriticalSection CloseHandle DisableThreadLibraryCalls FlushFileBuffers SetStdHandle LoadLibraryA GetProcAddress LCMapStringW LCMapStringA SetFilePointer GetStringTypeW GetStringTypeA IsBadCodePtr SetUnhandledExceptionFilter InterlockedDecrement InterlockedIncrement GetCurrentProcess FlushInstructionCache IsBadWritePtr lstrlenA MultiByteToWideChar WideCharToMultiByte lstrlenW lstrcpyA IsBadReadPtr RtlUnwind HeapReAlloc HeapAlloc HeapFree GetCommandLineA GetVersion RaiseException ExitProcess TerminateProcess HeapSize GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue GetLastError GetCPInfo GetACP GetOEMCP VirtualFree VirtualAlloc GetModuleHandleA GetModuleFileNameA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW WriteFile

user32

ShowWindow DefWindowProcA DestroyWindow IsWindow CreateWindowExA PostMessageA MoveWindow SetRectEmpty SetFocus CallWindowProcA GetWindowLongA SetWindowLongA GetParent

ole32

CoTaskMemFree StringFromCLSID CoCreateGuid CoTaskMemAlloc

oleaut32

SysStringLen SysAllocStringLen SysAllocString SysFreeString

atl

ord18 ord15 ord16 ord21 ord23 ord32 ord43 ord44 ord46 ord30 ord57

Sharing

General

Malware Config

Signatures

File Explorer

1accff532dd2f7a53077bfdab38776e921aa2663a7337b448beaa9aa7006e2a3

kernel32

user32

ole32

oleaut32

atl

generic