077cc7571d2f1e1e08f6d756efdeb2f8e1cbbc30e375407cf20cbb427364b49a

Sharing

Copy URL Twitter E-mail

General

Target
077cc7571d2f1e1e08f6d756efdeb2f8e1cbbc30e375407cf20cbb427364b49a
Size 156KB
Sample260730-nz289agh29
SHA256 077cc7571d2f1e1e08f6d756efdeb2f8e1cbbc30e375407cf20cbb427364b49a
MD5 fc0a7661f47d8f13f627cbb15e7e344f
SHA1 a1cea6fda8be25dd343f26411a07bb526c3b3732
SHA512 49ca8c0366cacbc124fc881bccddd6c4656f31d69c5cc3c304622cfa2abf40d57ed59b1989c81ec843f6180d70bd43212663179d12501f15f9e7366dddbeb69a
SSDEEP 1536:1EJ7OmgqqE7CyuroLTHP5yvd359aT/Zl/yeH9YMiG4dx5TnhoLzOpnXZdqoIWJdN:2JVqEOyVwBmxl/yedYMbjKXZ0o5JdKI
TLSH
T1E6F37C2272D2C073E50F003DF8545BB9D7BEAE3188B84543AF547FAC6F319949A1AA17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
077cc7571d2f1e1e08f6d756efdeb2f8e1cbbc30e375407cf20cbb427364b49a

File Explorer

077cc7571d2f1e1e08f6d756efdeb2f8e1cbbc30e375407cf20cbb427364b49a

.dll 156KB

077cc7571d2f1e1e08f6d756efdeb2f8e1cbbc30e375407cf20cbb427364b49a

IMPHASH e895520c746f05d43302f77b5f442e5b
SHA256 077cc7571d2f1e1e08f6d756efdeb2f8e1cbbc30e375407cf20cbb427364b49a
MD5 fc0a7661f47d8f13f627cbb15e7e344f
SHA1 a1cea6fda8be25dd343f26411a07bb526c3b3732
SHA512 49ca8c0366cacbc124fc881bccddd6c4656f31d69c5cc3c304622cfa2abf40d57ed59b1989c81ec843f6180d70bd43212663179d12501f15f9e7366dddbeb69a
SSDEEP 1536:1EJ7OmgqqE7CyuroLTHP5yvd359aT/Zl/yeH9YMiG4dx5TnhoLzOpnXZdqoIWJdN:2JVqEOyVwBmxl/yedYMbjKXZ0o5JdKI
TLSH
T1E6F37C2272D2C073E50F003DF8545BB9D7BEAE3188B84543AF547FAC6F319949A1AA17
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

67878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EnterCriticalSection CloseHandle CreateFileA DeviceIoControl GetVersionExA GetComputerNameA GetVolumeInformationA GetDiskFreeSpaceExA GetLastError DisableThreadLibraryCalls SetStdHandle LoadLibraryA GetStringTypeW GetStringTypeA IsBadCodePtr SetUnhandledExceptionFilter FlushFileBuffers SetFilePointer WriteFile GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA InterlockedDecrement InterlockedIncrement GetCurrentProcess FlushInstructionCache IsBadWritePtr MultiByteToWideChar lstrcmpA lstrlenA lstrcpyA lstrlenW WideCharToMultiByte ReadFile IsBadReadPtr GetStartupInfoA GetFileType GetStdHandle SetHandleCount LCMapStringW LCMapStringA HeapCreate Sleep InterlockedExchange RtlUnwind HeapReAlloc HeapAlloc HeapFree GetCommandLineA GetVersion RaiseException ExitProcess TerminateProcess HeapSize GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue GetProcAddress GetModuleHandleA GetCPInfo GetACP GetOEMCP VirtualFree VirtualAlloc GetModuleFileNameA GetEnvironmentVariableA HeapDestroy

user32

GetWindowLongA SetWindowLongA DefWindowProcA ShowWindow CallWindowProcA DestroyWindow IsWindow MessageBoxA PostMessageA SetRectEmpty CreateWindowExA SetFocus MoveWindow GetParent

ole32

CoCreateGuid CoTaskMemAlloc CoTaskMemFree StringFromCLSID

oleaut32

SysAllocString SysAllocStringLen SysStringLen SysFreeString

atl

ord18 ord15 ord16 ord21 ord23 ord32 ord43 ord44 ord46 ord31 ord30 ord57

ws2_32

inet_ntoa gethostbyname WSAStartup WSACleanup gethostname

netapi32

Netbios

Sharing

General

Malware Config

Signatures

File Explorer

077cc7571d2f1e1e08f6d756efdeb2f8e1cbbc30e375407cf20cbb427364b49a

kernel32

user32

ole32

oleaut32

atl

ws2_32

netapi32

generic