b6de3f33ebdf94301a8391fb585ca0f44421aa7881ea307f7f6cbc25ea74eb7e

Sharing

Copy URL Twitter E-mail

General

Target
b6de3f33ebdf94301a8391fb585ca0f44421aa7881ea307f7f6cbc25ea74eb7e
Size 588KB
Sample260730-nz3vsahp2t
SHA256 b6de3f33ebdf94301a8391fb585ca0f44421aa7881ea307f7f6cbc25ea74eb7e
MD5 fbe52a0db3804d8580f03eff357d8cbe
SHA1 c7170a9f9a6fe35217478934333b07d855e03199
SHA512 d4cdc919042bad1d21b508109d405e8d9bc250ddaaf8d89f3e50434aad9938f47f2dc9225e1dd911a74726e92c94e0c6b32df0510330101c6a5d0ecbca49d111
SSDEEP 12288:TYgZdjUcPzYQwUEEGy4Ue6jzXdcrOiKRoxerQ9yb9ZYazbzW9gXy6Nc3auK6ljvc:MgjUCz4rUU9vxb4ywzKo+GzRV
TLSH
T1A7D46C1376D1C0B7FB4E0034B5187FB6E2B95E36C77D284367401F69AF3A9A2A416E09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6de3f33ebdf94301a8391fb585ca0f44421aa7881ea307f7f6cbc25ea74eb7e

File Explorer

b6de3f33ebdf94301a8391fb585ca0f44421aa7881ea307f7f6cbc25ea74eb7e

.dll 588KB

b6de3f33ebdf94301a8391fb585ca0f44421aa7881ea307f7f6cbc25ea74eb7e

IMPHASH 0f326d27c4aed5a6543aaddc2cb7b345
SHA256 b6de3f33ebdf94301a8391fb585ca0f44421aa7881ea307f7f6cbc25ea74eb7e
MD5 fbe52a0db3804d8580f03eff357d8cbe
SHA1 c7170a9f9a6fe35217478934333b07d855e03199
SHA512 d4cdc919042bad1d21b508109d405e8d9bc250ddaaf8d89f3e50434aad9938f47f2dc9225e1dd911a74726e92c94e0c6b32df0510330101c6a5d0ecbca49d111
SSDEEP 12288:TYgZdjUcPzYQwUEEGy4Ue6jzXdcrOiKRoxerQ9yb9ZYazbzW9gXy6Nc3auK6ljvc:MgjUCz4rUU9vxb4ywzKo+GzRV
TLSH
T1A7D46C1376D1C0B7FB4E0034B5187FB6E2B95E36C77D284367401F69AF3A9A2A416E09
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

401459

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryA GetLocalTime InterlockedIncrement InterlockedDecrement DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetLocaleInfoW SetEndOfFile CreateFileA ReadFile SetStdHandle IsBadCodePtr GetTimeZoneInformation GetStringTypeW GetStringTypeA GetUserDefaultLCID EnumSystemLocalesA GetLocaleInfoA GetProcAddress IsValidLocale GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount GetOEMCP GetACP VirtualAlloc VirtualFree HeapCreate HeapDestroy GetVersionExA GetEnvironmentVariableA SetUnhandledExceptionFilter CloseHandle FlushFileBuffers SetFilePointer GetModuleFileNameA GetStdHandle FreeLibrary GetCurrentProcess FlushInstructionCache MultiByteToWideChar lstrlenA IsBadWritePtr lstrcmpA lstrlenW WideCharToMultiByte lstrcpyA IsBadReadPtr lstrcatA IsValidCodePage Sleep InterlockedExchange RtlUnwind GetLastError RaiseException HeapFree HeapReAlloc HeapAlloc GetCommandLineA GetVersion ExitProcess LCMapStringA LCMapStringW GetCPInfo CompareStringA CompareStringW TerminateProcess HeapSize GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue GetModuleHandleA WriteFile SetEnvironmentVariableA

user32

DefWindowProcA SetRect GetClientRect SetWindowTextA MoveWindow GetSystemMetrics SendMessageA CreateWindowExA DialogBoxParamA SetFocus SetRectEmpty GetWindowRect CallWindowProcA GetWindowLongA ShowWindow GetParent PostMessageA MessageBoxA OffsetRect DestroyWindow SetWindowLongA IsWindow EndDialog

comdlg32

GetOpenFileNameA

ole32

CoTaskMemFree CoTaskMemAlloc StringFromCLSID CoCreateGuid

oleaut32

SysAllocStringLen SysAllocString SysStringLen SysFreeString

atl

ord18 ord57 ord15 ord16 ord21 ord23 ord32 ord31 ord44 ord43 ord46 ord30

Sharing

General

Malware Config

Signatures

File Explorer

b6de3f33ebdf94301a8391fb585ca0f44421aa7881ea307f7f6cbc25ea74eb7e

kernel32

user32

comdlg32

ole32

oleaut32

atl

generic