06121ff31b38afd55112887d7373d387213f1ecdcfc007c86d66eeadbabb1e94

General

Target
06121ff31b38afd55112887d7373d387213f1ecdcfc007c86d66eeadbabb1e94
Size 2.2MB
Sample260803-dpvrbaxeqb
SHA256 06121ff31b38afd55112887d7373d387213f1ecdcfc007c86d66eeadbabb1e94
MD5 fc717b39c4048bfef9822737b68f9740
SHA1 65520782d4fccc60b89de6362b4de8a1155efec6
SHA512 77921317b4128f09b0ae3fc0b709d27e378e271de7afc4c5529256a117fc30e5bc7ab4e95ddf66e3fe64ccb6bddeb307125bafc38efa2c3a90f31071fd1d1002
SSDEEP 6144:VvOXoRoenx1BF999999999999999NOtXyyyyyyyyyyyyyyyy999999999999999g:V2KoenxTlODYl8iYzixsFfji+isZSX
TLSH
T18BA543747D468293C08A62F242E6DB0273F72F9B2B13D15671A232BF487E2C09E765D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06121ff31b38afd55112887d7373d387213f1ecdcfc007c86d66eeadbabb1e94

File Explorer

06121ff31b38afd55112887d7373d387213f1ecdcfc007c86d66eeadbabb1e94

.dll 2.2MB

06121ff31b38afd55112887d7373d387213f1ecdcfc007c86d66eeadbabb1e94

IMPHASH 1c3aa07e05d9390caf521f5c7bb78498
SHA256 06121ff31b38afd55112887d7373d387213f1ecdcfc007c86d66eeadbabb1e94
MD5 fc717b39c4048bfef9822737b68f9740
SHA1 65520782d4fccc60b89de6362b4de8a1155efec6
SHA512 77921317b4128f09b0ae3fc0b709d27e378e271de7afc4c5529256a117fc30e5bc7ab4e95ddf66e3fe64ccb6bddeb307125bafc38efa2c3a90f31071fd1d1002
SSDEEP 6144:VvOXoRoenx1BF999999999999999NOtXyyyyyyyyyyyyyyyy999999999999999g:V2KoenxTlODYl8iYzixsFfji+isZSX
TLSH
T18BA543747D468293C08A62F242E6DB0273F72F9B2B13D15671A232BF487E2C09E765D5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

46974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

setupapi

SetupDiGetDeviceInterfaceDetailW SetupDiEnumDeviceInterfaces SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList

kernel32

HeapReAlloc FlushFileBuffers InterlockedIncrement InterlockedDecrement WaitForSingleObject CloseHandle CreateMutexW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection ReleaseMutex SetEvent InterlockedExchangeAdd CreateEventW Sleep InterlockedExchange CreateThread ResetEvent QueryPerformanceCounter ReadFile CreateFileW GetOverlappedResult GetLastError DeviceIoControl CancelIo QueryPerformanceFrequency GetCurrentThreadId EncodePointer DecodePointer GetSystemTimeAsFileTime GetCommandLineA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapSize HeapFree IsProcessorFeaturePresent GetProcAddress GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy GetTickCount GetCurrentProcessId SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind LoadLibraryW SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

06121ff31b38afd55112887d7373d387213f1ecdcfc007c86d66eeadbabb1e94

setupapi

kernel32

generic