1bba98dcd9ba10c15f070582c9ac048ad897a921ae88f057effa9b2eb551c68b

Sharing

Copy URL Twitter E-mail

General

Target
1bba98dcd9ba10c15f070582c9ac048ad897a921ae88f057effa9b2eb551c68b
Size 928KB
Sample260804-271x2sab74
SHA256 1bba98dcd9ba10c15f070582c9ac048ad897a921ae88f057effa9b2eb551c68b
MD5 25d4147bfff2bece90c5f83d2a6a3372
SHA1 5ddf6070716e979e0e6c2bb9b30de78ca6036e5f
SHA512 007988cd784e9baa0987efb4dc45d41bb5d393bdad12d0ea659bbf2287bf24c73374651c1d56743311b4cf02a28908868b9978346143f9210710bdcdb413ccbf
SSDEEP 24576:E6MNaGI1NirAja65b5hqjV3a6KYnlqiQBSv:xirAj7bIQ9+
TLSH
T11D153C1AE2C67030C8951835182DE37D9B2D22304F6DEDF7CE52DED81AB56E06E7A316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bba98dcd9ba10c15f070582c9ac048ad897a921ae88f057effa9b2eb551c68b

File Explorer

1bba98dcd9ba10c15f070582c9ac048ad897a921ae88f057effa9b2eb551c68b

.dll 928KB

1bba98dcd9ba10c15f070582c9ac048ad897a921ae88f057effa9b2eb551c68b

IMPHASH 556f7d2914add35f56215d033f7aeed4
SHA256 1bba98dcd9ba10c15f070582c9ac048ad897a921ae88f057effa9b2eb551c68b
MD5 25d4147bfff2bece90c5f83d2a6a3372
SHA1 5ddf6070716e979e0e6c2bb9b30de78ca6036e5f
SHA512 007988cd784e9baa0987efb4dc45d41bb5d393bdad12d0ea659bbf2287bf24c73374651c1d56743311b4cf02a28908868b9978346143f9210710bdcdb413ccbf
SSDEEP 24576:E6MNaGI1NirAja65b5hqjV3a6KYnlqiQBSv:xirAj7bIQ9+
TLSH
T11D153C1AE2C67030C8951835182DE37D9B2D22304F6DEDF7CE52DED81AB56E06E7A316
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

winmm

CloseDriver OpenDriver SendDriverMessage mciGetErrorStringA mciGetErrorStringW mciSendCommandA mciSendCommandW mciSendStringA mciSendStringW mmioStringToFOURCCA

comctl32

InitCommonControlsEx

user32

AdjustWindowRect BeginPaint CreateWindowExW DefMDIChildProcW DefWindowProcW DestroyWindow DialogBoxParamW EnableWindow EndDialog EndPaint GetClientRect GetDlgItem GetWindow GetWindowLongW InvalidateRect IsWindowUnicode KillTimer LoadCursorW LoadStringW MessageBoxW RegisterClassW SendDlgItemMessageW SendMessageW SetCursor SetFocus SetTimer SetWindowLongW SetWindowPos SetWindowTextA SetWindowTextW ShowWindow wsprintfA wsprintfW

gdi32

CreateCompatibleDC CreateDIBSection CreateHalftonePalette DeleteDC DeleteObject RealizePalette SelectObject SelectPalette StretchBlt

advapi32

RegCloseKey RegDeleteValueA RegEnumValueA RegOpenKeyExA RegSetValueExA

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _strdup _strnicmp _wcsdup calloc free fwrite getenv isprint malloc memcmp memcpy memmove memset strchr strcmp strcpy strcspn strlen tolower wcschr wcslen

kernel32

DisableThreadLibraryCalls FreeLibrary GetModuleHandleW GetPrivateProfileSectionA GetPrivateProfileStringW GetProcAddress GetTickCount GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryA MulDiv MultiByteToWideChar RaiseException WideCharToMultiByte lstrcmpW

ntdll

RtlCreateUnicodeStringFromAsciiz RtlFreeUnicodeString _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

1bba98dcd9ba10c15f070582c9ac048ad897a921ae88f057effa9b2eb551c68b

winmm

comctl32

user32

gdi32

advapi32

ucrtbase

kernel32

ntdll

generic