c4d2099100c850a1b28e4b1927b92381dc25d57572ae72b49f94ec9ae33870c7

Sharing

Copy URL Twitter E-mail

General

Target
c4d2099100c850a1b28e4b1927b92381dc25d57572ae72b49f94ec9ae33870c7
Size 456KB
Sample260804-3agzcasgrc
SHA256 c4d2099100c850a1b28e4b1927b92381dc25d57572ae72b49f94ec9ae33870c7
MD5 dec2619a47e89534746ca2582fe5ddef
SHA1 f7dd493805ae7d9990dc8d492885f375ac8f5612
SHA512 15860f2460100d71256197bd94b431ae54ab6b6bbeb7d282bacea71e6e33aed76ad885cc4e7fb5f0a9cd9887e0b4ff88a7ba88dafc6f9f974f22c7568e90f5b8
SSDEEP 3072:UYMmHWrijs0ZU/SnOEi8795KPXfpPbL0ppQ86nUYMmHWrijs0ZU/SnOEi8795KPL:UzmHWr7mOPpPSPzmHWr7mOPpPS
TLSH
T192A45A61A79584AAF079C2749D76C733B63ABC016731ABDF1700C6690DB96E1FA39F00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4d2099100c850a1b28e4b1927b92381dc25d57572ae72b49f94ec9ae33870c7

File Explorer

c4d2099100c850a1b28e4b1927b92381dc25d57572ae72b49f94ec9ae33870c7

.dll 456KB

c4d2099100c850a1b28e4b1927b92381dc25d57572ae72b49f94ec9ae33870c7

IMPHASH 02a657035ef4e1810bd5ac5035d30935
SHA256 c4d2099100c850a1b28e4b1927b92381dc25d57572ae72b49f94ec9ae33870c7
MD5 dec2619a47e89534746ca2582fe5ddef
SHA1 f7dd493805ae7d9990dc8d492885f375ac8f5612
SHA512 15860f2460100d71256197bd94b431ae54ab6b6bbeb7d282bacea71e6e33aed76ad885cc4e7fb5f0a9cd9887e0b4ff88a7ba88dafc6f9f974f22c7568e90f5b8
SSDEEP 3072:UYMmHWrijs0ZU/SnOEi8795KPXfpPbL0ppQ86nUYMmHWrijs0ZU/SnOEi8795KPL:UzmHWr7mOPpPSPzmHWr7mOPpPS
TLSH
T192A45A61A79584AAF079C2749D76C733B63ABC016731ABDF1700C6690DB96E1FA39F00
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

98720

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

msacm32

acmFormatChooseW acmFormatDetailsW acmFormatSuggest acmFormatTagDetailsW acmMetrics acmStreamClose acmStreamConvert acmStreamOpen acmStreamPrepareHeader acmStreamSize acmStreamUnprepareHeader

msvfw32

ICClose ICCompress ICCompressorChoose ICCompressorFree ICDecompress ICGetDisplayFormat ICGetInfo ICLocate ICOpen ICSendMessage

winmm

mmioAscend mmioClose mmioCreateChunk mmioDescend mmioFlush mmioOpenA mmioOpenW mmioRead mmioSeek mmioWrite

ole32

CoCreateInstance CoTaskMemAlloc OleInitialize

user32

CheckDlgButton DialogBoxParamW EnableWindow EndDialog GetDlgItem GetDlgItemInt IsDlgButtonChecked LoadStringW SendDlgItemMessageW SendMessageW SetDlgItemInt SetDlgItemTextW wsprintfA wsprintfW

advapi32

RegCloseKey RegEnumKeyW RegOpenKeyW RegQueryValueA RegQueryValueW

rpcrt4

CStdStubBuffer_AddRef CStdStubBuffer_Connect CStdStubBuffer_CountRefs CStdStubBuffer_DebugServerQueryInterface CStdStubBuffer_DebugServerRelease CStdStubBuffer_Disconnect CStdStubBuffer_Invoke CStdStubBuffer_IsIIDSupported CStdStubBuffer_QueryInterface IUnknown_AddRef_Proxy IUnknown_QueryInterface_Proxy IUnknown_Release_Proxy NdrCStdStubBuffer_Release NdrDllCanUnloadNow NdrDllGetClassObject NdrOleAllocate NdrOleFree

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _assert _recalloc _strdup calloc free fwrite getenv malloc memcmp memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen wcslen wcsrchr

kernel32

DisableThreadLibraryCalls EnumResourceNamesW FindResourceW GetEnvironmentVariableW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryW LoadResource MulDiv MultiByteToWideChar SizeofResource WideCharToMultiByte lstrcmpW

ntdll

_vsnprintf

AVIBuildFilter AVIBuildFilterA AVIBuildFilterW AVIClearClipboard AVIFileAddRef AVIFileCreateStream AVIFileCreateStreamA AVIFileCreateStreamW AVIFileEndRecord AVIFileExit AVIFileGetStream AVIFileInfo AVIFileInfoA AVIFileInfoW AVIFileInit AVIFileOpen AVIFileOpenA AVIFileOpenW AVIFileReadData AVIFileRelease AVIFileWriteData AVIGetFromClipboard AVIMakeCompressedStream AVIMakeFileFromStreams AVIMakeStreamFromClipboard AVIPutFileOnClipboard AVISave AVISaveA AVISaveOptions AVISaveOptionsFree AVISaveV AVISaveVA AVISaveVW AVISaveW AVIStreamAddRef AVIStreamBeginStreaming AVIStreamCreate AVIStreamEndStreaming AVIStreamFindSample AVIStreamGetFrame AVIStreamGetFrameClose AVIStreamGetFrameOpen AVIStreamInfo AVIStreamInfoA AVIStreamInfoW AVIStreamLength AVIStreamOpenFromFile AVIStreamOpenFromFileA AVIStreamOpenFromFileW AVIStreamRead AVIStreamReadData AVIStreamReadFormat AVIStreamRelease AVIStreamSampleToTime AVIStreamSetFormat AVIStreamStart AVIStreamTimeToSample AVIStreamWrite AVIStreamWriteData CLSID_AVISimpleUnMarshal CreateEditableStream DllCanUnloadNow DllGetClassObject DllRegisterServer DllUnregisterServer EditStreamClone EditStreamCopy EditStreamCut EditStreamPaste EditStreamSetInfo EditStreamSetInfoA EditStreamSetInfoW EditStreamSetName EditStreamSetNameA EditStreamSetNameW IID_IAVIEditStream IID_IAVIFile IID_IAVIStream IID_IGetFrame

Sharing

General

Malware Config

Signatures

File Explorer

c4d2099100c850a1b28e4b1927b92381dc25d57572ae72b49f94ec9ae33870c7

msacm32

msvfw32

winmm

ole32

user32

advapi32

rpcrt4

ucrtbase

kernel32

ntdll

generic