cbf015da0498947596695f2f3b1a5ab0c4aeca977689b5abe8c6eff52b530b5f

Sharing

Copy URL Twitter E-mail

General

Target
cbf015da0498947596695f2f3b1a5ab0c4aeca977689b5abe8c6eff52b530b5f
Size 528KB
Sample260804-3fwppatama
SHA256 cbf015da0498947596695f2f3b1a5ab0c4aeca977689b5abe8c6eff52b530b5f
MD5 724ffbb1b8dfcf3e9e453bc5dae8c63a
SHA1 87fe836a208928a5f7c36e4d850e4496d925c250
SHA512 0c4fe6dfb147df31533485938c70b15b45f10209f618c50a20762b43da3f004b3d8f4128746f3b971b6337f5078748d8d6b9e2f2c244bfd4ebf13b3b7ee82841
SSDEEP 3072:IXGKMzcOchr5KPhT0ZO/qdcsAghV0ezVRxaz0bNIESdtBwj6ftHB9KXTwXGKMzcT:IXIYOiO2ZMXIYOiO2Z
TLSH
T1DAB4E66197E5A02AF0B65B341C7686123A36BD00AF31D6EF6F00725E1C34ED1EB75B22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbf015da0498947596695f2f3b1a5ab0c4aeca977689b5abe8c6eff52b530b5f

File Explorer

cbf015da0498947596695f2f3b1a5ab0c4aeca977689b5abe8c6eff52b530b5f

.dll 528KB

cbf015da0498947596695f2f3b1a5ab0c4aeca977689b5abe8c6eff52b530b5f

IMPHASH a8a168f064f76dd80c540a25e3a39ac4
SHA256 cbf015da0498947596695f2f3b1a5ab0c4aeca977689b5abe8c6eff52b530b5f
MD5 724ffbb1b8dfcf3e9e453bc5dae8c63a
SHA1 87fe836a208928a5f7c36e4d850e4496d925c250
SHA512 0c4fe6dfb147df31533485938c70b15b45f10209f618c50a20762b43da3f004b3d8f4128746f3b971b6337f5078748d8d6b9e2f2c244bfd4ebf13b3b7ee82841
SSDEEP 3072:IXGKMzcOchr5KPhT0ZO/qdcsAghV0ezVRxaz0bNIESdtBwj6ftHB9KXTwXGKMzcT:IXIYOiO2ZMXIYOiO2Z
TLSH
T1DAB4E66197E5A02AF0B65B341C7686123A36BD00AF31D6EF6F00725E1C34ED1EB75B22
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

55712

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

oleaut32

SafeArrayAccessData SafeArrayCreate SafeArrayDestroy SafeArrayGetUBound SafeArrayPutElement SafeArrayUnaccessData SysAllocString SysAllocStringLen SysFreeString SysStringLen SystemTimeToVariantTime VarBoolFromCy VarBoolFromDate VarBoolFromDec VarBoolFromI1 VarBoolFromI2 VarBoolFromI4 VarBoolFromI8 VarBoolFromR4 VarBoolFromR8 VarBoolFromStr VarBoolFromUI1 VarBoolFromUI2 VarBoolFromUI4 VarBoolFromUI8 VarBstrFromBool VarBstrFromCy VarBstrFromDate VarBstrFromDec VarBstrFromI1 VarBstrFromI2 VarBstrFromI4 VarBstrFromI8 VarBstrFromR4 VarBstrFromR8 VarBstrFromUI1 VarBstrFromUI2 VarBstrFromUI4 VarBstrFromUI8 VarCyFromBool VarCyFromDate VarCyFromDec VarCyFromI1 VarCyFromI2 VarCyFromI4 VarCyFromI8 VarCyFromR4 VarCyFromR8 VarCyFromStr VarCyFromUI1 VarCyFromUI2 VarCyFromUI4 VarCyFromUI8 VarDateFromBool VarDateFromCy VarDateFromDec VarDateFromI1 VarDateFromI2 VarDateFromI4 VarDateFromI8 VarDateFromR4 VarDateFromR8 VarDateFromStr VarDateFromUI1 VarDateFromUI2 VarDateFromUI4 VarDateFromUI8 VarDecFromI8 VarI1FromBool VarI1FromCy VarI1FromDate VarI1FromDec VarI1FromI2 VarI1FromI4 VarI1FromI8 VarI1FromR4 VarI1FromR8 VarI1FromStr VarI1FromUI1 VarI1FromUI2 VarI1FromUI4 VarI1FromUI8 VarI2FromBool VarI2FromCy VarI2FromDate VarI2FromDec VarI2FromI1 VarI2FromI4 VarI2FromI8 VarI2FromR4 VarI2FromR8 VarI2FromStr VarI2FromUI1 VarI2FromUI2 VarI2FromUI4 VarI2FromUI8 VarI4FromBool VarI4FromCy VarI4FromDate VarI4FromDec VarI4FromI1 VarI4FromI2 VarI4FromI8 VarI4FromR4 VarI4FromR8 VarI4FromStr VarI4FromUI1 VarI4FromUI2 VarI4FromUI4 VarI4FromUI8 VarI8FromStr VarR4FromBool VarR4FromCy VarR4FromDate VarR4FromDec VarR4FromI1 VarR4FromI2 VarR4FromI4 VarR4FromI8 VarR4FromR8 VarR4FromStr VarR4FromUI1 VarR4FromUI2 VarR4FromUI4 VarR4FromUI8 VarR8FromBool VarR8FromCy VarR8FromDate VarR8FromDec VarR8FromI1 VarR8FromI2 VarR8FromI4 VarR8FromI8 VarR8FromR4 VarR8FromStr VarR8FromUI1 VarR8FromUI2 VarR8FromUI4 VarR8FromUI8 VarUI1FromBool VarUI1FromCy VarUI1FromDate VarUI1FromDec VarUI1FromI1 VarUI1FromI2 VarUI1FromI4 VarUI1FromI8 VarUI1FromR4 VarUI1FromR8 VarUI1FromStr VarUI1FromUI2 VarUI1FromUI4 VarUI1FromUI8 VarUI2FromBool VarUI2FromCy VarUI2FromDate VarUI2FromDec VarUI2FromI1 VarUI2FromI2 VarUI2FromI4 VarUI2FromI8 VarUI2FromR4 VarUI2FromR8 VarUI2FromStr VarUI2FromUI1 VarUI2FromUI4 VarUI2FromUI8 VarUI4FromBool VarUI4FromCy VarUI4FromDate VarUI4FromDec VarUI4FromI1 VarUI4FromI2 VarUI4FromI4 VarUI4FromI8 VarUI4FromR4 VarUI4FromR8 VarUI4FromStr VarUI4FromUI1 VarUI4FromUI2 VarUI4FromUI8 VarUI8FromBool VarUI8FromCy VarUI8FromDate VarUI8FromDec VarUI8FromI1 VarUI8FromI2 VarUI8FromI8 VarUI8FromR4 VarUI8FromR8 VarUI8FromStr VarUI8FromUI1 VarUI8FromUI2 VarUI8FromUI4 VariantChangeType VariantClear VariantCopy VariantInit VariantTimeToSystemTime

ole32

CLSIDFromProgID CLSIDFromString CoCreateInstance CoTaskMemAlloc CoTaskMemFree ProgIDFromCLSID StringFromGUID2

comctl32

PropertySheetW

user32

CharLowerW EnableWindow GetDlgItem GetParent GetWindowRect LoadStringW MessageBoxA MessageBoxW SendMessageA SendMessageW SetWindowLongPtrW wsprintfW

advapi32

RegCloseKey RegEnumKeyExW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegOpenKeyW RegQueryValueW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf __stdio_common_vswscanf _strdup _wcsdup _wcsicmp bsearch calloc free fwrite getenv iswspace malloc memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen wcscat wcschr wcscpy wcslen wcsstr

kernel32

DisableThreadLibraryCalls EnumResourceNamesW FindResourceW GetEnvironmentVariableW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc IsBadStringPtrW LoadLibraryW LoadResource MultiByteToWideChar SizeofResource WideCharToMultiByte

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

cbf015da0498947596695f2f3b1a5ab0c4aeca977689b5abe8c6eff52b530b5f

oleaut32

ole32

comctl32

user32

advapi32

ucrtbase

kernel32

ntdll

generic