e7f50241dfe86a0b38a85eac1ddc54e56b08a3a9e5153a76fea5e41589f98651

Sharing

Copy URL Twitter E-mail

General

Target
e7f50241dfe86a0b38a85eac1ddc54e56b08a3a9e5153a76fea5e41589f98651
Size 731KB
Sample260804-gl4ftsdh87
SHA256 e7f50241dfe86a0b38a85eac1ddc54e56b08a3a9e5153a76fea5e41589f98651
MD5 51761798af126efb4f7bfa54435e3678
SHA1 3488b06a973383b8be7e66d322bb5878dd33dbbf
SHA512 e12a1edd214c09edfa4ed5bad8d351932305f508f0814b93b6529c550e4e308fbfd21fa2989824881263f143835b5dfc1e46b5370ee8b6f01124a3f3dac2f240
SSDEEP 12288:Qtnm77nAkCeuhZQBMwCaDNVr4uzRSvAXhKoDS4nuGUp7T5JZVCFSviJ0n1GhuiHR:uhyL0/O3WTJQjIIVgeXR5xiMnhF
TLSH
T118F49E41A5F542ECD03BA03AD587B60BFB753848172048EB63D449683FB7BE417BB626
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7f50241dfe86a0b38a85eac1ddc54e56b08a3a9e5153a76fea5e41589f98651

File Explorer

e7f50241dfe86a0b38a85eac1ddc54e56b08a3a9e5153a76fea5e41589f98651

.dll 731KB

e7f50241dfe86a0b38a85eac1ddc54e56b08a3a9e5153a76fea5e41589f98651

IMPHASH ef0a943b365c5b2653286d68d943ee96
SHA256 e7f50241dfe86a0b38a85eac1ddc54e56b08a3a9e5153a76fea5e41589f98651
MD5 51761798af126efb4f7bfa54435e3678
SHA1 3488b06a973383b8be7e66d322bb5878dd33dbbf
SHA512 e12a1edd214c09edfa4ed5bad8d351932305f508f0814b93b6529c550e4e308fbfd21fa2989824881263f143835b5dfc1e46b5370ee8b6f01124a3f3dac2f240
SSDEEP 12288:Qtnm77nAkCeuhZQBMwCaDNVr4uzRSvAXhKoDS4nuGUp7T5JZVCFSviJ0n1GhuiHR:uhyL0/O3WTJQjIIVgeXR5xiMnhF
TLSH
T118F49E41A5F542ECD03BA03AD587B60BFB753848172048EB63D449683FB7BE417BB626
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

588896

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

dxgi

CreateDXGIFactory1

msvcp140

?_Throw_Cpp_error@std@@YAXH@Z ?_Xlength_error@std@@YAXPEBD@Z _Mtx_lock _Mtx_unlock

user32

GetClientRect GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState GetMessageExtraInfo SetCursorPos ClientToScreen EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard SetWindowLongPtrW KillTimer ScreenToClient LoadCursorA SetCursor TrackMouseEvent SetTimer GetAsyncKeyState CallWindowProcW DefWindowProcW GetCursorPos GetKeyboardLayout

kernel32

InitializeSListHead GetSystemTimeAsFileTime SleepConditionVariableSRW WakeAllConditionVariable IsDBCSLeadByte GetLocaleInfoA LoadLibraryA CreateEventA MultiByteToWideChar GlobalFree GlobalLock GlobalUnlock GlobalAlloc OutputDebugStringA LoadLibraryW GetProcAddress GetSystemDirectoryW MoveFileExW GetModuleFileNameW AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive GetLastError SetFilePointerEx InitOnceExecuteOnce CreateThread VirtualQuery DisableThreadLibraryCalls CreateDirectoryW CloseHandle AddVectoredExceptionHandler SetEvent WaitForSingleObject CreateEventW GetCurrentProcessId GetCurrentThreadId OpenThread SuspendThread ResumeThread GetThreadContext SetThreadContext GetLocalTime GetTickCount64 GetModuleHandleA CreateToolhelp32Snapshot Thread32First Thread32Next QueryPerformanceCounter QueryPerformanceFrequency GetModuleHandleW WideCharToMultiByte CreateFileW FlushFileBuffers WriteFile DeleteFileW GetFileSizeEx ReadFile

shell32

ShellExecuteW

imm32

ImmGetContext ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

vcruntime140

__std_type_info_destroy_list __current_exception_context __current_exception strchr strstr memchr __std_exception_copy __std_exception_destroy _CxxThrowException __std_terminate memmove __C_specific_handler memcpy memset memcmp

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-convert-l1-1-0

atof strtoul

api-ms-win-crt-string-l1-1-0

strcmp wcscat_s strncpy_s tolower wcsnlen wcslen strlen strncmp strncpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf fwrite ftell fflush __stdio_common_vfprintf _wfopen fseek fread fclose __acrt_iob_func __stdio_common_vsprintf __stdio_common_vsnwprintf_s __stdio_common_vsnprintf_s

api-ms-win-crt-math-l1-1-0

atan2f log logf round lround pow powf sqrtf sinf cosf fmodf _fdclass ceilf acosf

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s _time64

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _cexit _initterm_e terminate _initterm

Sharing

General

Malware Config

Signatures

File Explorer

e7f50241dfe86a0b38a85eac1ddc54e56b08a3a9e5153a76fea5e41589f98651

dxgi

msvcp140

user32

kernel32

shell32

imm32

d3dcompiler_47

vcruntime140

vcruntime140_1

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

generic