3963a23125828d9d9ae816f49c91073991df1cbea19a1b433223f57c6c8e202f

Sharing

Copy URL Twitter E-mail

General

Target
3963a23125828d9d9ae816f49c91073991df1cbea19a1b433223f57c6c8e202f
Size 42KB
Sample260804-yrt8saxset
SHA256 3963a23125828d9d9ae816f49c91073991df1cbea19a1b433223f57c6c8e202f
MD5 3b1f17bbb6af905f69b02cff02bd9bf8
SHA1 5fec4494042849922d2567f844e7c4a06d8f040f
SHA512 e3a7d3947fca9148f9c0a2d4168f9c571b35307905141bea0d85b0cb4ab55cfda5ee501e7250c0d2e568c16817c7734d290bb7761c3bc12792931b0ef7021542
SSDEEP 384:tqWDdpLQl8Giy0llkzHbioIqbugC492M2FMjfXlxk4mDjsIm9pRuZoijtBKYkOll:toAnoTiI2M2FWXnkBPQULS8WSFxy5x
TLSH
T1B013A512ED16D137C7480D76E9364F878E9F9F829BD064CFEB886CD909624E6573E201
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3963a23125828d9d9ae816f49c91073991df1cbea19a1b433223f57c6c8e202f

File Explorer

3963a23125828d9d9ae816f49c91073991df1cbea19a1b433223f57c6c8e202f

.dll 42KB

3963a23125828d9d9ae816f49c91073991df1cbea19a1b433223f57c6c8e202f

IMPHASH fa2862274db02d9db15af7a38699bff5
SHA256 3963a23125828d9d9ae816f49c91073991df1cbea19a1b433223f57c6c8e202f
MD5 3b1f17bbb6af905f69b02cff02bd9bf8
SHA1 5fec4494042849922d2567f844e7c4a06d8f040f
SHA512 e3a7d3947fca9148f9c0a2d4168f9c571b35307905141bea0d85b0cb4ab55cfda5ee501e7250c0d2e568c16817c7734d290bb7761c3bc12792931b0ef7021542
SSDEEP 384:tqWDdpLQl8Giy0llkzHbioIqbugC492M2FMjfXlxk4mDjsIm9pRuZoijtBKYkOll:toAnoTiI2M2FWXnkBPQULS8WSFxy5x
TLSH
T1B013A512ED16D137C7480D76E9364F878E9F9F829BD064CFEB886CD909624E6573E201
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13350

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\X\source\repos\HBuilderX\Release\HBuilderX.pdb

kernel32

VirtualFree SetUnhandledExceptionFilter UnhandledExceptionFilter VirtualAlloc GetProcAddress LoadLibraryA GetModuleFileNameA ReadFile CloseHandle GetFileSize GetFileAttributesA CreateFileA GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsProcessorFeaturePresent IsDebuggerPresent

advapi32

CryptDecrypt CryptDeriveKey CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW CryptDestroyKey

msvcp140

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z ?good@ios_base@std@@QBE_NXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?uncaught_exception@std@@YA_NXZ ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xlength_error@std@@YAXPBD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

vcruntime140

memmove __CxxFrameHandler3 __std_terminate __std_exception_copy __std_exception_destroy memcpy memset _except_handler4_common _CxxThrowException __std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_invoke_watson _execute_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _cexit _initterm_e _initterm _initialize_onexit_table

api-ms-win-crt-heap-l1-1-0

_callnewh free malloc

DLLGenHWID DebugCreate GenHWID GetDllVersionA GetHandleVerifier ImageMagickEx_FreePNGBuffer ImageMagickEx_SVGToPNGBuffer ImageMagickEx_SVGToPNGBufferByDpi IsSandboxedProcess OnigDefaultCaseFoldFlag OnigDefaultSyntax OnigEncAsciiCtypeTable OnigEncAsciiToLowerCaseTable OnigEncDefaultCharEncoding OnigEncISO_8859_1_ToLowerCaseTable OnigEncodingASCII OnigEncodingUTF8 OnigSyntaxRuby RelaunchChromeBrowserWithNewCommandLineIfNeeded _ZTI8DllClass cef_add_cross_origin_whitelist_entry cef_api_hash cef_base64decode cef_base64encode cef_begin_tracing cef_binary_value_create cef_browser_host_create_browser cef_browser_host_create_browser_sync cef_browser_view_create cef_browser_view_get_for_browser cef_clear_cross_origin_whitelist cef_clear_scheme_handler_factories cef_command_line_create cef_command_line_get_global cef_cookie_manager_create_manager cef_cookie_manager_get_blocking_manager cef_cookie_manager_get_global_manager cef_crash_reporting_enabled cef_create_context_shared cef_create_directory cef_create_new_temp_directory cef_create_temp_directory_in_directory cef_create_url cef_currently_on cef_delete_file cef_dictionary_value_create cef_directory_exists cef_display_get_alls cef_display_get_count cef_display_get_matching_bounds cef_display_get_nearest_point cef_display_get_primary cef_do_message_loop_work cef_drag_data_create cef_enable_highdpi_support cef_end_tracing cef_execute_java_script_with_user_gesture_for_tests cef_execute_process cef_format_url_for_security_display cef_get_current_platform_thread_handle cef_get_current_platform_thread_id cef_get_extensions_for_mime_type cef_get_mime_type cef_get_min_log_level cef_get_path cef_get_temp_directory cef_get_vlog_level cef_image_create cef_initialize cef_is_cert_status_error cef_is_cert_status_minor_error cef_is_web_plugin_unstable cef_label_button_create cef_launch_process cef_list_value_create cef_load_crlsets_file cef_log cef_menu_button_create cef_menu_model_create cef_now_from_system_trace_time cef_panel_create cef_parse_json cef_parse_jsonand_return_error cef_parse_url cef_post_data_create cef_post_data_element_create cef_post_delayed_task cef_post_task cef_print_settings_create cef_process_message_create cef_quit_message_loop cef_refresh_web_plugins cef_register_extension cef_register_scheme_handler_factory cef_register_web_plugin_crash cef_register_widevine_cdm cef_remove_cross_origin_whitelist_entry cef_request_context_create_context cef_request_context_get_global_context cef_request_create cef_resource_bundle_get_global cef_response_create cef_run_message_loop cef_scroll_view_create cef_server_create cef_set_crash_key_value cef_set_osmodal_loop cef_shutdown cef_stream_reader_create_for_data cef_stream_reader_create_for_file cef_stream_reader_create_for_handler cef_stream_writer_create_for_file cef_stream_writer_create_for_handler cef_string_ascii_to_utf16 cef_string_ascii_to_wide cef_string_list_alloc cef_string_list_append cef_string_list_clear cef_string_list_copy cef_string_list_free cef_string_list_size cef_string_list_value cef_string_map_alloc cef_string_map_append cef_string_map_clear cef_string_map_find cef_string_map_free cef_string_map_key cef_string_map_size cef_string_map_value cef_string_multimap_alloc cef_string_multimap_append cef_string_multimap_clear cef_string_multimap_enumerate cef_string_multimap_find_count cef_string_multimap_free cef_string_multimap_key cef_string_multimap_size cef_string_multimap_value cef_string_userfree_utf16_alloc cef_string_userfree_utf16_free cef_string_userfree_utf8_alloc cef_string_userfree_utf8_free cef_string_userfree_wide_alloc cef_string_userfree_wide_free cef_string_utf16_clear cef_string_utf16_cmp cef_string_utf16_set cef_string_utf16_to_lower cef_string_utf16_to_upper cef_string_utf16_to_utf8 cef_string_utf16_to_wide cef_string_utf8_clear cef_string_utf8_cmp cef_string_utf8_set cef_string_utf8_to_utf16 cef_string_utf8_to_wide cef_string_wide_clear cef_string_wide_cmp cef_string_wide_set cef_string_wide_to_utf16 cef_string_wide_to_utf8 cef_task_runner_get_for_current_thread cef_task_runner_get_for_thread cef_textfield_create cef_thread_create cef_time_delta cef_time_from_doublet cef_time_from_timet cef_time_now cef_time_to_doublet cef_time_to_timet cef_trace_counter cef_trace_counter_id cef_trace_event_async_begin cef_trace_event_async_end cef_trace_event_async_step_into cef_trace_event_async_step_past cef_trace_event_begin cef_trace_event_end cef_trace_event_instant cef_translator_test_create cef_translator_test_ref_ptr_library_child_child_create cef_translator_test_ref_ptr_library_child_create cef_translator_test_ref_ptr_library_create cef_translator_test_scoped_library_child_child_create cef_translator_test_scoped_library_child_create cef_translator_test_scoped_library_create cef_unregister_internal_web_plugin cef_uridecode cef_uriencode cef_urlrequest_create cef_v8context_get_current_context cef_v8context_get_entered_context cef_v8context_in_context cef_v8stack_trace_get_current cef_v8value_create_array cef_v8value_create_array_buffer cef_v8value_create_bool cef_v8value_create_date cef_v8value_create_double cef_v8value_create_function cef_v8value_create_int cef_v8value_create_null cef_v8value_create_object cef_v8value_create_string cef_v8value_create_uint cef_v8value_create_undefined cef_value_create cef_version_info cef_visit_web_plugin_info cef_waitable_event_create cef_window_create_top_level cef_write_json cef_xml_reader_create cef_zip_directory cef_zip_reader_create main onig_copy_encoding onig_end onig_error_code_to_str onig_foreach_name onig_free onig_free_body onig_get_capture_tree onig_get_case_fold_flag onig_get_default_case_fold_flag onig_get_encoding onig_get_match_stack_limit_size onig_get_options onig_get_syntax onig_init onig_match onig_name_to_backref_number onig_name_to_group_numbers onig_new onig_new_without_alloc onig_noname_group_capture_is_active onig_number_of_capture_histories onig_number_of_captures onig_number_of_names onig_reg_init onig_region_clear onig_region_copy onig_region_free onig_region_init onig_region_new onig_region_resize onig_region_set onig_search onig_search_gpos onig_set_default_case_fold_flag onig_set_match_stack_limit_size onig_set_verb_warn_func onig_set_warn_func onigenc_always_false_is_allowed_reverse_match onigenc_always_true_is_allowed_reverse_match onigenc_apply_all_case_fold_with_map onigenc_ascii_apply_all_case_fold onigenc_ascii_get_case_fold_codes_by_str onigenc_ascii_is_code_ctype onigenc_ascii_mbc_case_fold onigenc_get_case_fold_codes_by_str_with_map onigenc_get_default_encoding onigenc_get_left_adjust_char_head onigenc_get_prev_char_head onigenc_get_right_adjust_char_head onigenc_get_right_adjust_char_head_with_prev onigenc_init onigenc_is_mbc_newline_0x0a onigenc_mb2_code_to_mbc onigenc_mb2_code_to_mbclen onigenc_mb2_is_code_ctype onigenc_mb4_code_to_mbc onigenc_mb4_code_to_mbclen onigenc_mb4_is_code_ctype onigenc_mbn_mbc_case_fold onigenc_mbn_mbc_to_code onigenc_minimum_property_name_to_ctype onigenc_not_support_get_ctype_code_range onigenc_set_default_caseconv_table onigenc_set_default_encoding onigenc_single_byte_code_to_mbc onigenc_single_byte_code_to_mbclen onigenc_single_byte_left_adjust_char_head onigenc_single_byte_mbc_enc_len onigenc_single_byte_mbc_to_code onigenc_step onigenc_step_back onigenc_str_bytelen_null onigenc_strlen onigenc_strlen_null onigenc_unicode_apply_all_case_fold onigenc_unicode_ctype_code_range onigenc_unicode_get_case_fold_codes_by_str onigenc_unicode_is_code_ctype onigenc_unicode_mbc_case_fold onigenc_unicode_property_name_to_ctype onigenc_utf16_32_get_ctype_code_range onigenc_with_ascii_strncmp onigenc_with_ascii_strnicmp

Sharing

General

Malware Config

Signatures

File Explorer

3963a23125828d9d9ae816f49c91073991df1cbea19a1b433223f57c6c8e202f

kernel32

advapi32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic