6c00bdbcd7cb253da30de5960531708e45cf55165c5847b94faf7e5b340ebee8

Sharing

Copy URL Twitter E-mail

General

Target
6c00bdbcd7cb253da30de5960531708e45cf55165c5847b94faf7e5b340ebee8
Size 1.1MB
Sample260805-ac7css1taz
SHA256 6c00bdbcd7cb253da30de5960531708e45cf55165c5847b94faf7e5b340ebee8
MD5 9f94ecd0bb8c5a2ebf56fab27860c5ef
SHA1 873db133b554ed7ce6e528445cccec9e057266a8
SHA512 575cf4125fe8bf6218982053dbbc555c8db88281eed62c3f876df354cec0f47fee31fb3e124ea0115a4628df59377d82947c5f124dbd35a28e51683564d58bcb
SSDEEP 12288:yfYRk4o5GrYQKYuhYoga3nG3wG6A/Jant4CZFc2P8dNLx6m1M/7pQcX6BCklXuol:e4kV5rQVuhowG6A/JaiVcv804kh5y
TLSH
T14C356C22E2539170D44151301C3EE33DAB286E12CBA7AECBDFA1BCCD6B756D26539706
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c00bdbcd7cb253da30de5960531708e45cf55165c5847b94faf7e5b340ebee8

File Explorer

6c00bdbcd7cb253da30de5960531708e45cf55165c5847b94faf7e5b340ebee8

.dll 1.1MB

6c00bdbcd7cb253da30de5960531708e45cf55165c5847b94faf7e5b340ebee8

IMPHASH f3e4a1a8b1b061f67b8b025ef9698e83
SHA256 6c00bdbcd7cb253da30de5960531708e45cf55165c5847b94faf7e5b340ebee8
MD5 9f94ecd0bb8c5a2ebf56fab27860c5ef
SHA1 873db133b554ed7ce6e528445cccec9e057266a8
SHA512 575cf4125fe8bf6218982053dbbc555c8db88281eed62c3f876df354cec0f47fee31fb3e124ea0115a4628df59377d82947c5f124dbd35a28e51683564d58bcb
SSDEEP 12288:yfYRk4o5GrYQKYuhYoga3nG3wG6A/Jant4CZFc2P8dNLx6m1M/7pQcX6BCklXuol:e4kV5rQVuhowG6A/JaiVcv804kh5y
TLSH
T14C356C22E2539170D44151301C3EE33DAB286E12CBA7AECBDFA1BCCD6B756D26539706
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

482416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

AdjustWindowRect AdjustWindowRectEx AppendMenuW BeginDeferWindowPos BeginPaint CallWindowProcA CallWindowProcW CheckMenuItem ChildWindowFromPoint ClientToScreen CopyIcon CopyImage CopyRect CreateCaret CreateDialogIndirectParamA CreateDialogIndirectParamW CreateIconIndirect CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcW DeferWindowPos DestroyCaret DestroyCursor DestroyIcon DestroyWindow DialogBoxParamW DispatchMessageW DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawTextA DrawTextW EnableScrollBar EnableWindow EndDeferWindowPos EndDialog EndPaint FillRect FrameRect GetActiveWindow GetAsyncKeyState GetCapture GetClassLongW GetClassNameW GetClientRect GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgCtrlID GetDlgItem GetDoubleClickTime GetDpiForWindow GetFocus GetIconInfo GetKeyNameTextW GetKeyState GetMenuState GetMessagePos GetMessageTime GetMessageW GetMonitorInfoW GetNextDlgTabItem GetParent GetPropW GetScrollInfo GetScrollPos GetScrollRange GetSysColor GetSysColorBrush GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongW GetWindowRect GetWindowRgn GetWindowTextA GetWindowTextLengthA GetWindowTextLengthW GetWindowTextW IntersectRect InvalidateRect InvalidateRgn IsChild IsDialogMessageW IsWindow IsWindowEnabled IsWindowUnicode IsWindowVisible KillTimer LoadBitmapW LoadCursorW LoadIconW LoadImageA LoadImageW LoadStringW MapDialogRect MapVirtualKeyW MapWindowPoints MonitorFromRect MoveWindow NotifyWinEvent PeekMessageW PostMessageW PostQuitMessage RedrawWindow RegisterClassW RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient ScrollWindow ScrollWindowEx SendDlgItemMessageW SendMessageA SendMessageW SetCapture SetCaretPos SetCursor SetFocus SetParent SetPropW SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongA SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextA SetWindowTextW ShowCaret ShowScrollBar ShowWindow SubtractRect SystemParametersInfoW TrackMouseEvent TrackPopupMenu TranslateMessage UnionRect UnregisterClassW UpdateWindow ValidateRect WindowFromPoint wsprintfW

gdi32

BitBlt CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateFontIndirectW CreatePatternBrush CreatePen CreatePenIndirect CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateSolidBrush DPtoLP DeleteDC DeleteObject ExcludeClipRect ExtCreatePen ExtCreateRegion ExtTextOutW FillRgn FrameRgn GdiAlphaBlend GetBkColor GetBkMode GetClipBox GetClipRgn GetCurrentObject GetDIBColorTable GetDIBits GetDeviceCaps GetLayout GetNearestColor GetObjectW GetPixel GetStockObject GetTextColor GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextExtentPointW GetTextMetricsW IntersectClipRect LineTo MoveToEx OffsetWindowOrgEx PatBlt PolyPolyline Polygon RectVisible Rectangle SelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetDIBColorTable SetDIBits SetPixel SetPolyFillMode SetTextAlign SetTextColor SetViewportOrgEx SetWindowOrgEx StretchBlt StretchDIBits TextOutW

advapi32

RegCloseKey RegCreateKeyExW RegCreateKeyW RegOpenKeyA RegOpenKeyExW RegQueryValueExA RegQueryValueExW RegSetValueExW

kernelbase

CloseHandle CompareFileTime CompareStringA CompareStringW CreateEventW CreateThread DelayLoadFailureHook DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection FileTimeToSystemTime FindResourceW FreeResource GetDateFormatW GetLocalTime GetLocaleInfoW GetModuleHandleW GetProcAddress GetThreadLocale GetTickCount GlobalAlloc GlobalFree HeapAlloc HeapFree HeapReAlloc InitializeCriticalSectionEx LeaveCriticalSection LoadResource LocalAlloc LocalFree LocalReAlloc LockResource MulDiv MultiByteToWideChar RaiseException ResolveDelayLoadedAPI SetEvent SizeofResource StrCmpIW StrCmpNIW SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte lstrcmpW lstrcmpiW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _assert _strdup _wcsicmp _wcsnicmp floor free fwrite getenv isprint iswalnum memcpy memmove memset qsort strcat strchr strcmp strcpy strcspn strlen wcschr wcslen wcsncmp wcsstr wcstol

kernel32

FindResourceA GlobalAddAtomW GlobalDeleteAtom IsBadCodePtr IsBadStringPtrA IsBadStringPtrW IsBadWritePtr LocalSize RtlUnwind

ntdll

_vsnprintf

AddMRUStringW CreateMRUListW CreateMappedBitmap CreatePropertySheetPage CreatePropertySheetPageA CreatePropertySheetPageW CreateStatusWindow CreateStatusWindowA CreateStatusWindowW CreateToolbar CreateToolbarEx CreateUpDownControl DPA_Clone DPA_Create DPA_CreateEx DPA_DeleteAllPtrs DPA_DeletePtr DPA_Destroy DPA_DestroyCallback DPA_EnumCallback DPA_GetPtr DPA_GetPtrIndex DPA_Grow DPA_InsertPtr DPA_Search DPA_SetPtr DPA_Sort DSA_Create DSA_DeleteAllItems DSA_DeleteItem DSA_Destroy DSA_DestroyCallback DSA_EnumCallback DSA_GetItem DSA_GetItemPtr DSA_InsertItem DSA_SetItem DefSubclassProc DestroyPropertySheetPage DllGetVersion DrawInsert DrawStatusText DrawStatusTextA DrawStatusTextW EnumMRUListW FlatSB_EnableScrollBar FlatSB_GetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollProp FlatSB_GetScrollRange FlatSB_SetScrollInfo FlatSB_SetScrollPos FlatSB_SetScrollProp FlatSB_SetScrollRange FlatSB_ShowScrollBar GetEffectiveClientRect GetMUILanguage HIMAGELIST_QueryInterface ImageList_Add ImageList_AddIcon ImageList_AddMasked ImageList_BeginDrag ImageList_Copy ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_DrawIndirect ImageList_Duplicate ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetFlags ImageList_GetIcon ImageList_GetIconSize ImageList_GetImageCount ImageList_GetImageInfo ImageList_GetImageRect ImageList_LoadImage ImageList_LoadImageA ImageList_LoadImageW ImageList_Merge ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetFilter ImageList_SetFlags ImageList_SetIconSize ImageList_SetImageCount ImageList_SetOverlayImage ImageList_Write InitCommonControls InitCommonControlsEx InitMUILanguage InitializeFlatSB LBItemFromPt MakeDragList MenuHelp PropertySheet PropertySheetA PropertySheetW RegisterClassNameW RemoveWindowSubclass SetWindowSubclass ShowHideMenuCtl UninitializeFlatSB _TrackMouseEvent

Sharing

General

Malware Config

Signatures

File Explorer

6c00bdbcd7cb253da30de5960531708e45cf55165c5847b94faf7e5b340ebee8

user32

gdi32

advapi32

kernelbase

ucrtbase

kernel32

ntdll

generic