67dba429007596b5100bf7c876d9c19fa0b33194671c844804129c9de0ecd980

Sharing

Copy URL Twitter E-mail

General

Target
67dba429007596b5100bf7c876d9c19fa0b33194671c844804129c9de0ecd980
Size 588KB
Sample260805-agtx9stejd
SHA256 67dba429007596b5100bf7c876d9c19fa0b33194671c844804129c9de0ecd980
MD5 e88729c1153d527aa999bb6100468d7b
SHA1 c830cd8567d92f460d683be57bacc02ed946b527
SHA512 3f061528403f88b7cab3a604831350997c0ecd7b65a9c378a108fce421a544a72fe46dbdfe8c288be6192bb7eb467024a99cbf3b6d21a04865e09537918af382
SSDEEP 6144:ra6eyOIGqNg1lAkdAHw+a6eyOIGqNg1lAkdAHw+a6eyOIGqNg1lAkdAHw:1Ndg0k2HwkNdg0k2HwkNdg0k2Hw
TLSH
T11CD44A1977E021A0F0BE05382879E762573F7D21BBD1ABEB2E14292D0E785F39535B11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67dba429007596b5100bf7c876d9c19fa0b33194671c844804129c9de0ecd980

File Explorer

67dba429007596b5100bf7c876d9c19fa0b33194671c844804129c9de0ecd980

.dll 588KB

67dba429007596b5100bf7c876d9c19fa0b33194671c844804129c9de0ecd980

IMPHASH 4c2f88c981a32486bfa66d31dd248aaa
SHA256 67dba429007596b5100bf7c876d9c19fa0b33194671c844804129c9de0ecd980
MD5 e88729c1153d527aa999bb6100468d7b
SHA1 c830cd8567d92f460d683be57bacc02ed946b527
SHA512 3f061528403f88b7cab3a604831350997c0ecd7b65a9c378a108fce421a544a72fe46dbdfe8c288be6192bb7eb467024a99cbf3b6d21a04865e09537918af382
SSDEEP 6144:ra6eyOIGqNg1lAkdAHw+a6eyOIGqNg1lAkdAHw+a6eyOIGqNg1lAkdAHw:1Ndg0k2HwkNdg0k2HwkNdg0k2Hw
TLSH
T11CD44A1977E021A0F0BE05382879E762573F7D21BBD1ABEB2E14292D0E785F39535B11
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

51632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

comctl32

ImageList_Add ImageList_Create ImageList_Destroy InitCommonControlsEx

shlwapi

PathCombineW

ole32

CoCreateInstance OleCreate OleInitialize OleSetContainedObject OleUninitialize

oleaut32

SysAllocString SysFreeString VariantClear

user32

BeginPaint ClientToScreen CreateWindowExW DefWindowProcW DestroyMenu DestroyWindow DispatchMessageW EndPaint FrameRect GetClientRect GetDesktopWindow GetMessageW GetParent GetSubMenu GetSysColor GetSystemMetrics GetWindow GetWindowLongW GetWindowRect GetWindowTextA LoadBitmapW LoadCursorW LoadIconW LoadMenuW LoadStringW MoveWindow PostQuitMessage RegisterClassExW ReleaseCapture SendMessageW SetCapture SetMenuItemInfoW SetWindowLongW SetWindowPos SetWindowTextW ShowWindow TrackPopupMenu TranslateMessage UpdateWindow wsprintfW

gdi32

CreateFontIndirectW GetObjectW GetStockObject LineTo MoveToEx SelectObject SetDCPenColor

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _strdup _stricmp _strnicmp _wcsdup _wcsnicmp atoi calloc free fwrite getenv isspace malloc memchr memcmp memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen strncmp strstr strtol tolower wcschr wcslen wcsncmp wcsrchr wcsstr

kernel32

DisableThreadLibraryCalls EnumResourceNamesW ExpandEnvironmentStringsW FindResourceW GetEnvironmentVariableW GetFileAttributesW GetFullPathNameW GetLocaleInfoW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryW LoadResource MultiByteToWideChar SizeofResource WideCharToMultiByte lstrcmpW lstrcmpiW

ntdll

_chkstk _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

67dba429007596b5100bf7c876d9c19fa0b33194671c844804129c9de0ecd980

comctl32

shlwapi

ole32

oleaut32

user32

gdi32

ucrtbase

kernel32

ntdll

generic