0541756c04cc1cb5c560a021fdb6a1d6797f3d6cd4c92a6f0ef8a0f33e1f721b

General

Target
0541756c04cc1cb5c560a021fdb6a1d6797f3d6cd4c92a6f0ef8a0f33e1f721b
Size 90KB
Sample260806-tpg38aah65
SHA256 0541756c04cc1cb5c560a021fdb6a1d6797f3d6cd4c92a6f0ef8a0f33e1f721b
MD5 690e528dfb4e0bd2cbe6053b9537c90f
SHA1 50daac1cab3d4f2f93170362f81de5b8df14f6be
SHA512 ddb663792c860e323ed3676bed9e61a7952a5de69e1d11b99c25ec30f85e937d2d8976904b3a4c64b60270f9a8691b4ee529582a7460d1d3957a13263e5bcaa4
SSDEEP 1536:K1vbkKq6f/hIBLTtV9qK9q+G/R2CN/xedAPSbq8WSiwg0c3csWuVcdwTpYMH9w/U:K1v5q6OR7dG/NYdAPShiw1WkwTpYMH9H
TLSH
T1ED935A1071C1C075E9BE14351834DAB5AB7D7960DFA0ADEB33951ABA4E702C0EE35E2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0541756c04cc1cb5c560a021fdb6a1d6797f3d6cd4c92a6f0ef8a0f33e1f721b

File Explorer

0541756c04cc1cb5c560a021fdb6a1d6797f3d6cd4c92a6f0ef8a0f33e1f721b

.dll 90KB

0541756c04cc1cb5c560a021fdb6a1d6797f3d6cd4c92a6f0ef8a0f33e1f721b

IMPHASH d5d6ec6730da3799e7ac6b4f612484ba
SHA256 0541756c04cc1cb5c560a021fdb6a1d6797f3d6cd4c92a6f0ef8a0f33e1f721b
MD5 690e528dfb4e0bd2cbe6053b9537c90f
SHA1 50daac1cab3d4f2f93170362f81de5b8df14f6be
SHA512 ddb663792c860e323ed3676bed9e61a7952a5de69e1d11b99c25ec30f85e937d2d8976904b3a4c64b60270f9a8691b4ee529582a7460d1d3957a13263e5bcaa4
SSDEEP 1536:K1vbkKq6f/hIBLTtV9qK9q+G/R2CN/xedAPSbq8WSiwg0c3csWuVcdwTpYMH9w/U:K1v5q6OR7dG/NYdAPShiw1WkwTpYMH9H
TLSH
T1ED935A1071C1C075E9BE14351834DAB5AB7D7960DFA0ADEB33951ABA4E702C0EE35E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11138

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

setupapi

SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA SetupDiGetClassDevsA SetupDiDestroyDeviceInfoList

hid

HidD_FreePreparsedData HidD_GetPreparsedData HidD_GetHidGuid HidD_GetAttributes HidP_GetCaps

user32

wsprintfA

kernel32

CreateFileW WriteConsoleW RaiseException SetFilePointerEx CloseHandle GetLastError CreateFileA ReadFile WriteFile GetOverlappedResult CancelIo WaitForSingleObject CreateEventA Sleep GetTickCount GetLocalTime UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetConsoleMode InterlockedFlushSList RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer DecodePointer ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetProcessHeap GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers GetConsoleOutputCP

Sharing

General

Malware Config

Signatures

File Explorer

0541756c04cc1cb5c560a021fdb6a1d6797f3d6cd4c92a6f0ef8a0f33e1f721b

setupapi

hid

user32

kernel32

generic