506110996afc756a09641adb1742747e200fa4c22705236a84828b81c857cd94

General

Target
506110996afc756a09641adb1742747e200fa4c22705236a84828b81c857cd94
Size 271KB
Sample260807-lthxbasbma
SHA256 506110996afc756a09641adb1742747e200fa4c22705236a84828b81c857cd94
MD5 6c2e694e0922edb667707c0b831ed1a3
SHA1 452aa3c508534b90543af604f14d531b62babc07
SHA512 d43e29b622b37b5cfb555dec262ee97aaf10b1e9f73a7c8cceb60f3f211bdf58f77202b9aa7b73dac3d07a64b60facf5091ca6fc42096c3be6b29466112009fd
SSDEEP 6144:UXYt6iFO2AJkbW9Mcp6HT+EaFoqAmZPEwjnwz396jBbDh78Wuzv9+ZZEIy9:UXYtzIMEIT+EaFo/mZPEwjnwKroWuzvP
TLSH
T10F446C5175C0C072C9AE283459B9E7B50D6DB8300EB0D6DFA3D4487A8F21BD29766B2F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
506110996afc756a09641adb1742747e200fa4c22705236a84828b81c857cd94

File Explorer

506110996afc756a09641adb1742747e200fa4c22705236a84828b81c857cd94

.dll 271KB

506110996afc756a09641adb1742747e200fa4c22705236a84828b81c857cd94

IMPHASH 026487137d71ea75dbd15ebac7ca6f8f
SHA256 506110996afc756a09641adb1742747e200fa4c22705236a84828b81c857cd94
MD5 6c2e694e0922edb667707c0b831ed1a3
SHA1 452aa3c508534b90543af604f14d531b62babc07
SHA512 d43e29b622b37b5cfb555dec262ee97aaf10b1e9f73a7c8cceb60f3f211bdf58f77202b9aa7b73dac3d07a64b60facf5091ca6fc42096c3be6b29466112009fd
SSDEEP 6144:UXYt6iFO2AJkbW9Mcp6HT+EaFoqAmZPEwjnwz396jBbDh78Wuzv9+ZZEIy9:UXYtzIMEIT+EaFo/mZPEwjnwKroWuzvP
TLSH
T10F446C5175C0C072C9AE283459B9E7B50D6DB8300EB0D6DFA3D4487A8F21BD29766B2F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11818

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetTickCount GetModuleHandleA GetProcAddress WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW GetModuleFileNameW GetCurrentThread HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap GetStdHandle GetFileType SetConsoleCtrlHandler GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadFile ReadConsoleW OutputDebugStringW CreateFileW CloseHandle DecodePointer

XL_AddHttpHeaderField XL_AddPeer XL_AddServer XL_BTStartUpload XL_BTStopUpload XL_BatchAddBTTracker XL_BatchAddPeer XL_BatchDiscardPeer XL_ChangeBTTaskSubFileScheduler XL_CreateBTTask XL_CreateEmuleTask XL_CreateHLSTask XL_CreateMagnetTask XL_CreateP2spTask XL_DeleteTask XL_DisableDcdn XL_DisableDcdnWithVipCert XL_DisableFreeDcdn XL_DiscardPeer XL_DiscardServer XL_EnableDcdn XL_EnableDcdnWithSession XL_EnableDcdnWithToken XL_EnableDcdnWithVipCert XL_EnableFreeDcdn XL_FreeBTSubFileInfo XL_FreePlayInfo XL_FreeTaskFlow XL_FreeTaskProfileLog XL_FreeUnRecvdRangeArray XL_GetEstimateBandWidthInfo XL_GetFilePlayInfo XL_GetPeerId XL_GetSubNetUploader XL_GetSumOfRemotePeerBeBenefited XL_GetTaskProfileLog XL_GetUnRecvdRangeArray XL_Init XL_IsDownloadTaskCFGFileExit XL_IsFileSizeSetterWorking XL_LaunchFileAssistant XL_QueryBTSubFileInfo XL_QueryFreeDcdnAccelerate XL_QueryGlobalStat XL_QueryPlayInfo XL_QueryTaskFlow XL_QueryTaskIndex XL_QueryTaskInfo XL_RedirectOriginalResource XL_ReleaseEstimateBandWidthInfo XL_RenameP2spTaskFile XL_SetAccelerateCertification XL_SetBTSubTaskIndex XL_SetCacheSize XL_SetDownloadSpeedLimit XL_SetDownloadStrategy XL_SetEmuleTaskIndex XL_SetFreeDcdnDownloadSpeedLimit XL_SetGlobalConnectionLimit XL_SetGlobalExtInfo XL_SetOriginConnectCount XL_SetP2SPTaskIdxURL XL_SetP2spTaskIndex XL_SetProxy XL_SetSubTaskConcurrency XL_SetTaskDownloadSpeedLimit XL_SetTaskExtInfo XL_SetTaskExtStat XL_SetTaskPriorityLevel XL_SetTaskStrategy XL_SetTaskTraceID XL_SetTaskUserAgent XL_SetUploadSpeedLimit XL_SetUserAgent XL_SetUserInfo XL_SetWindowsSleepInfo XL_SetupNetDiskFetchTaskFlag XL_SetupTaskAttributeFlags XL_StartEstimateBandWidth XL_StartTask XL_StopTask XL_UnInit XL_UpdateDcdnWithVipCert XL_UpdateNetDiscVODCachePath XL_UpdateNetDiskTaskMinExpectedSpeed XL_UpdateTaskCompensationTargetLevel XL_UpdateTaskVideoByteRatio

Sharing

General

Malware Config

Signatures

File Explorer

506110996afc756a09641adb1742747e200fa4c22705236a84828b81c857cd94

kernel32

generic