c56186d68ce8a50a8992bad2b10be2d74a5f10615ca3f5c70326cee08d026c96

Sharing

Copy URL Twitter E-mail

General

Target
c56186d68ce8a50a8992bad2b10be2d74a5f10615ca3f5c70326cee08d026c96
Size 200KB
Sample260809-n1dbhsxbrc
SHA256 c56186d68ce8a50a8992bad2b10be2d74a5f10615ca3f5c70326cee08d026c96
MD5 02e8b94d2be0892eab6e0388b45f4c65
SHA1 97fbf8a2a282b2302b2aafe678017e04c6d87cb8
SHA512 4f32870273ef8ba72a1294c1e3d1ae5246d7c364e678cebb2f06c66bfe94ac7d8de8c4f1df8afb3803a6fb5ee922065aa802e332dbe71df9f78017214e753603
SSDEEP 3072:Irrudtlllg8cAT5s9FtZH17fqWpmmnEtPzXfWw0wfwH2BlPAuaY:6ig8I
TLSH
T1DA14CC2227F98604F2F3AB792DB947716E377D61AA38C60E5601E15D1970FA0DE24B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c56186d68ce8a50a8992bad2b10be2d74a5f10615ca3f5c70326cee08d026c96

File Explorer

c56186d68ce8a50a8992bad2b10be2d74a5f10615ca3f5c70326cee08d026c96

.dll 200KB

c56186d68ce8a50a8992bad2b10be2d74a5f10615ca3f5c70326cee08d026c96

IMPHASH ca802bd1f02b68d53f74e5ac3920a6fe
SHA256 c56186d68ce8a50a8992bad2b10be2d74a5f10615ca3f5c70326cee08d026c96
MD5 02e8b94d2be0892eab6e0388b45f4c65
SHA1 97fbf8a2a282b2302b2aafe678017e04c6d87cb8
SHA512 4f32870273ef8ba72a1294c1e3d1ae5246d7c364e678cebb2f06c66bfe94ac7d8de8c4f1df8afb3803a6fb5ee922065aa802e332dbe71df9f78017214e753603
SSDEEP 3072:Irrudtlllg8cAT5s9FtZH17fqWpmmnEtPzXfWw0wfwH2BlPAuaY:6ig8I
TLSH
T1DA14CC2227F98604F2F3AB792DB947716E377D61AA38C60E5601E15D1970FA0DE24B33
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6400

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegEnumKeyW RegOpenKeyExW RegQueryValueW

comdlg32

GetOpenFileNameA

kernel32

DisableThreadLibraryCalls FindResourceA FindResourceW FormatMessageW FreeLibrary GetModuleHandleW GetProcAddress GetTickCount GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryA LoadResource LockResource MultiByteToWideChar WideCharToMultiByte

ntdll

_vsnprintf

ole32

CLSIDFromString CoTaskMemFree GetClassFile OleCreate OleCreateFromFile OleGetClipboard OleRegGetUserType

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _strdup _wcsdup free fwrite getenv malloc memcmp memcpy memmove strcat strchr strcmp strcspn strlen wcslen wcsstr

user32

CheckDlgButton CheckRadioButton CreatePopupMenu DialogBoxIndirectParamA DialogBoxIndirectParamW EnableWindow EndDialog GetDlgItem GetForegroundWindow GetPropW InsertMenuW LoadStringA LoadStringW MessageBoxW PostMessageW RegisterClipboardFormatW RegisterWindowMessageW RemoveMenu RemovePropW SendMessageA SendMessageW SetDlgItemTextW SetFocus SetPropW SetWindowTextA SetWindowTextW ShowWindow wsprintfW

Name

.text

Size

24KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

900B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

704B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

144KB

Virtual Size

143KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c56186d68ce8a50a8992bad2b10be2d74a5f10615ca3f5c70326cee08d026c96

advapi32

comdlg32

kernel32

ntdll

ole32

ucrtbase

user32

generic