2f30b65f49e7f276e1f74661c36ecc3c64aa80b7b4ac313ada8a68fc84f63135

Sharing

Copy URL Twitter E-mail

General

Target
2f30b65f49e7f276e1f74661c36ecc3c64aa80b7b4ac313ada8a68fc84f63135
Size 152KB
Sample260809-q6be8ayflg
SHA256 2f30b65f49e7f276e1f74661c36ecc3c64aa80b7b4ac313ada8a68fc84f63135
MD5 67ffab20285036451f17c7eb91e38723
SHA1 1834b41c2e5409e112a3bb2d773e226a1d0b9420
SHA512 a9281319fb1519f43851fe6ef51d6b9008358532bb3baf8642c3f4d9835c1cbb220693945988f02939e85be7d5fab8b1695beb87571e74928987a5fd526d3b84
SSDEEP 3072:Fytu/B3GnU4Qa7V0b7MbORLoJPtYnrVKu9XtXlVv4ma1uijudals0v2PdGSUFR+B:FyeB32U4QQF
TLSH
T1D3E3202467EA411AF1B7AB306AB617717933FC466F38DE1E5A00D66C4D30E80DE35B26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f30b65f49e7f276e1f74661c36ecc3c64aa80b7b4ac313ada8a68fc84f63135

File Explorer

2f30b65f49e7f276e1f74661c36ecc3c64aa80b7b4ac313ada8a68fc84f63135

.dll 152KB

2f30b65f49e7f276e1f74661c36ecc3c64aa80b7b4ac313ada8a68fc84f63135

IMPHASH a12f1cb19da9f50d7d1ecc50b237749a
SHA256 2f30b65f49e7f276e1f74661c36ecc3c64aa80b7b4ac313ada8a68fc84f63135
MD5 67ffab20285036451f17c7eb91e38723
SHA1 1834b41c2e5409e112a3bb2d773e226a1d0b9420
SHA512 a9281319fb1519f43851fe6ef51d6b9008358532bb3baf8642c3f4d9835c1cbb220693945988f02939e85be7d5fab8b1695beb87571e74928987a5fd526d3b84
SSDEEP 3072:Fytu/B3GnU4Qa7V0b7MbORLoJPtYnrVKu9XtXlVv4ma1uijudals0v2PdGSUFR+B:FyeB32U4QQF
TLSH
T1D3E3202467EA411AF1B7AB306AB617717933FC466F38DE1E5A00D66C4D30E80DE35B26
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8256

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

comctl32

PropertySheetW

gdi32

CreateCompatibleDC DeleteDC GetTextExtentPoint32A GetTextExtentPoint32W

kernel32

GlobalLock GlobalReAlloc GlobalUnlock HeapAlloc HeapReAlloc IsBadStringPtrW

kernelbase

DisableThreadLibraryCalls GetLocaleInfoA GetLocaleInfoEx GetModuleHandleW GetProcAddress GetTickCount GlobalAlloc GlobalFree MulDiv MultiByteToWideChar RegCloseKey RegCreateKeyExA RegGetValueA RegOpenKeyExA RegSetValueExA

ntdll

LdrGetDllHandle NtQueryVirtualMemory RtlFindExportedRoutineByName _vsnprintf

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsdup atoi calloc free fwrite getenv malloc memcmp memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen strncmp wcscmp wcstombs

user32

CreateDialogParamW DestroyWindow DispatchMessageW EnableWindow GetDialogBaseUnits GetDlgCtrlID GetDlgItem GetScrollInfo GetWindowRect IsDialogMessageW IsWindowEnabled LoadStringW MessageBoxW PeekMessageW SendDlgItemMessageW SendMessageA SendMessageW SetDlgItemInt SetDlgItemTextW SetWindowPos SetWindowTextA SetWindowTextW ShowWindow TranslateMessage

Name

.text

Size

44KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

688B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

60KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2f30b65f49e7f276e1f74661c36ecc3c64aa80b7b4ac313ada8a68fc84f63135

comctl32

gdi32

kernel32

kernelbase

ntdll

ucrtbase

user32

generic