ac5e3cae87cdced45f132f6a040ffeaaf111cb433fd28e4cf4d93a2ba4367493

Sharing

Copy URL Twitter E-mail

General

Target
ac5e3cae87cdced45f132f6a040ffeaaf111cb433fd28e4cf4d93a2ba4367493
Size 439KB
Sample260810-ynzzvsgm31
SHA256 ac5e3cae87cdced45f132f6a040ffeaaf111cb433fd28e4cf4d93a2ba4367493
MD5 b5e90787a601e5b973b3f13233dd7834
SHA1 4c4187c4393ae0d7f1dce2d447954cae7226a910
SHA512 84b793b3427b237076e2da8ff40b972eecc4647e19473e72cf61d8ee933fed6558096de8f69ed58691aac3f1d024b5a8e86057c65a5b8be4fc8b02265da811a6
SSDEEP 6144:EHMZdgH9q1h6MV20phITiD8h2iGDMIfyLkERNURUCt1iTBq5mQ04:EHMe9q1kMVlXNpDyfjCtcTs5mQ
TLSH
T135A46A1537D04CB5D877823889D38A65D3BABC260B70D7CF23A4035E9E277D1AA39762
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac5e3cae87cdced45f132f6a040ffeaaf111cb433fd28e4cf4d93a2ba4367493

File Explorer

ac5e3cae87cdced45f132f6a040ffeaaf111cb433fd28e4cf4d93a2ba4367493

.dll 439KB

ac5e3cae87cdced45f132f6a040ffeaaf111cb433fd28e4cf4d93a2ba4367493

IMPHASH 58717db71fe5ab1a338a7b83f941d350
SHA256 ac5e3cae87cdced45f132f6a040ffeaaf111cb433fd28e4cf4d93a2ba4367493
MD5 b5e90787a601e5b973b3f13233dd7834
SHA1 4c4187c4393ae0d7f1dce2d447954cae7226a910
SHA512 84b793b3427b237076e2da8ff40b972eecc4647e19473e72cf61d8ee933fed6558096de8f69ed58691aac3f1d024b5a8e86057c65a5b8be4fc8b02265da811a6
SSDEEP 6144:EHMZdgH9q1h6MV20phITiD8h2iGDMIfyLkERNURUCt1iTBq5mQ04:EHMe9q1kMVlXNpDyfjCtcTs5mQ
TLSH
T135A46A1537D04CB5D877823889D38A65D3BABC260B70D7CF23A4035E9E277D1AA39762
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

76248

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Desktop\Master\SPServer_Master\SP自定义UI64\VC 卡密模式自定义登录界面源码&成品_v3.x.1\Bin\SimpleCard.pdb

kernel32

LockResource SizeofResource CreateFileA WriteFile CloseHandle GetTempPathA GetTempFileNameA TerminateProcess LeaveCriticalSection EnterCriticalSection GetCurrentThreadId DeleteFileA GetCurrentProcess FlushInstructionCache SetLastError GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection FreeLibrary WideCharToMultiByte IsDBCSLeadByte MultiByteToWideChar lstrcmpiA GetProcAddress DecodePointer GetModuleHandleA LoadLibraryExA SetEndOfFile LoadResource WriteConsoleW SetStdHandle ReadConsoleW LoadLibraryExW FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter FlushFileBuffers SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP GetModuleFileNameW FindResourceA RaiseException GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy GetModuleFileNameA GetFileType GetStdHandle GetOEMCP GetACP IsValidCodePage AreFileApisANSI GetModuleHandleExW ExitProcess EnumSystemLocalesW GetUserDefaultLCID CreateFileW FileTimeToSystemTime IsValidLocale GetLocaleInfoW InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList VirtualAlloc VirtualFree IsDebuggerPresent OutputDebugStringW EncodePointer GetStringTypeW GetSystemInfo VirtualProtect VirtualQuery IsProcessorFeaturePresent GetCommandLineA RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW LCMapStringW

user32

SetWindowTextA EnableWindow MessageBoxA ShowWindow MessageBoxTimeoutA IsDialogMessageA GetDlgItem SendMessageA DestroyWindow CharNextA DefWindowProcA SetWindowLongPtrA DialogBoxParamA UnregisterClassA EndDialog GetWindowTextLengthA GetWindowTextA GetActiveWindow

advapi32

RegCreateKeyExA RegCloseKey RegDeleteValueA RegOpenKeyExA RegSetValueExA RegEnumKeyExA RegDeleteKeyA RegQueryInfoKeyW

shell32

ShellExecuteA

ole32

CoInitialize CoTaskMemFree CoTaskMemAlloc CoTaskMemRealloc CoUninitialize CoCreateInstance

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

winmm

timeGetTime

Sharing

General

Malware Config

Signatures

File Explorer

ac5e3cae87cdced45f132f6a040ffeaaf111cb433fd28e4cf4d93a2ba4367493

kernel32

user32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

generic