3d9e8ea93fe0e91c7aaf5b7d98621c6b814fafa2ad423ced44b82e0dd990fadb

Sharing

Copy URL Twitter E-mail

General

Target
3d9e8ea93fe0e91c7aaf5b7d98621c6b814fafa2ad423ced44b82e0dd990fadb
Size 113KB
Sample260811-bas8tssdqa
SHA256 3d9e8ea93fe0e91c7aaf5b7d98621c6b814fafa2ad423ced44b82e0dd990fadb
MD5 d1674d204b466571e34042be5be37103
SHA1 476596dec46d84e3bfd3555ddaecfc15008da3cd
SHA512 274d4e3332da9a7d35be323043294bc0580f440bb2e86003c2388a61a9fa341b2dc1bc6cbca16b3adb0b5eafbbbd8fc52585856cecc8953f7871741a43c6dc19
SSDEEP 1536:cy7PSiNHHPAvYooOOY1oo9cTHOaUjBnM48+lgVOpG0xiY:cy7KiNHHPAwooLVAjlMF+lgVOpDiY
TLSH
T117B36B7859300D53E5EA1BF3CCB544A8633AA414BB923797512BB2BC0C76BDCCB86953
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d9e8ea93fe0e91c7aaf5b7d98621c6b814fafa2ad423ced44b82e0dd990fadb

File Explorer

3d9e8ea93fe0e91c7aaf5b7d98621c6b814fafa2ad423ced44b82e0dd990fadb

.dll 113KB

3d9e8ea93fe0e91c7aaf5b7d98621c6b814fafa2ad423ced44b82e0dd990fadb

IMPHASH 4aeef525e6b0173e0bfe479d367b1c47
SHA256 3d9e8ea93fe0e91c7aaf5b7d98621c6b814fafa2ad423ced44b82e0dd990fadb
MD5 d1674d204b466571e34042be5be37103
SHA1 476596dec46d84e3bfd3555ddaecfc15008da3cd
SHA512 274d4e3332da9a7d35be323043294bc0580f440bb2e86003c2388a61a9fa341b2dc1bc6cbca16b3adb0b5eafbbbd8fc52585856cecc8953f7871741a43c6dc19
SSDEEP 1536:cy7PSiNHHPAvYooOOY1oo9cTHOaUjBnM48+lgVOpG0xiY:cy7KiNHHPAwooLVAjlMF+lgVOpDiY
TLSH
T117B36B7859300D53E5EA1BF3CCB544A8633AA414BB923797512BB2BC0C76BDCCB86953
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32897

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

abseil_dll

?what@exception@std@@UEBAPEBDXZ ??1bad_alloc@std@@UEAA@XZ ??1exception@std@@UEAA@XZ ??0exception@std@@QEAA@AEBV01@@Z ??0bad_alloc@std@@QEAA@AEBV01@@Z ??0bad_array_new_length@std@@QEAA@AEBV01@@Z ??1bad_array_new_length@std@@UEAA@XZ

vcruntime140

__FrameUnwindFilter __C_specific_handler __std_type_info_destroy_list __current_exception __current_exception_context memcpy memmove _CxxThrowException __std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _execute_onexit_table _cexit terminate abort _invoke_watson

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc

kernel32

GetCurrentDirectoryW Sleep CreateThread GetLocalTime InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetSystemTime GetSystemInfo GetTickCount64 GetTickCount GetComputerNameW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

ole32

CoCreateInstance CoInitializeEx

gdiplus

GdipFillRectangleI GdipDrawRectangleI GdipSaveGraphics GdipAlloc GdipDeleteBrush GdipCreatePen1 GdipDeletePen GdipCreateSolidFill GdipCreateLineBrush GdipSetCompositingMode GdipSetSmoothingMode GdipRestoreGraphics GdipCloneBrush GdipFree

user32

GetDC EmptyClipboard OpenClipboard ReleaseDC CloseClipboard SetClipboardData

gdi32

BitBlt SelectObject DeleteDC CreateCompatibleDC CreateCompatibleBitmap

sonitusfxmodulator

SalesTo

mscoree

_CorDllMain

Name

.text

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.nep

Size

512B

Virtual Size

320B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

79KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

456B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

3d9e8ea93fe0e91c7aaf5b7d98621c6b814fafa2ad423ced44b82e0dd990fadb

abseil_dll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

msvcp140

ole32

gdiplus

user32

gdi32

sonitusfxmodulator

mscoree

generic