dcdc2e6c0c7ea239a76b97fe340ac9685bccc62aedc3b031202030405abb19fa

Sharing

Copy URL Twitter E-mail

General

Target
dcdc2e6c0c7ea239a76b97fe340ac9685bccc62aedc3b031202030405abb19fa
Size 49KB
Sample260813-yvbwlsdb52
SHA256 dcdc2e6c0c7ea239a76b97fe340ac9685bccc62aedc3b031202030405abb19fa
MD5 460b32b2cf55a0a54e10996d5acd8150
SHA1 5c87d5ca1a6e498f9fc3f7858905068fa306f98d
SHA512 61cdcd66625e4d5ac1319b9664c7402212d434ff4398cbb19537088769151bbc80b72c8ce668ad59331cbf9968dbf27cef6db5a45f29e84896aae42da40d593b
SSDEEP 1536:9i2p0cvZF3+3k0brHOEcMlvMEbsma3v6:02zZo3k0WEcMp1bsma3v6
TLSH
T101335B0BA76500E5E2ADC27D8DA32B59D272B849072197CF43A0432B1F73BE55E3F651
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcdc2e6c0c7ea239a76b97fe340ac9685bccc62aedc3b031202030405abb19fa

File Explorer

dcdc2e6c0c7ea239a76b97fe340ac9685bccc62aedc3b031202030405abb19fa

.exe 49KB

dcdc2e6c0c7ea239a76b97fe340ac9685bccc62aedc3b031202030405abb19fa

IMPHASH 464f139c5ff7e6e84c0669ee209d9e39
SHA256 dcdc2e6c0c7ea239a76b97fe340ac9685bccc62aedc3b031202030405abb19fa
MD5 460b32b2cf55a0a54e10996d5acd8150
SHA1 5c87d5ca1a6e498f9fc3f7858905068fa306f98d
SHA512 61cdcd66625e4d5ac1319b9664c7402212d434ff4398cbb19537088769151bbc80b72c8ce668ad59331cbf9968dbf27cef6db5a45f29e84896aae42da40d593b
SSDEEP 1536:9i2p0cvZF3+3k0brHOEcMlvMEbsma3v6:02zZo3k0WEcMp1bsma3v6
TLSH
T101335B0BA76500E5E2ADC27D8DA32B59D272B849072197CF43A0432B1F73BE55E3F651
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24400

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dwmapi

DwmSetWindowAttribute

flutter_secure_storage_windows_plugin

FlutterSecureStorageWindowsPluginRegisterWithRegistrar

media_kit_libs_windows_video_plugin

MediaKitLibsWindowsVideoPluginCApiRegisterWithRegistrar

media_kit_video_plugin

MediaKitVideoPluginCApiRegisterWithRegistrar

permission_handler_windows_plugin

PermissionHandlerWindowsPluginRegisterWithRegistrar

screen_brightness_windows_plugin

ScreenBrightnessWindowsPluginRegisterWithRegistrar

url_launcher_windows_plugin

UrlLauncherWindowsRegisterWithRegistrar

flutter_windows

FlutterDesktopEngineCreate FlutterDesktopEngineDestroy FlutterDesktopEngineReloadSystemFonts FlutterDesktopEngineGetPluginRegistrar FlutterDesktopEngineGetMessenger FlutterDesktopEngineSetNextFrameCallback FlutterDesktopGetDpiForMonitor FlutterDesktopViewControllerDestroy FlutterDesktopViewControllerGetView FlutterDesktopViewControllerForceRedraw FlutterDesktopViewControllerHandleTopLevelWindowProc FlutterDesktopMessengerSend FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSetCallback FlutterDesktopMessengerAddRef FlutterDesktopResyncOutputStreams FlutterDesktopViewControllerCreate FlutterDesktopMessengerRelease FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerLock FlutterDesktopMessengerUnlock FlutterDesktopViewGetHWND

kernel32

GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind InitializeSListHead RtlCaptureContext AttachConsole IsDebuggerPresent LocalFree WideCharToMultiByte AllocConsole FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryA GetCommandLineW RtlLookupFunctionEntry GetStartupInfoW

user32

MonitorFromPoint LoadIconW LoadCursorW SetParent SetWindowLongPtrW GetMessageW TranslateMessage DispatchMessageW DefWindowProcW PostQuitMessage RegisterClassW UnregisterClassW CreateWindowExW DestroyWindow ShowWindow MoveWindow SetWindowPos SetFocus GetClientRect GetWindowLongPtrW

shell32

CommandLineToArgvW

ole32

CoInitializeEx CoUninitialize

advapi32

RegGetValueW

msvcp140

?width@ios_base@std@@QEBA_JXZ ?flags@ios_base@std@@QEBAHXZ ?good@ios_base@std@@QEBA_NXZ ?_Xbad_function_call@std@@YAXXZ ?sync_with_stdio@ios_base@std@@SA_N_N@Z ?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA ?_Xlength_error@std@@YAXPEBD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?width@ios_base@std@@QEAA_J_J@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception __current_exception_context memcpy _CxxThrowException memset __std_terminate __std_exception_destroy __std_exception_copy __C_specific_handler __std_type_info_compare memmove memcmp

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _initterm _set_app_type _seh_filter_exe _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm_e _initialize_onexit_table _invoke_watson _register_onexit_function _crt_atexit terminate _invalid_parameter_noinfo_noreturn _exit exit

api-ms-win-crt-stdio-l1-1-0

freopen_s __p__commode __acrt_iob_func _set_fmode _fileno _dup2

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode free _callnewh

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

dcdc2e6c0c7ea239a76b97fe340ac9685bccc62aedc3b031202030405abb19fa

dwmapi

flutter_secure_storage_windows_plugin

media_kit_libs_windows_video_plugin

media_kit_video_plugin

permission_handler_windows_plugin

screen_brightness_windows_plugin

url_launcher_windows_plugin

flutter_windows

kernel32

user32

shell32

ole32

advapi32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic