2b949226d107b59d7ada0c21d905aaa3954abfa12715cad83de494748bc4d298

Sharing

Copy URL Twitter E-mail

General

Target
2b949226d107b59d7ada0c21d905aaa3954abfa12715cad83de494748bc4d298
Size 368KB
Sample260820-q8vxmsybqa
SHA256 2b949226d107b59d7ada0c21d905aaa3954abfa12715cad83de494748bc4d298
MD5 4ff4e7c1d487537a89b0fe089c3b69d9
SHA1 e677f1acbbdafd4549172ceb2e9d16734c20e2ec
SHA512 b59150716190149e41ade3527c2ed3d358f62091c9233c57c8936a8e2c57b4ecd8fefdec1f2d125a0083ccedc17d96cb941c91b4e0e5265a9435fe97cf3ee062
SSDEEP 6144:cimaBQz2s3cB8FaU7yEl/O9RCQTsYG+C+6+r+nwgxtmdn4oyUVwKT1FYfOr7E0iL:JW2sZoU7yE9O9dsmZRKnw4mdn4MymPmb
TLSH
T132847E23FA82D371D48E4A3E75A9A31AE33DAF654B55C8D3DF80EDC81D538C25538286
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b949226d107b59d7ada0c21d905aaa3954abfa12715cad83de494748bc4d298

File Explorer

2b949226d107b59d7ada0c21d905aaa3954abfa12715cad83de494748bc4d298

.dll 368KB

2b949226d107b59d7ada0c21d905aaa3954abfa12715cad83de494748bc4d298

IMPHASH 212a425e3e2576ac47f869d4f25cd0b5
SHA256 2b949226d107b59d7ada0c21d905aaa3954abfa12715cad83de494748bc4d298
MD5 4ff4e7c1d487537a89b0fe089c3b69d9
SHA1 e677f1acbbdafd4549172ceb2e9d16734c20e2ec
SHA512 b59150716190149e41ade3527c2ed3d358f62091c9233c57c8936a8e2c57b4ecd8fefdec1f2d125a0083ccedc17d96cb941c91b4e0e5265a9435fe97cf3ee062
SSDEEP 6144:cimaBQz2s3cB8FaU7yEl/O9RCQTsYG+C+6+r+nwgxtmdn4oyUVwKT1FYfOr7E0iL:JW2sZoU7yE9O9dsmZRKnw4mdn4MymPmb
TLSH
T132847E23FA82D371D48E4A3E75A9A31AE33DAF654B55C8D3DF80EDC81D538C25538286
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

111440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

CheckRadioButton GetDlgItem GetParent GetWindowLongW IntersectRect LoadStringW SendDlgItemMessageA SendDlgItemMessageW SendMessageW SetWindowLongW ShowWindow UnionRect

gdi32

AbortPath ArcTo BitBlt CombineRgn CreateBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreatePatternBrush CreatePolygonRgn CreateRectRgn CreateSolidBrush DPtoLP DeleteDC DeleteEnhMetaFile DeleteObject EnumEnhMetaFile ExtCreateRegion ExtEscape GdiDeleteSpoolFileHandle GdiGetDevmodeForPage GdiGetSpoolFileHandle GdiGradientFill GetArcDirection GetBkColor GetBkMode GetCurrentObject GetCurrentPositionEx GetDCBrushColor GetDCPenColor GetDeviceCaps GetFontData GetGlyphIndicesW GetGraphicsMode GetLayout GetMapMode GetObjectA GetObjectType GetObjectW GetOutlineTextMetricsA GetPaletteEntries GetPath GetPolyFillMode GetROP2 GetRandomRgn GetRasterizerCaps GetRegionData GetRgnBox GetStockObject GetTextAlign GetTextCharacterExtra GetTextColor GetTextExtentPointW GetTextMetricsW GetTransform GetWorldTransform LPtoDP MoveToEx OffsetRgn PatBlt PlayEnhMetaFileRecord ResetDCW ScriptFreeCache ScriptItemize ScriptLayout ScriptShape SelectObject SetArcDirection SetBkColor SetBkMode SetBrushOrgEx SetDIBits SetDIBitsToDevice SetEnhMetaFileBits SetGraphicsMode SetMapMode SetPolyFillMode SetROP2 SetRectRgn SetStretchBltMode SetTextAlign SetTextColor SetTextJustification SetWorldTransform

advapi32

RegCloseKey RegOpenKeyA RegOpenKeyW RegQueryValueExW

win32u

NtGdiGetOutlineTextMetricsInternalW NtGdiGetTextExtentExW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vsscanf __stdio_common_vswprintf _assert _create_locale _errno _findclose _free_locale _strdup _stricmp _wcsdup _wcsicmp _wfindfirst32 _wfindnext32 _wfopen atan2 bsearch calloc cos fclose feof fgetc fgets floor free ftell fwrite getenv isprint isspace isxdigit malloc memchr memcpy memmove memset qsort realloc rewind sin strcat strchr strcmp strcpy strcspn strerror strlen strncmp strpbrk strstr strtod toupper wcschr wcscmp wcscpy wcslen

kernel32

CloseHandle CreateFileMappingW CreateFileW DelayLoadFailureHook DisableThreadLibraryCalls GetFileSizeEx GetLocaleInfoW GetModuleHandleW GetProcAddress GetTickCount HeapAlloc HeapCreate HeapDestroy HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LocalAlloc LocalFree MapViewOfFile MulDiv MultiByteToWideChar ResolveDelayLoadedAPI UnmapViewOfFile WideCharToMultiByte

ntdll

LdrGetDllHandle NtQueryVirtualMemory RtlFindExportedRoutineByName _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

2b949226d107b59d7ada0c21d905aaa3954abfa12715cad83de494748bc4d298

user32

gdi32

advapi32

win32u

ucrtbase

kernel32

ntdll

generic