3a67603d9433197329c421b62cb7f629f49f120b88eefe0203b94eb5b97ed8e8

Sharing

Copy URL Twitter E-mail

General

Target
3a67603d9433197329c421b62cb7f629f49f120b88eefe0203b94eb5b97ed8e8
Size 120KB
Sample260821-vdjckscd59
SHA256 3a67603d9433197329c421b62cb7f629f49f120b88eefe0203b94eb5b97ed8e8
MD5 8c20e1f1cb8171974594c714cf0c3b65
SHA1 b242fa5acf0440bcc1a3d2c45d98d95557803559
SHA512 051e3ed9e77ac3c6f4b134f5b0ba255b3a7642354abbcd9b1aa98e97d04fb68ddd01e331e57d6ddff0789af664ccccea0b71938a084c31e05a0e61e78f240d89
SSDEEP 1536:Hh2j2NEKdNf1DiSiuiuKp1+AV+cioOOcMl9e2zPCuKQAQv6w:BQ0EKH8uiXpBgci0f9eMAQv6w
TLSH
T135C38C4667D4C030E57B2630347A03BC9A2BFD5238359A8B5A8F516C6FA77949F38723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a67603d9433197329c421b62cb7f629f49f120b88eefe0203b94eb5b97ed8e8

File Explorer

3a67603d9433197329c421b62cb7f629f49f120b88eefe0203b94eb5b97ed8e8

.dll 120KB

3a67603d9433197329c421b62cb7f629f49f120b88eefe0203b94eb5b97ed8e8

IMPHASH eb265646e669cdc82a373cb985edcdb7
SHA256 3a67603d9433197329c421b62cb7f629f49f120b88eefe0203b94eb5b97ed8e8
MD5 8c20e1f1cb8171974594c714cf0c3b65
SHA1 b242fa5acf0440bcc1a3d2c45d98d95557803559
SHA512 051e3ed9e77ac3c6f4b134f5b0ba255b3a7642354abbcd9b1aa98e97d04fb68ddd01e331e57d6ddff0789af664ccccea0b71938a084c31e05a0e61e78f240d89
SSDEEP 1536:Hh2j2NEKdNf1DiSiuiuKp1+AV+cioOOcMl9e2zPCuKQAQv6w:BQ0EKH8uiXpBgci0f9eMAQv6w
TLSH
T135C38C4667D4C030E57B2630347A03BC9A2BFD5238359A8B5A8F516C6FA77949F38723
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegCreateKeyExW RegGetValueW RegSetValueExW

comctl32

InitCommonControlsEx PropertySheetW

gdi32

GetStockObject Rectangle RoundRect SelectObject SetDCBrushColor SetDCPenColor

kernel32

ActivateActCtx CreateActCtxW DeactivateActCtx DisableThreadLibraryCalls GetModuleHandleW GetProcAddress GetTickCount HeapAlloc HeapReAlloc ReleaseActCtx

ntdll

_vsnprintf

ole32

OleInitialize OleUninitialize

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup calloc free fwrite getenv memcpy memmove memset strchr strcmp strcpy strcspn strlen

user32

BeginPaint ChangeDisplaySettingsExW CreateWindowExW DefWindowProcW DrawTextW EndPaint EnumDisplayDevicesW EnumDisplaySettingsExW EnumDisplaySettingsW FillRect GetClientRect GetDlgItem GetSysColor GetWindowLongW IntersectRect InvalidateRect IsDlgButtonChecked RegisterClassW SendDlgItemMessageW SendMessageW SetCapture SetWindowLongW ShowWindow UnionRect UnregisterClassW

Name

.text

Size

16KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

868B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

896B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

880B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

76KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

3a67603d9433197329c421b62cb7f629f49f120b88eefe0203b94eb5b97ed8e8

advapi32

comctl32

gdi32

kernel32

ntdll

ole32

ucrtbase

user32

generic