e716dcabb191d76815ed88cc0fee0ce4dd9497d4db6b14dfda46f0b60aead76c

Sharing

Copy URL Twitter E-mail

General

Target
e716dcabb191d76815ed88cc0fee0ce4dd9497d4db6b14dfda46f0b60aead76c
Size 107KB
Sample260824-lye18aeq21
SHA256 e716dcabb191d76815ed88cc0fee0ce4dd9497d4db6b14dfda46f0b60aead76c
MD5 59995a0167a90a10021cdb852e889351
SHA1 6ee30729dd61c5d4e9af0b5e0d6c7633f01928e3
SHA512 49a28fa0c8539f6954c33fce1b2baddb685c9349970cc9dcf5438ec72c186c4fd1bdbda6e4418c5e88317bf5f892899d496962d9a26c589e227672b93c1b5db3
SSDEEP 1536:iSNqEiTwBW7W4dz1nqggCTHjpfFP5Ydsd08C3mPwfy3XyUa0:ZsABaZoggCTHjz5YKG8C2ofy3XC0
TLSH
T1EEB32A25F2E2089DD1B2C538AABA56325737FD450A60E36D2A94C5359FB0F90EF3DB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e716dcabb191d76815ed88cc0fee0ce4dd9497d4db6b14dfda46f0b60aead76c

File Explorer

e716dcabb191d76815ed88cc0fee0ce4dd9497d4db6b14dfda46f0b60aead76c

.dll 107KB

e716dcabb191d76815ed88cc0fee0ce4dd9497d4db6b14dfda46f0b60aead76c

IMPHASH e37d2e10404edc8f42475edcd13768a2
SHA256 e716dcabb191d76815ed88cc0fee0ce4dd9497d4db6b14dfda46f0b60aead76c
MD5 59995a0167a90a10021cdb852e889351
SHA1 6ee30729dd61c5d4e9af0b5e0d6c7633f01928e3
SHA512 49a28fa0c8539f6954c33fce1b2baddb685c9349970cc9dcf5438ec72c186c4fd1bdbda6e4418c5e88317bf5f892899d496962d9a26c589e227672b93c1b5db3
SSDEEP 1536:iSNqEiTwBW7W4dz1nqggCTHjpfFP5Ydsd08C3mPwfy3XyUa0:ZsABaZoggCTHjz5YKG8C2ofy3XC0
TLSH
T1EEB32A25F2E2089DD1B2C538AABA56325737FD450A60E36D2A94C5359FB0F90EF3DB10
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

d3d9

Direct3DCreate9

ddraw

DirectDrawCreateEx

dsound

DirectSoundEnumerateW DirectSoundCaptureEnumerateW

kernel32

CloseHandle DisableThreadLibraryCalls EnumResourceNamesW FindResourceW FormatMessageW GetComputerNameW GetDateFormatW GetEnvironmentVariableW GetLocalTime GetLocaleInfoW GetModuleFileNameW GetModuleHandleW GetProcAddress GetSystemDirectoryW GetTickCount GetTimeFormatW GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx HeapAlloc HeapFree HeapReAlloc IsBadStringPtrW K32EnumProcessModules K32EnumProcesses K32GetModuleBaseNameW LoadLibraryW LoadResource MultiByteToWideChar OpenProcess SizeofResource lstrcmpW

ntdll

_vsnprintf

ole32

CLSIDFromString CoCreateInstance CoTaskMemFree PropVariantClear StringFromGUID2

oleaut32

SysAllocString SysFreeString VariantInit VariantClear VariantCopy VariantChangeType SafeArrayAccessData SafeArrayUnaccessData

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsicmp _wcsnicmp free fwrite getenv memcmp memcpy memmove strchr strcmp strcspn strlen wcschr wcsrchr wcsstr

user32

EnumDisplayDevicesW LoadStringW wsprintfW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

28KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

960B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

988B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

368B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

172B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e716dcabb191d76815ed88cc0fee0ce4dd9497d4db6b14dfda46f0b60aead76c

d3d9

ddraw

dsound

kernel32

ntdll

ole32

oleaut32

ucrtbase

user32

version

generic