22a51706b545a681ba0c0fd0cff9669784b3386d2ea601e1cff490fb2fc1bd06

General

Target
22a51706b545a681ba0c0fd0cff9669784b3386d2ea601e1cff490fb2fc1bd06
Size 132KB
Sample260826-hrm7gatepd
SHA256 22a51706b545a681ba0c0fd0cff9669784b3386d2ea601e1cff490fb2fc1bd06
MD5 5f514342a46a4b97fe492b5129f57e32
SHA1 47ecf7e974833db9c8fac20aa3664cbb43e509a2
SHA512 6a4d2943e16bf2f2f2df2ab13e964da59cd4c93e5aaaa16fd8d0b21b70b67b7ff84bfbd1941342b711b480c59de02a99067052ddcb6ec1c83e305c862ccb3d58
SSDEEP 3072:MKfI68BLqf2A2Fu/6KaQM1WGW+E+afQHFTrRo:neOeAeuiKBTRJGHFT
TLSH
T184D3BE063371A479C0636532A46FB2B3E2EBAE346A0FF74B8D80DC5D1525913A779E43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22a51706b545a681ba0c0fd0cff9669784b3386d2ea601e1cff490fb2fc1bd06

File Explorer

22a51706b545a681ba0c0fd0cff9669784b3386d2ea601e1cff490fb2fc1bd06

.dll 132KB

22a51706b545a681ba0c0fd0cff9669784b3386d2ea601e1cff490fb2fc1bd06

IMPHASH d5f0b51175ec131f5ff77c9e7ebd8583
SHA256 22a51706b545a681ba0c0fd0cff9669784b3386d2ea601e1cff490fb2fc1bd06
MD5 5f514342a46a4b97fe492b5129f57e32
SHA1 47ecf7e974833db9c8fac20aa3664cbb43e509a2
SHA512 6a4d2943e16bf2f2f2df2ab13e964da59cd4c93e5aaaa16fd8d0b21b70b67b7ff84bfbd1941342b711b480c59de02a99067052ddcb6ec1c83e305c862ccb3d58
SSDEEP 3072:MKfI68BLqf2A2Fu/6KaQM1WGW+E+afQHFTrRo:neOeAeuiKBTRJGHFT
TLSH
T184D3BE063371A479C0636532A46FB2B3E2EBAE346A0FF74B8D80DC5D1525913A779E43
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

10880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

mscms.pdb

advapi32

RegEnumValueW RegQueryValueExW RegOpenKeyW RegSetValueExW RegQueryInfoKeyW RegCloseKey RegDeleteValueW RegCreateKeyW

kernel32

GetCurrentThreadId GetSystemTimeAsFileTime LeaveCriticalSection GetTickCount SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess DeleteCriticalSection InitializeCriticalSection DisableThreadLibraryCalls SetLastError IsBadWritePtr IsBadReadPtr SetEndOfFile SetFilePointer CloseHandle UnmapViewOfFile GetLastError MapViewOfFile CreateFileMappingW GetFileSize CreateFileW GetFileAttributesW lstrlenW MultiByteToWideChar GlobalLock GlobalAlloc GlobalReAlloc GlobalUnlock GlobalHandle GlobalFree WideCharToMultiByte FreeLibrary GetProcAddress LoadLibraryW QueryPerformanceCounter EnterCriticalSection GetCurrentProcessId IsBadCodePtr lstrcpyW lstrcmpiW lstrcatW GetSystemDirectoryW CopyFileW CreateDirectoryW DeleteFileW GetModuleHandleW lstrlenA lstrcpyA MulDiv TerminateProcess

msvcrt

floor wcscat _ftol wcscpy _wcsdup _CIpow _initterm malloc _adjust_fdiv wcslen _wcsupr wcsstr wcsrchr free

user32

CharPrevW wsprintfA CharNextW

winspool.drv

GetPrinterW SetPrinterW SetPrinterDataExW GetPrinterDataExW ClosePrinter OpenPrinterW GetPrinterDriverDirectoryW

AssociateColorProfileWithDeviceA AssociateColorProfileWithDeviceW CheckBitmapBits CheckColors CloseColorProfile ConvertColorNameToIndex ConvertIndexToColorName CreateColorTransformA CreateColorTransformW CreateDeviceLinkProfile CreateMultiProfileTransform CreateProfileFromLogColorSpaceA CreateProfileFromLogColorSpaceW DeleteColorTransform DisassociateColorProfileFromDeviceA DisassociateColorProfileFromDeviceW EnumColorProfilesA EnumColorProfilesW GenerateCopyFilePaths GetCMMInfo GetColorDirectoryA GetColorDirectoryW GetColorProfileElement GetColorProfileElementTag GetColorProfileFromHandle GetColorProfileHeader GetCountColorProfileElements GetNamedProfileInfo GetPS2ColorRenderingDictionary GetPS2ColorRenderingIntent GetPS2ColorSpaceArray GetStandardColorSpaceProfileA GetStandardColorSpaceProfileW InstallColorProfileA InstallColorProfileW InternalGetDeviceConfig InternalGetPS2CSAFromLCS InternalGetPS2ColorRenderingDictionary InternalGetPS2ColorSpaceArray InternalGetPS2PreviewCRD InternalSetDeviceConfig IsColorProfileTagPresent IsColorProfileValid OpenColorProfileA OpenColorProfileW RegisterCMMA RegisterCMMW SelectCMM SetColorProfileElement SetColorProfileElementReference SetColorProfileElementSize SetColorProfileHeader SetStandardColorSpaceProfileA SetStandardColorSpaceProfileW SpoolerCopyFileEvent TranslateBitmapBits TranslateColors UninstallColorProfileA UninstallColorProfileW UnregisterCMMA UnregisterCMMW

Sharing

General

Malware Config

Signatures

File Explorer

22a51706b545a681ba0c0fd0cff9669784b3386d2ea601e1cff490fb2fc1bd06

advapi32

kernel32

msvcrt

user32

winspool.drv

generic