da8dd26d1d643b6b9d516507dbd809b444d1a65a387ab060a0b58f6b5857a04a

Sharing

Copy URL Twitter E-mail

General

Target
da8dd26d1d643b6b9d516507dbd809b444d1a65a387ab060a0b58f6b5857a04a
Size 211KB
Sample260830-3tkvcat1dz
SHA256 da8dd26d1d643b6b9d516507dbd809b444d1a65a387ab060a0b58f6b5857a04a
MD5 37502ebcf910744ca061df37342d5bfe
SHA1 c0a2a27ddfcc11d563af40590ab572ea8923f30d
SHA512 d9d3bd5a1896f2e70f5a20005986ec8cfd463c4c5bb18916802da373e03651c779bf6f661c304aad80567dbff73b8b8a404dea7192eaab17c1ee2c51ef5c2c47
SSDEEP 3072:bIvHuHlU0ZJGC9FtZH17fqWRmmnEtPzXfWw0wfwH2BlPAuaY2:XU0HGcb
TLSH
T1C724312227F88601F2F36B752DB987656E377D61EE38C60E6A01A15D1971FA0DE20733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da8dd26d1d643b6b9d516507dbd809b444d1a65a387ab060a0b58f6b5857a04a

File Explorer

da8dd26d1d643b6b9d516507dbd809b444d1a65a387ab060a0b58f6b5857a04a

.dll 211KB

da8dd26d1d643b6b9d516507dbd809b444d1a65a387ab060a0b58f6b5857a04a

IMPHASH ca802bd1f02b68d53f74e5ac3920a6fe
SHA256 da8dd26d1d643b6b9d516507dbd809b444d1a65a387ab060a0b58f6b5857a04a
MD5 37502ebcf910744ca061df37342d5bfe
SHA1 c0a2a27ddfcc11d563af40590ab572ea8923f30d
SHA512 d9d3bd5a1896f2e70f5a20005986ec8cfd463c4c5bb18916802da373e03651c779bf6f661c304aad80567dbff73b8b8a404dea7192eaab17c1ee2c51ef5c2c47
SSDEEP 3072:bIvHuHlU0ZJGC9FtZH17fqWRmmnEtPzXfWw0wfwH2BlPAuaY2:XU0HGcb
TLSH
T1C724312227F88601F2F36B752DB987656E377D61EE38C60E6A01A15D1971FA0DE20733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegEnumKeyW RegOpenKeyExW RegQueryValueW

comdlg32

GetOpenFileNameA

kernel32

DisableThreadLibraryCalls FindResourceA FindResourceW FormatMessageW FreeLibrary GetModuleHandleW GetProcAddress GetTickCount GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryA LoadResource LockResource MultiByteToWideChar WideCharToMultiByte

ntdll

_vsnprintf

ole32

CLSIDFromString CoTaskMemFree GetClassFile OleCreate OleCreateFromFile OleGetClipboard OleRegGetUserType

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _strdup _wcsdup free fwrite getenv malloc memcmp memcpy memmove strcat strchr strcmp strcspn strlen wcslen wcsstr

user32

CheckDlgButton CheckRadioButton CreatePopupMenu DialogBoxIndirectParamA DialogBoxIndirectParamW EnableWindow EndDialog GetDlgItem GetForegroundWindow GetPropW InsertMenuW LoadStringA LoadStringW MessageBoxW PostMessageW RegisterClipboardFormatW RegisterWindowMessageW RemoveMenu RemovePropW SendMessageA SendMessageW SetDlgItemTextW SetFocus SetPropW SetWindowTextA SetWindowTextW ShowWindow wsprintfW

Name

.text

Size

24KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

704B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

144KB

Virtual Size

143KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

da8dd26d1d643b6b9d516507dbd809b444d1a65a387ab060a0b58f6b5857a04a

advapi32

comdlg32

kernel32

ntdll

ole32

ucrtbase

user32

generic