cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d

Sharing

Copy URL Twitter E-mail

General

Target
cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d
Size 493KB
Sample260830-3wdh2ssbpc
SHA256 cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d
MD5 72a61c3bdee9e9f6e7424e9d75f27a0e
SHA1 f004a74b4dd93efd1d6a2cb4b4c53c54e2c1419f
SHA512 20620ed857a21699aac4e334519fabc4c013fa9a9bc5eca2e28af6d7b67f6ddb937695bb32114166c8a5a1c6205bafa7cf4d9495459449292fb2f0321f097e07
SSDEEP 6144:4YhQ/pgCoR5EdShtJzqNg1lAkdAHwLhrz6sn:4yEkVIg0k2HwdrOsn
TLSH
T1D0B4E740B2E06CA3EA67C33948E7E2212B387B516357DF17D6085D2C1A7B7D32E91E46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d

File Explorer

cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d

.dll 493KB

cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d

IMPHASH 9f3335b0210246a56fa598ac15cfd0de
SHA256 cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d
MD5 72a61c3bdee9e9f6e7424e9d75f27a0e
SHA1 f004a74b4dd93efd1d6a2cb4b4c53c54e2c1419f
SHA512 20620ed857a21699aac4e334519fabc4c013fa9a9bc5eca2e28af6d7b67f6ddb937695bb32114166c8a5a1c6205bafa7cf4d9495459449292fb2f0321f097e07
SSDEEP 6144:4YhQ/pgCoR5EdShtJzqNg1lAkdAHwLhrz6sn:4yEkVIg0k2HwdrOsn
TLSH
T1D0B4E740B2E06CA3EA67C33948E7E2212B387B516357DF17D6085D2C1A7B7D32E91E46
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12480

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

comctl32

ImageList_Add ImageList_Create ImageList_Destroy InitCommonControlsEx

gdi32

CreateFontIndirectW GetObjectW GetStockObject LineTo MoveToEx SelectObject SetDCPenColor

kernel32

DisableThreadLibraryCalls EnumResourceNamesW ExpandEnvironmentStringsW FindResourceW GetEnvironmentVariableW GetFileAttributesW GetFullPathNameW GetLocaleInfoW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryW LoadResource MultiByteToWideChar SizeofResource WideCharToMultiByte lstrcmpW lstrcmpiW

ntdll

_vsnprintf

ole32

CoCreateInstance OleCreate OleInitialize OleSetContainedObject OleUninitialize

oleaut32

SysAllocString SysFreeString VariantClear

shlwapi

PathCombineW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _strdup _stricmp _strnicmp _wcsdup _wcsnicmp atoi calloc free fwrite getenv isspace malloc memchr memcmp memcpy memmove memset realloc strchr strcmp strcspn strlen strncmp strstr strtol tolower wcschr wcslen wcsncmp wcsrchr wcsstr

user32

BeginPaint ClientToScreen CreateWindowExW DefWindowProcW DestroyMenu DestroyWindow DispatchMessageW EndPaint FrameRect GetClientRect GetDesktopWindow GetMessageW GetParent GetSubMenu GetSysColor GetSystemMetrics GetWindow GetWindowLongW GetWindowRect GetWindowTextA LoadBitmapW LoadCursorW LoadIconW LoadMenuW LoadStringW MoveWindow PostQuitMessage RegisterClassExW ReleaseCapture SendMessageW SetCapture SetMenuItemInfoW SetWindowLongW SetWindowPos SetWindowTextW ShowWindow TrackPopupMenu TranslateMessage UpdateWindow wsprintfW

Name

.text

Size

64KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

204B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

60KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

196B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

64KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d

comctl32

gdi32

kernel32

ntdll

ole32

oleaut32

shlwapi

ucrtbase

user32

generic