8fbd6e5ede552a23bd8350f17aa041d80f88ab8219421ce807fabb9d193ce1b9

General

Target
8fbd6e5ede552a23bd8350f17aa041d80f88ab8219421ce807fabb9d193ce1b9
Size 257KB
Sample260908-baltraxth1
SHA256 8fbd6e5ede552a23bd8350f17aa041d80f88ab8219421ce807fabb9d193ce1b9
MD5 84df98d24ec7359f79eec896469d9362
SHA1 351fb1d8daaa1af31a6f560531c540bd86461914
SHA512 70db65d8f1693ff57e676b858e74c9229bbe08aade0695c290566f28f36357a776114749fb8d18749a11db0addb9f8c9d973357165d95c77342f4ba65fbb1573
SSDEEP 6144:mvqEmzWdQdOmJj/+MwKFIHoKDf2/KElHj5I/K2Rb9UxbZVajab6qxbZsnbnobt5K:AqEmzpdlJj/+MwKFIHoKDf2/KElHj5IZ
TLSH
T18D440900FA088072D57348B94DA1C6E6535FB5B76FF08ED7FA94462F2F623D89A31216
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fbd6e5ede552a23bd8350f17aa041d80f88ab8219421ce807fabb9d193ce1b9

File Explorer

8fbd6e5ede552a23bd8350f17aa041d80f88ab8219421ce807fabb9d193ce1b9

.dll 257KB

8fbd6e5ede552a23bd8350f17aa041d80f88ab8219421ce807fabb9d193ce1b9

SHA256 8fbd6e5ede552a23bd8350f17aa041d80f88ab8219421ce807fabb9d193ce1b9
MD5 84df98d24ec7359f79eec896469d9362
SHA1 351fb1d8daaa1af31a6f560531c540bd86461914
SHA512 70db65d8f1693ff57e676b858e74c9229bbe08aade0695c290566f28f36357a776114749fb8d18749a11db0addb9f8c9d973357165d95c77342f4ba65fbb1573
SSDEEP 6144:mvqEmzWdQdOmJj/+MwKFIHoKDf2/KElHj5I/K2Rb9UxbZVajab6qxbZsnbnobt5K:AqEmzpdlJj/+MwKFIHoKDf2/KElHj5IZ
TLSH
T18D440900FA088072D57348B94DA1C6E6535FB5B76FF08ED7FA94462F2F623D89A31216
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

254720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

wv2_Controller_Attach_AcceleratorKeyPressed wv2_Controller_Close wv2_Controller_Detach_AcceleratorKeyPressed wv2_Controller_GetBackgroundColor wv2_Controller_GetBounds wv2_Controller_GetParent wv2_Controller_GetVisible wv2_Controller_GetWebview2 wv2_Controller_GetZoomFactor wv2_Controller_NotifyParentChanged wv2_Controller_SetBackgroundColor wv2_Controller_SetBounds wv2_Controller_SetParent wv2_Controller_SetVisible wv2_Controller_SetZoomFactor wv2_CookieData_GetDomain wv2_CookieData_GetExpires wv2_CookieData_GetHTTPOnly wv2_CookieData_GetName wv2_CookieData_GetPath wv2_CookieData_GetSameSite wv2_CookieData_GetSecure wv2_CookieData_GetSession wv2_CookieData_GetValue wv2_CookieData_SetExpires wv2_CookieData_SetHTTPOnly wv2_CookieData_SetSameSite wv2_CookieData_SetSecure wv2_CookieData_SetValue wv2_CookieList_GetCookieAtIndex wv2_CookieList_GetCount wv2_CookieManager_CopyCookie wv2_CookieManager_CreateCookie wv2_CookieManager_DeleteAllCookies wv2_CookieManager_DeleteCookie wv2_CookieManager_DeleteCookieWithParam wv2_CookieManager_DeleteCookies wv2_CookieManager_GetCookie wv2_CookieManager_GetCookie_Sync wv2_CookieManager_SetCookie wv2_Deferral_Complete wv2_Env_CreateController wv2_Env_CreateController_Options wv2_Env_CreateController_Options_Sync wv2_Env_CreateController_Sync wv2_Env_CreateWebResourceResponse wv2_Frame_Attach_Destroyed wv2_Frame_Attach_NameChanged wv2_Frame_Detach_Destroyed wv2_Frame_Detach_NameChanged wv2_Frame_ExecuteScript wv2_Frame_ExecuteScript_Sync wv2_Frame_GetName wv2_Frame_IsDestroyed wv2_Global_CheckEdgeRuntime wv2_Global_CreateEnv_Sync wv2_Global_EnableHighDPISupport wv2_Object_AddRef wv2_Object_Release wv2_Profile_ClearAllBrowsingData wv2_Profile_ClearAllBrowsingData_Sync wv2_Profile_ClearBrowsingData wv2_Profile_ClearBrowsingDataInTimeRange wv2_Profile_ClearBrowsingDataInTimeRange_Sync wv2_Profile_ClearBrowsingData_Sync wv2_Profile_GetColorTheme wv2_Profile_GetDefaultDownloadPath wv2_Profile_GetName wv2_Profile_GetPath wv2_Profile_GetPrivateInMode wv2_Profile_SetColorTheme wv2_Profile_SetDefaultDownloadPath wv2_ResourceRequestArgs_GetDeferral wv2_ResourceRequestArgs_GetRequest wv2_ResourceRequestArgs_GetResourceContext wv2_ResourceRequestArgs_GetResponse wv2_ResourceRequestArgs_SetResponse wv2_ResourceRequest_GetData wv2_ResourceRequest_GetHeaders wv2_ResourceRequest_GetMethod wv2_ResourceRequest_GetURL wv2_ResourceRequest_SetData wv2_ResourceRequest_SetMethod wv2_ResourceRequest_SetURL wv2_ResourceResponseView_GetData wv2_ResourceResponseView_GetData_Sync wv2_ResourceResponseView_GetHeaders wv2_ResourceResponseView_GetReasonPhrase wv2_ResourceResponseView_GetStatusCode wv2_ResourceResponse_GetData wv2_ResourceResponse_GetHeaders wv2_ResourceResponse_GetReasonPhrase wv2_ResourceResponse_GetStatusCode wv2_ResourceResponse_SetData wv2_ResourceResponse_SetReasonPhrase wv2_ResourceResponse_SetStatusCode wv2_Utility_Malloc wv2_Utility_Mfree wv2_Webview_AddPreloadScript wv2_Webview_AddPreloadScript_Sync wv2_Webview_AddWebResourceRequestedFilter wv2_Webview_Attach_BasicAuthenticationRequested wv2_Webview_Attach_ContainsFullScreenElementChanged wv2_Webview_Attach_DocumentTitleChanged wv2_Webview_Attach_FaviconChanged wv2_Webview_Attach_FrameCreated wv2_Webview_Attach_IsDocumentPlayingAudioChanged wv2_Webview_Attach_NavigationCompleted wv2_Webview_Attach_NavigationStarting wv2_Webview_Attach_NewWindowRequest wv2_Webview_Attach_PermissionRequested wv2_Webview_Attach_ScriptDialogOpening wv2_Webview_Attach_SourceChanged wv2_Webview_Attach_WebResourceRequested wv2_Webview_Attach_WebResourceResponseReceived wv2_Webview_Attach_WindowCloseRequest wv2_Webview_BasicAuthenticationRequestedArgs_GetCancel wv2_Webview_BasicAuthenticationRequestedArgs_GetChallenge wv2_Webview_BasicAuthenticationRequestedArgs_GetDeferral wv2_Webview_BasicAuthenticationRequestedArgs_GetURL wv2_Webview_BasicAuthenticationRequestedArgs_Password_Attr wv2_Webview_BasicAuthenticationRequestedArgs_SetCancel wv2_Webview_BasicAuthenticationRequestedArgs_UserName_Attr wv2_Webview_CallDevtoolsProtocolsMethod wv2_Webview_CallDevtoolsProtocolsMethod_Sync wv2_Webview_CanGoBack wv2_Webview_CanGoForward wv2_Webview_CapturePreview wv2_Webview_CapturePreview_Sync wv2_Webview_CloseDefaultDownloadDialog wv2_Webview_Detach_BasicAuthenticationRequested wv2_Webview_Detach_ContainsFullScreenElementChanged wv2_Webview_Detach_DocumentTitleChanged wv2_Webview_Detach_FaviconChanged wv2_Webview_Detach_FrameCreated wv2_Webview_Detach_IsDocumentPlayingAudioChanged wv2_Webview_Detach_NavigationCompleted wv2_Webview_Detach_NavigationStarting wv2_Webview_Detach_NewWindowRequest wv2_Webview_Detach_PermissionRequested wv2_Webview_Detach_ScriptDialogOpening wv2_Webview_Detach_SourceChanged wv2_Webview_Detach_WebResourceRequested wv2_Webview_Detach_WebResourceResponseReceived wv2_Webview_Detach_WindowCloseRequest wv2_Webview_ExecuteScript wv2_Webview_ExecuteScript_Sync wv2_Webview_GetAudioPlaying wv2_Webview_GetBrowserProcessID wv2_Webview_GetCookieManager wv2_Webview_GetDefaultDownloadDialogMargin wv2_Webview_GetDocumentTitle wv2_Webview_GetEnvironment wv2_Webview_GetFaviconURL wv2_Webview_GetFullscreenMode wv2_Webview_GetMute wv2_Webview_GetProfile wv2_Webview_GetSettings wv2_Webview_GetURL wv2_Webview_GetUserAgent wv2_Webview_GoBack wv2_Webview_GoForward wv2_Webview_HTTPRequestHeader_Contains wv2_Webview_HTTPRequestHeader_GetHeader wv2_Webview_HTTPRequestHeader_GetHeaders wv2_Webview_HTTPRequestHeader_GetRawData wv2_Webview_HTTPRequestHeader_RemoveHeader wv2_Webview_HTTPRequestHeader_SetHeader wv2_Webview_HTTPResponseHeader_AppendHeader wv2_Webview_HTTPResponseHeader_Contains wv2_Webview_HTTPResponseHeader_GetHeader wv2_Webview_HTTPResponseHeader_GetHeaders wv2_Webview_HTTPResponseHeader_GetRawData wv2_Webview_IsDefaultDownloadDialogOpen wv2_Webview_Navigate wv2_Webview_NavigateToString wv2_Webview_NavigationStartingEventArgs_GetRequestHeader wv2_Webview_NavigationStartingEventArgs_GetURL wv2_Webview_NavigationStartingEventArgs_PutCancel wv2_Webview_NewWindowRequestArgs_GetDeferral wv2_Webview_NewWindowRequestArgs_GetFeatures wv2_Webview_NewWindowRequestArgs_GetHandled wv2_Webview_NewWindowRequestArgs_GetNewWindow wv2_Webview_NewWindowRequestArgs_GetURL wv2_Webview_NewWindowRequestArgs_SetHandled wv2_Webview_NewWindowRequestArgs_SetNewWindow wv2_Webview_OpenDefaultDownloadDialog wv2_Webview_OpenDevTools wv2_Webview_OpenTaskManager wv2_Webview_PermissionRequestArgs_GetDeferral wv2_Webview_PermissionRequestArgs_GetState wv2_Webview_PermissionRequestArgs_GetType wv2_Webview_PermissionRequestArgs_GetURL wv2_Webview_PermissionRequestArgs_SetState wv2_Webview_PostWebMessageAsJSON wv2_Webview_PostWebMessageAsString wv2_Webview_Reload wv2_Webview_RemovePreloadScript wv2_Webview_RemoveWebResourceRequestedFilter wv2_Webview_ScriptDialogOpeningArgs_Accept wv2_Webview_ScriptDialogOpeningArgs_GetDefaultText wv2_Webview_ScriptDialogOpeningArgs_GetDeferral wv2_Webview_ScriptDialogOpeningArgs_GetMessage wv2_Webview_ScriptDialogOpeningArgs_GetResultText wv2_Webview_ScriptDialogOpeningArgs_GetType wv2_Webview_ScriptDialogOpeningArgs_GetURL wv2_Webview_ScriptDialogOpeningArgs_SetResultText wv2_Webview_SetDefaultDownloadDialogMargin wv2_Webview_SetMute wv2_Webview_SetSettings wv2_Webview_SetUserAgent wv2_Webview_Stop

Sharing

General

Malware Config

Signatures

File Explorer

8fbd6e5ede552a23bd8350f17aa041d80f88ab8219421ce807fabb9d193ce1b9

generic