33dc4e74c1b9a542318e0df9af15df81b36db93d048df8ed6dba5847b8f4ea6a

General

Target
33dc4e74c1b9a542318e0df9af15df81b36db93d048df8ed6dba5847b8f4ea6a
Size 257KB
Sample260908-bednyacc83
SHA256 33dc4e74c1b9a542318e0df9af15df81b36db93d048df8ed6dba5847b8f4ea6a
MD5 20f17a7dc32ee3187e4007094230d2a0
SHA1 696faaf34b4cf1e6d05a4c4a780276496446edb1
SHA512 76dbc5f903bb4728c237b2d9aaa47a956e56502e79c9933093121cc4ed912533a4b64c5c2b5482c5687248dcf30b3cfe601794953c722b3a4410d38f6e252353
SSDEEP 6144:aa/Euht8z6+0YRYR8fD/+MwKn4l6wRf2/KqHJx5I/KYrb9UxbZfE1Ob6qxbZOtbH:Z/Euh2VfD/+MwKn4l6wRf2/KqHJx5I/B
TLSH
T10444180177448526E6B356B94D60CAEA575DB1A37FF18BCB7E88072B1E723E05F30226
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33dc4e74c1b9a542318e0df9af15df81b36db93d048df8ed6dba5847b8f4ea6a

File Explorer

33dc4e74c1b9a542318e0df9af15df81b36db93d048df8ed6dba5847b8f4ea6a

.dll 257KB

33dc4e74c1b9a542318e0df9af15df81b36db93d048df8ed6dba5847b8f4ea6a

SHA256 33dc4e74c1b9a542318e0df9af15df81b36db93d048df8ed6dba5847b8f4ea6a
MD5 20f17a7dc32ee3187e4007094230d2a0
SHA1 696faaf34b4cf1e6d05a4c4a780276496446edb1
SHA512 76dbc5f903bb4728c237b2d9aaa47a956e56502e79c9933093121cc4ed912533a4b64c5c2b5482c5687248dcf30b3cfe601794953c722b3a4410d38f6e252353
SSDEEP 6144:aa/Euht8z6+0YRYR8fD/+MwKn4l6wRf2/KqHJx5I/KYrb9UxbZfE1Ob6qxbZOtbH:Z/Euh2VfD/+MwKn4l6wRf2/KqHJx5I/B
TLSH
T10444180177448526E6B356B94D60CAEA575DB1A37FF18BCB7E88072B1E723E05F30226
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

254720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

wv2_Controller_Attach_AcceleratorKeyPressed wv2_Controller_Close wv2_Controller_Detach_AcceleratorKeyPressed wv2_Controller_GetBackgroundColor wv2_Controller_GetBounds wv2_Controller_GetParent wv2_Controller_GetVisible wv2_Controller_GetWebview2 wv2_Controller_GetZoomFactor wv2_Controller_NotifyParentChanged wv2_Controller_SetBackgroundColor wv2_Controller_SetBounds wv2_Controller_SetParent wv2_Controller_SetVisible wv2_Controller_SetZoomFactor wv2_CookieData_GetDomain wv2_CookieData_GetExpires wv2_CookieData_GetHTTPOnly wv2_CookieData_GetName wv2_CookieData_GetPath wv2_CookieData_GetSameSite wv2_CookieData_GetSecure wv2_CookieData_GetSession wv2_CookieData_GetValue wv2_CookieData_SetExpires wv2_CookieData_SetHTTPOnly wv2_CookieData_SetSameSite wv2_CookieData_SetSecure wv2_CookieData_SetValue wv2_CookieList_GetCookieAtIndex wv2_CookieList_GetCount wv2_CookieManager_CopyCookie wv2_CookieManager_CreateCookie wv2_CookieManager_DeleteAllCookies wv2_CookieManager_DeleteCookie wv2_CookieManager_DeleteCookieWithParam wv2_CookieManager_DeleteCookies wv2_CookieManager_GetCookie wv2_CookieManager_GetCookie_Sync wv2_CookieManager_SetCookie wv2_Deferral_Complete wv2_Env_CreateController wv2_Env_CreateController_Options wv2_Env_CreateController_Options_Sync wv2_Env_CreateController_Sync wv2_Env_CreateWebResourceResponse wv2_Frame_Attach_Destroyed wv2_Frame_Attach_NameChanged wv2_Frame_Detach_Destroyed wv2_Frame_Detach_NameChanged wv2_Frame_ExecuteScript wv2_Frame_ExecuteScript_Sync wv2_Frame_GetName wv2_Frame_IsDestroyed wv2_Global_CheckEdgeRuntime wv2_Global_CreateEnv_Sync wv2_Global_EnableHighDPISupport wv2_Object_AddRef wv2_Object_Release wv2_Profile_ClearAllBrowsingData wv2_Profile_ClearAllBrowsingData_Sync wv2_Profile_ClearBrowsingData wv2_Profile_ClearBrowsingDataInTimeRange wv2_Profile_ClearBrowsingDataInTimeRange_Sync wv2_Profile_ClearBrowsingData_Sync wv2_Profile_GetColorTheme wv2_Profile_GetDefaultDownloadPath wv2_Profile_GetName wv2_Profile_GetPath wv2_Profile_GetPrivateInMode wv2_Profile_SetColorTheme wv2_Profile_SetDefaultDownloadPath wv2_ResourceRequestArgs_GetDeferral wv2_ResourceRequestArgs_GetRequest wv2_ResourceRequestArgs_GetResourceContext wv2_ResourceRequestArgs_GetResponse wv2_ResourceRequestArgs_SetResponse wv2_ResourceRequest_GetData wv2_ResourceRequest_GetHeaders wv2_ResourceRequest_GetMethod wv2_ResourceRequest_GetURL wv2_ResourceRequest_SetData wv2_ResourceRequest_SetMethod wv2_ResourceRequest_SetURL wv2_ResourceResponseView_GetData wv2_ResourceResponseView_GetData_Sync wv2_ResourceResponseView_GetHeaders wv2_ResourceResponseView_GetReasonPhrase wv2_ResourceResponseView_GetStatusCode wv2_ResourceResponse_GetData wv2_ResourceResponse_GetHeaders wv2_ResourceResponse_GetReasonPhrase wv2_ResourceResponse_GetStatusCode wv2_ResourceResponse_SetData wv2_ResourceResponse_SetReasonPhrase wv2_ResourceResponse_SetStatusCode wv2_Utility_Malloc wv2_Utility_Mfree wv2_Webview_AddPreloadScript wv2_Webview_AddPreloadScript_Sync wv2_Webview_AddWebResourceRequestedFilter wv2_Webview_Attach_BasicAuthenticationRequested wv2_Webview_Attach_ContainsFullScreenElementChanged wv2_Webview_Attach_DocumentTitleChanged wv2_Webview_Attach_FaviconChanged wv2_Webview_Attach_FrameCreated wv2_Webview_Attach_IsDocumentPlayingAudioChanged wv2_Webview_Attach_NavigationCompleted wv2_Webview_Attach_NavigationStarting wv2_Webview_Attach_NewWindowRequest wv2_Webview_Attach_PermissionRequested wv2_Webview_Attach_ScriptDialogOpening wv2_Webview_Attach_SourceChanged wv2_Webview_Attach_WebResourceRequested wv2_Webview_Attach_WebResourceResponseReceived wv2_Webview_Attach_WindowCloseRequest wv2_Webview_BasicAuthenticationRequestedArgs_GetCancel wv2_Webview_BasicAuthenticationRequestedArgs_GetChallenge wv2_Webview_BasicAuthenticationRequestedArgs_GetDeferral wv2_Webview_BasicAuthenticationRequestedArgs_GetURL wv2_Webview_BasicAuthenticationRequestedArgs_Password_Attr wv2_Webview_BasicAuthenticationRequestedArgs_SetCancel wv2_Webview_BasicAuthenticationRequestedArgs_UserName_Attr wv2_Webview_CallDevtoolsProtocolsMethod wv2_Webview_CallDevtoolsProtocolsMethod_Sync wv2_Webview_CanGoBack wv2_Webview_CanGoForward wv2_Webview_CapturePreview wv2_Webview_CapturePreview_Sync wv2_Webview_CloseDefaultDownloadDialog wv2_Webview_Detach_BasicAuthenticationRequested wv2_Webview_Detach_ContainsFullScreenElementChanged wv2_Webview_Detach_DocumentTitleChanged wv2_Webview_Detach_FaviconChanged wv2_Webview_Detach_FrameCreated wv2_Webview_Detach_IsDocumentPlayingAudioChanged wv2_Webview_Detach_NavigationCompleted wv2_Webview_Detach_NavigationStarting wv2_Webview_Detach_NewWindowRequest wv2_Webview_Detach_PermissionRequested wv2_Webview_Detach_ScriptDialogOpening wv2_Webview_Detach_SourceChanged wv2_Webview_Detach_WebResourceRequested wv2_Webview_Detach_WebResourceResponseReceived wv2_Webview_Detach_WindowCloseRequest wv2_Webview_ExecuteScript wv2_Webview_ExecuteScript_Sync wv2_Webview_GetAudioPlaying wv2_Webview_GetBrowserProcessID wv2_Webview_GetCookieManager wv2_Webview_GetDefaultDownloadDialogMargin wv2_Webview_GetDocumentTitle wv2_Webview_GetEnvironment wv2_Webview_GetFaviconURL wv2_Webview_GetFullscreenMode wv2_Webview_GetMute wv2_Webview_GetProfile wv2_Webview_GetSettings wv2_Webview_GetURL wv2_Webview_GetUserAgent wv2_Webview_GoBack wv2_Webview_GoForward wv2_Webview_HTTPRequestHeader_Contains wv2_Webview_HTTPRequestHeader_GetHeader wv2_Webview_HTTPRequestHeader_GetHeaders wv2_Webview_HTTPRequestHeader_GetRawData wv2_Webview_HTTPRequestHeader_RemoveHeader wv2_Webview_HTTPRequestHeader_SetHeader wv2_Webview_HTTPResponseHeader_AppendHeader wv2_Webview_HTTPResponseHeader_Contains wv2_Webview_HTTPResponseHeader_GetHeader wv2_Webview_HTTPResponseHeader_GetHeaders wv2_Webview_HTTPResponseHeader_GetRawData wv2_Webview_IsDefaultDownloadDialogOpen wv2_Webview_Navigate wv2_Webview_NavigateToString wv2_Webview_NavigationStartingEventArgs_GetRequestHeader wv2_Webview_NavigationStartingEventArgs_GetURL wv2_Webview_NavigationStartingEventArgs_PutCancel wv2_Webview_NewWindowRequestArgs_GetDeferral wv2_Webview_NewWindowRequestArgs_GetFeatures wv2_Webview_NewWindowRequestArgs_GetHandled wv2_Webview_NewWindowRequestArgs_GetNewWindow wv2_Webview_NewWindowRequestArgs_GetURL wv2_Webview_NewWindowRequestArgs_SetHandled wv2_Webview_NewWindowRequestArgs_SetNewWindow wv2_Webview_OpenDefaultDownloadDialog wv2_Webview_OpenDevTools wv2_Webview_OpenTaskManager wv2_Webview_PermissionRequestArgs_GetDeferral wv2_Webview_PermissionRequestArgs_GetState wv2_Webview_PermissionRequestArgs_GetType wv2_Webview_PermissionRequestArgs_GetURL wv2_Webview_PermissionRequestArgs_SetState wv2_Webview_PostWebMessageAsJSON wv2_Webview_PostWebMessageAsString wv2_Webview_Reload wv2_Webview_RemovePreloadScript wv2_Webview_RemoveWebResourceRequestedFilter wv2_Webview_ScriptDialogOpeningArgs_Accept wv2_Webview_ScriptDialogOpeningArgs_GetDefaultText wv2_Webview_ScriptDialogOpeningArgs_GetDeferral wv2_Webview_ScriptDialogOpeningArgs_GetMessage wv2_Webview_ScriptDialogOpeningArgs_GetResultText wv2_Webview_ScriptDialogOpeningArgs_GetType wv2_Webview_ScriptDialogOpeningArgs_GetURL wv2_Webview_ScriptDialogOpeningArgs_SetResultText wv2_Webview_SetDefaultDownloadDialogMargin wv2_Webview_SetMute wv2_Webview_SetSettings wv2_Webview_SetUserAgent wv2_Webview_Stop

Sharing

General

Malware Config

Signatures

File Explorer

33dc4e74c1b9a542318e0df9af15df81b36db93d048df8ed6dba5847b8f4ea6a

generic