0418d1083f1b3f3475b7d6feb411172d58525801912703ebf9aaba61e863d117

Sharing

Copy URL Twitter E-mail

General

Target
0418d1083f1b3f3475b7d6feb411172d58525801912703ebf9aaba61e863d117
Size 276KB
Sample260909-dvrlvaag44
SHA256 0418d1083f1b3f3475b7d6feb411172d58525801912703ebf9aaba61e863d117
MD5 28ed778b6d58f1057e9e68f877ea7086
SHA1 8344d7282bbf6c7ca3bb44fcfac4f304906df510
SHA512 ce0ef18b79f79ccb775ebda9d8acd79eb87763ff11e14910d1d782c6bf0946e66ac23189579cb425572b8564e573d5c6932868bdf09e770c8d758ae96d263fa3
SSDEEP 3072:0ZD//sf2UgCqTeJQdmBjlummBgVRh6DxEc86:0ZD/JmqTeKdmBjlummmVfpc
TLSH
T17054C71177F884F4E14705397C5891A890BEB315DFB09AC3A793D70E1F18AF36A35A8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0418d1083f1b3f3475b7d6feb411172d58525801912703ebf9aaba61e863d117

File Explorer

0418d1083f1b3f3475b7d6feb411172d58525801912703ebf9aaba61e863d117

.dll 276KB

0418d1083f1b3f3475b7d6feb411172d58525801912703ebf9aaba61e863d117

IMPHASH 3468f45c8c07bd0da0a57089c3845b22
SHA256 0418d1083f1b3f3475b7d6feb411172d58525801912703ebf9aaba61e863d117
MD5 28ed778b6d58f1057e9e68f877ea7086
SHA1 8344d7282bbf6c7ca3bb44fcfac4f304906df510
SHA512 ce0ef18b79f79ccb775ebda9d8acd79eb87763ff11e14910d1d782c6bf0946e66ac23189579cb425572b8564e573d5c6932868bdf09e770c8d758ae96d263fa3
SSDEEP 3072:0ZD//sf2UgCqTeJQdmBjlummBgVRh6DxEc86:0ZD/JmqTeKdmBjlummmVfpc
TLSH
T17054C71177F884F4E14705397C5891A890BEB315DFB09AC3A793D70E1F18AF36A35A8A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

43008

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\DCB\CBT_Main\BuildResults\bin\Release\plug_ins\Multimedia\MPP\QuickTime.pdb

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

kernel32

GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress LoadLibraryW GlobalUnlock GlobalLock GlobalFree GetUserDefaultLangID FreeLibrary LoadLibraryA SetLastError CloseHandle ReleaseMutex WaitForSingleObject CreateMutexA GetCurrentProcessId SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetLastError OutputDebugStringA GetSystemTimeAsFileTime InitializeSListHead GetSystemDirectoryA UnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameA

user32

wsprintfA FillRect GetClientRect GetPropA SetPropA EndPaint SetFocus SetWindowPos DestroyWindow CreateWindowExA UnregisterClassA LoadStringA GetMessagePos GetMessageTime DefWindowProcA BeginPaint RegisterClassA

gdi32

CreateDIBSection CreateSolidBrush DeleteObject

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA

vcruntime140

__std_exception_copy __std_exception_destroy __std_type_info_destroy_list memset __std_terminate __CxxFrameHandler3 _CxxThrowException memcpy _purecall _except_handler4_common memcmp

api-ms-win-crt-string-l1-1-0

strcmp _stricmp

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-runtime-l1-1-0

_cexit _set_invalid_parameter_handler _initialize_onexit_table _initterm _initterm_e _execute_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll

Sharing

General

Malware Config

Signatures

File Explorer

0418d1083f1b3f3475b7d6feb411172d58525801912703ebf9aaba61e863d117

version

kernel32

user32

gdi32

advapi32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

generic