56a97289e8cd80f60fea53bb20e64899ed5b6c6791fe3d59da20a633e3240973

Sharing

Copy URL Twitter E-mail

General

Target
56a97289e8cd80f60fea53bb20e64899ed5b6c6791fe3d59da20a633e3240973
Size 1.3MB
Sample260924-mn2b5stvbw
SHA256 56a97289e8cd80f60fea53bb20e64899ed5b6c6791fe3d59da20a633e3240973
MD5 ed46d1857ded93decd4589022002a22b
SHA1 6bd6c57189d29352c07e0835b2f892473caa966b
SHA512 7e5e9cbce1a1086b3947d356bdc31b04200ba3411106719dd571e029a81126f00c53250a3b67a0aebbbce67573194c8101054d7746f66b85201c1e3b224e0daf
SSDEEP 24576:rEhmjdhc0e80OmXVFHWNFQgi3n6m4jT4OI8O:rEheBmXVFHOQgiiT4T
TLSH
T1B4553812B9C08763C8B3037582FB8BB1767B9521BB2746E7A784359519103C2277B7FA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56a97289e8cd80f60fea53bb20e64899ed5b6c6791fe3d59da20a633e3240973

File Explorer

56a97289e8cd80f60fea53bb20e64899ed5b6c6791fe3d59da20a633e3240973

.dll 1.3MB

56a97289e8cd80f60fea53bb20e64899ed5b6c6791fe3d59da20a633e3240973

IMPHASH 82a77ac62f7fadd7395048338387c083
SHA256 56a97289e8cd80f60fea53bb20e64899ed5b6c6791fe3d59da20a633e3240973
MD5 ed46d1857ded93decd4589022002a22b
SHA1 6bd6c57189d29352c07e0835b2f892473caa966b
SHA512 7e5e9cbce1a1086b3947d356bdc31b04200ba3411106719dd571e029a81126f00c53250a3b67a0aebbbce67573194c8101054d7746f66b85201c1e3b224e0daf
SSDEEP 24576:rEhmjdhc0e80OmXVFHWNFQgi3n6m4jT4OI8O:rEheBmXVFHOQgiiT4T
TLSH
T1B4553812B9C08763C8B3037582FB8BB1767B9521BB2746E7A784359519103C2277B7FA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

149021

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentThreadId SetEndOfFile HeapSize HeapReAlloc CreateFileW WriteConsoleW FlushFileBuffers SetStdHandle OutputDebugStringW LCMapStringW VerifyVersionInfoW MulDiv GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameA DeleteCriticalSection GetFileType GetDriveTypeW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter RaiseException GetConsoleCP SetFilePointerEx ReadConsoleW GetConsoleMode ReadFile RtlUnwind CloseHandle GlobalLock GlobalUnlock GetPrivateProfileIntW Sleep GlobalAlloc CompareStringW WritePrivateProfileStringW GetPrivateProfileStringW GlobalHandle GetTempPathW FindFirstFileW FindClose CompareFileTime FreeEnvironmentStringsW GlobalFree GetModuleHandleW GetModuleHandleA LeaveCriticalSection EnterCriticalSection GetModuleFileNameW WriteFile VerSetConditionMask LoadLibraryExW GetProcAddress GetStringTypeW GetLastError HeapFree HeapAlloc IsDebuggerPresent IsProcessorFeaturePresent DeleteFileW GetFullPathNameW SetEnvironmentVariableW SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW GetCommandLineA EncodePointer DecodePointer IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError MultiByteToWideChar GetProcessHeap ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetStdHandle SetEnvironmentVariableA

user32

MessageBeep UpdateWindow SendDlgItemMessageW IsDlgButtonChecked GetDlgItemTextW SetDlgItemTextW EndDialog DialogBoxParamW CreateDialogParamW ShowWindow DestroyWindow CreateWindowExW PostMessageW wsprintfW LoadCursorW SetCursor DrawIconEx LoadImageW GetClassNameW EnumChildWindows GetParent GetWindowLongW InflateRect CopyRect FrameRect DrawFocusRect GetSysColor GetWindowRect GetClientRect GetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC DrawTextExW DrawTextW GetSystemMetrics IsWindowEnabled GetFocus GetDlgCtrlID GetDlgItem IsWindowVisible DrawFrameControl DrawEdge SystemParametersInfoW RedrawWindow SendMessageW FillRect

gdi32

SetBkColor SelectObject Rectangle GetTextExtentPoint32W GetStockObject GetDeviceCaps CreateSolidBrush CreatePen CreateFontIndirectW CreateCompatibleDC CreateCompatibleBitmap BitBlt DeleteObject SetTextColor SetBkMode

comdlg32

GetOpenFileNameW

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetMalloc

comctl32

ord413 ord410 ord412

generic

count=41, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=10, id=109, productName=VS2005 build 50727, version=50727,

count=2, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=4, id=228, version=40629,

count=2, id=199, version=41118,

count=48, id=225, productName=VS2013 build 21005, version=21005,

count=45, id=223, productName=VS2013 build 21005, version=21005,

count=183, id=224, productName=VS2013 build 21005, version=21005,

count=15, id=203, version=65501,

count=213, id=1, productName=Unmarked objects,

count=1, id=225, productName=VS2013 UPD5 build 40629, version=40629,

count=237, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=1, id=151,

count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,