e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15

Sharing

Copy URL Twitter E-mail

General

Target
e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15
Size 197KB
Sample260924-t26bksythv
SHA256 e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15
MD5 0e2cabf3b9d989e4602d68c0a8ed5775
SHA1 681367c704f5f282080df923c874a5cfeff3fadc
SHA512 06d6bf5c0843add627081211625342e1a81781a1a88bbf906b8a52662c49626b9f017bde94707045ed0934fd944595aaec36e36d1116420beecaa4468c9d2eec
SSDEEP 1536:WMmJkVaYe/zIWUE88ugoK4B+Rwd/NHhxHx5vcMBC3RSj+MVwOGLhU:Ja3/zIWHoKMa8/NHhxHx50MBCMa6D
TLSH
T14C14B75127AD68F1D1768FF905FBDFA21B3D79430AE5874B4B14EA182C729C06EE0392
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15

File Explorer

e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15

.dll 197KB

e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15

IMPHASH 07b0f302de69ee18d96e27bb7e7c12b9
SHA256 e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15
MD5 0e2cabf3b9d989e4602d68c0a8ed5775
SHA1 681367c704f5f282080df923c874a5cfeff3fadc
SHA512 06d6bf5c0843add627081211625342e1a81781a1a88bbf906b8a52662c49626b9f017bde94707045ed0934fd944595aaec36e36d1116420beecaa4468c9d2eec
SSDEEP 1536:WMmJkVaYe/zIWUE88ugoK4B+Rwd/NHhxHx5vcMBC3RSj+MVwOGLhU:Ja3/zIWHoKMa8/NHhxHx50MBCMa6D
TLSH
T14C14B75127AD68F1D1768FF905FBDFA21B3D79430AE5874B4B14EA182C729C06EE0392
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

CredEnumerateW CredFree CredWriteW

comctl32

InitCommonControls ord410 ord412 ord413

kernel32

DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection EnumResourceNamesW FindResourceW GetEnvironmentVariableW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LeaveCriticalSection LoadLibraryW LoadResource MultiByteToWideChar RaiseException SizeofResource lstrcmpW

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsicmp free fwrite getenv memcmp memcpy memmove memset strchr strcmp strcspn strlen wcschr wcsrchr

user32

CheckDlgButton CreateWindowExW DestroyWindow DialogBoxParamW EndDialog GetDlgItem GetDlgItemTextW GetFocus GetKeyState GetParent GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW IsDlgButtonChecked LoadStringW LockSetForegroundWindow SendMessageW SetDlgItemTextW SetFocus SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow

Name

.text

Size

20KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

168B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

732B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

196B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

784B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

104KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

916B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15

advapi32

comctl32

kernel32

ntdll

ucrtbase

user32

generic