7e70d98d273c85d9ef03a30d1e5920ec5bcb87158c014aaf24e4201d24c0f6a9

Sharing

Copy URL Twitter E-mail

General

Target
7e70d98d273c85d9ef03a30d1e5920ec5bcb87158c014aaf24e4201d24c0f6a9
Size 508KB
Sample260930-a1gr2sba53
SHA256 7e70d98d273c85d9ef03a30d1e5920ec5bcb87158c014aaf24e4201d24c0f6a9
MD5 a026bbc896902fd4908c377c66f2655d
SHA1 5d77bb92cc30eadf8f79fa9fa84a52bce296ca04
SHA512 a254251c1ed4be1a6bfab21803f81fece0f992abacd1984295996ca74b4fd9219627ec18b5d9b0ef0c225904d2084f33eddd485e2e1acb7f8271f7a4772511bb
SSDEEP 12288:vZVTIKGIFIJRV/k0z9lL2vU3GxsvCNmg8YY:vrTIKTFIt/k0z9lL2vU3GxsvCNmg
TLSH
T136B4F99572E79616E65B073028FE9226FA353D326773CACB6214251C1FF27E06C78722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e70d98d273c85d9ef03a30d1e5920ec5bcb87158c014aaf24e4201d24c0f6a9

File Explorer

7e70d98d273c85d9ef03a30d1e5920ec5bcb87158c014aaf24e4201d24c0f6a9

.dll 508KB

7e70d98d273c85d9ef03a30d1e5920ec5bcb87158c014aaf24e4201d24c0f6a9

IMPHASH 3d9c35edb892e9deb53fd818c5d4a77c
SHA256 7e70d98d273c85d9ef03a30d1e5920ec5bcb87158c014aaf24e4201d24c0f6a9
MD5 a026bbc896902fd4908c377c66f2655d
SHA1 5d77bb92cc30eadf8f79fa9fa84a52bce296ca04
SHA512 a254251c1ed4be1a6bfab21803f81fece0f992abacd1984295996ca74b4fd9219627ec18b5d9b0ef0c225904d2084f33eddd485e2e1acb7f8271f7a4772511bb
SSDEEP 12288:vZVTIKGIFIJRV/k0z9lL2vU3GxsvCNmg8YY:vrTIKTFIt/k0z9lL2vU3GxsvCNmg
TLSH
T136B4F99572E79616E65B073028FE9226FA353D326773CACB6214251C1FF27E06C78722
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

180080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

oleaut32

LoadRegTypeLib LoadTypeLib SafeArrayAccessData SafeArrayCreate SafeArrayDestroy SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound SafeArrayLock SafeArrayPtrOfIndex SafeArrayRedim SafeArrayUnaccessData SafeArrayUnlock SysAllocString SysAllocStringLen SysFreeString SysStringLen SystemTimeToVariantTime VarAbs VarAdd VarAnd VarCat VarCmp VarDateFromStr VarDateFromUdateEx VarDiv VarEqv VarFix VarFormatCurrency VarFormatDateTime VarFormatNumber VarFormatPercent VarIdiv VarImp VarInt VarMod VarMonthName VarMul VarNeg VarNot VarOr VarPow VarR8Round VarSub VarWeekdayName VarXor VariantChangeType VariantClear VariantCopy VariantCopyInd VariantTimeToSystemTime

ole32

CLSIDFromProgID CoGetClassObject CoTaskMemFree CreateBindCtx MkParseDisplayName

user32

LoadStringW MessageBoxW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _assert _dclass _strdup _wcsdup _wcsicmp atan calloc cos exp free fwrite getenv isalnum iswalnum iswalpha iswspace log malloc memcpy memmove memset pow realloc sin sqrt strchr strcmp strcpy strcspn strlen tan towlower towupper wcscmp wcslen wcspbrk

kernel32

DisableThreadLibraryCalls EnumResourceNamesW FindResourceW FindStringOrdinal GetCPInfo GetEnvironmentVariableW GetLocalTime GetLocaleInfoW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW IsDBCSLeadByteEx IsValidLocale LoadLibraryW LoadResource MultiByteToWideChar SizeofResource WideCharToMultiByte

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

7e70d98d273c85d9ef03a30d1e5920ec5bcb87158c014aaf24e4201d24c0f6a9

oleaut32

ole32

user32

ucrtbase

kernel32

ntdll

generic