84f7e7cda392fa6428a83f7001035eb9a27a8274b8919dfb13b9cff708f230e2

Sharing

Copy URL Twitter E-mail

General

Target
84f7e7cda392fa6428a83f7001035eb9a27a8274b8919dfb13b9cff708f230e2
Size 1.2MB
Sample260930-a3xw2sbb53
SHA256 84f7e7cda392fa6428a83f7001035eb9a27a8274b8919dfb13b9cff708f230e2
MD5 c855deddea5182a669abc94481118dda
SHA1 7dfd0cd1c96e8e3eb7124f1f4b2673ebe5896f3e
SHA512 71485844238ad59d93b042abdd1fa1a482ef08f6b1d8a37f365f5da32a9cb43c9260b292902744905efb0a5fedd494815c5dd913bfb5a2b48fa1512c5466d093
SSDEEP 6144:v3QelMOr/XqKeg+7u0rIoLbKNQ6EdMLBukkPP789lS+e8WxNnjFbxWx9QX/:vAey4GpXrIoL6gkk3uwjFbxWxQ
TLSH
T14D45D921E7EC8A06F5F3AB3C2DB922512D367DA6AA36CA4F5201556D08F0F94DD70723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84f7e7cda392fa6428a83f7001035eb9a27a8274b8919dfb13b9cff708f230e2

File Explorer

84f7e7cda392fa6428a83f7001035eb9a27a8274b8919dfb13b9cff708f230e2

.dll 1.2MB

84f7e7cda392fa6428a83f7001035eb9a27a8274b8919dfb13b9cff708f230e2

IMPHASH 116a8efec2fb3a2c661f5682749315b5
SHA256 84f7e7cda392fa6428a83f7001035eb9a27a8274b8919dfb13b9cff708f230e2
MD5 c855deddea5182a669abc94481118dda
SHA1 7dfd0cd1c96e8e3eb7124f1f4b2673ebe5896f3e
SHA512 71485844238ad59d93b042abdd1fa1a482ef08f6b1d8a37f365f5da32a9cb43c9260b292902744905efb0a5fedd494815c5dd913bfb5a2b48fa1512c5466d093
SSDEEP 6144:v3QelMOr/XqKeg+7u0rIoLbKNQ6EdMLBukkPP789lS+e8WxNnjFbxWx9QX/:vAey4GpXrIoL6gkk3uwjFbxWxQ
TLSH
T14D45D921E7EC8A06F5F3AB3C2DB922512D367DA6AA36CA4F5201556D08F0F94DD70723
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

61728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

crypt32

CertAddCRLContextToStore CertAddCTLContextToStore CertAddCertificateContextToStore CertAddStoreToCollection CertCloseStore CertCreateCertificateChainEngine CertDeleteCertificateFromStore CertDuplicateCertificateContext CertEnumCRLsInStore CertEnumCTLsInStore CertEnumCertificatesInStore CertEnumSystemStore CertFindExtension CertFreeCRLContext CertFreeCTLContext CertFreeCertificateChain CertFreeCertificateChainEngine CertFreeCertificateContext CertGetCertificateChain CertGetCertificateContextProperty CertGetEnhancedKeyUsage CertGetNameStringW CertGetPublicKeyLength CertGetStoreProperty CertGetValidUsages CertNameToStrW CertOpenStore CertOpenSystemStoreW CertRDNValueToStrW CertSaveStore CertSetCertificateContextProperty CertSetEnhancedKeyUsage CryptBinaryToStringA CryptDecodeObjectEx CryptFindLocalizedName CryptFindOIDInfo CryptFormatObject CryptQueryObject PFXExportCertStore

ole32

CreateBindCtx OleCreateDefaultHandler

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy ImageList_SetBkColor PropertySheetW

comdlg32

GetOpenFileNameW GetSaveFileNameW

user32

DialogBoxParamW EnableWindow EndDialog EnumChildWindows GetClassLongW GetDC GetDlgItem GetParent GetWindowLongW GetWindowRect IsDlgButtonChecked LoadBitmapW LoadImageW LoadStringW MapWindowPoints MessageBoxW PostMessageW ReleaseDC SendMessageA SendMessageW SetFocus SetWindowLongW SetWindowPos ShowScrollBar ShowWindow

gdi32

CreateFontW DeleteObject GetDeviceCaps

advapi32

CryptAcquireContextW CryptDestroyKey CryptGetKeyParam CryptGetUserKey CryptReleaseContext CryptSetProvParam RegCloseKey RegCreateKeyExW RegDeleteValueA RegQueryValueExA RegSetValueExA

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsdup _wcsicmp calloc free fwrite getenv iswprint iswspace malloc memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen wcslen wcsrchr

kernel32

CloseHandle CompareFileTime CreateFileW DelayLoadFailureHook DisableThreadLibraryCalls EnumResourceNamesW FileTimeToSystemTime FindResourceW FormatMessageW FreeLibrary GetDateFormatW GetEnvironmentVariableW GetLocaleInfoW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount HeapAlloc HeapFree HeapReAlloc IsBadStringPtrW LoadLibraryW LoadResource LocalFree MulDiv MultiByteToWideChar RaiseException ResolveDelayLoadedAPI SizeofResource WriteFile lstrcmpW

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

84f7e7cda392fa6428a83f7001035eb9a27a8274b8919dfb13b9cff708f230e2

crypt32

ole32

comctl32

comdlg32

user32

gdi32

advapi32

ucrtbase

kernel32

ntdll

generic