44f02dea0f172eb93deb461145c207357801adf2e666cd4c5568c979dda94497

General

Target
44f02dea0f172eb93deb461145c207357801adf2e666cd4c5568c979dda94497
Size 164KB
Sample261001-vbz8batvew
SHA256 44f02dea0f172eb93deb461145c207357801adf2e666cd4c5568c979dda94497
MD5 e6dba46e3d1c075a5150001fb65bc1e0
SHA1 396b53e160ba9724d2298dc1fc49074acd801349
SHA512 0220feb911f489dd48b4879d1a2d293a450549e323d9df71ff0c818adc3e5326341bd40dc2854f109b6d096280055296141500a0200b8217bcd207bdaa77a4b2
SSDEEP 1536:Zu8oaJ488ugoK4B+Rwd/NHhxHx5vcMBCL+ElTbB:w8oayoKMa8/NHhxHx50MBC9
TLSH
T122F363111ADD58B0E17A8FF509FBAFA21E3938130BF586CB1724D55C2DB5AD0AEB0352
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44f02dea0f172eb93deb461145c207357801adf2e666cd4c5568c979dda94497

File Explorer

44f02dea0f172eb93deb461145c207357801adf2e666cd4c5568c979dda94497

.dll 164KB

44f02dea0f172eb93deb461145c207357801adf2e666cd4c5568c979dda94497

IMPHASH c01bd640cb5d5a7167405863baa762f4
SHA256 44f02dea0f172eb93deb461145c207357801adf2e666cd4c5568c979dda94497
MD5 e6dba46e3d1c075a5150001fb65bc1e0
SHA1 396b53e160ba9724d2298dc1fc49074acd801349
SHA512 0220feb911f489dd48b4879d1a2d293a450549e323d9df71ff0c818adc3e5326341bd40dc2854f109b6d096280055296141500a0200b8217bcd207bdaa77a4b2
SSDEEP 1536:Zu8oaJ488ugoK4B+Rwd/NHhxHx5vcMBCL+ElTbB:w8oayoKMa8/NHhxHx50MBC9
TLSH
T122F363111ADD58B0E17A8FF509FBAFA21E3938130BF586CB1724D55C2DB5AD0AEB0352
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

16640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

comctl32

ord413 InitCommonControls ord412 ord410

user32

CheckDlgButton CreateWindowExW DestroyWindow DialogBoxParamW EndDialog GetDlgItem GetDlgItemTextW GetFocus GetKeyState GetParent GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW IsDlgButtonChecked LoadStringW LockSetForegroundWindow SendMessageW SetDlgItemTextW SetFocus SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow

advapi32

CredEnumerateW CredFree CredWriteW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsicmp free fwrite getenv memcpy memmove memset strchr strcmp strcpy strcspn strlen wcschr wcslen wcsrchr

kernel32

DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection EnumResourceNamesW FindResourceW GetEnvironmentVariableW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LeaveCriticalSection LoadLibraryW LoadResource MultiByteToWideChar RaiseException SizeofResource lstrcmpW

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

44f02dea0f172eb93deb461145c207357801adf2e666cd4c5568c979dda94497

comctl32

user32

advapi32

ucrtbase

kernel32

ntdll

generic