5199bebbf944b04fd6372570d0e26aa425febd760a64afe4a4f0874c22a946cd

General

Target
5199bebbf944b04fd6372570d0e26aa425febd760a64afe4a4f0874c22a946cd
Size 307KB
Sample261002-jznnmsdc56
SHA256 5199bebbf944b04fd6372570d0e26aa425febd760a64afe4a4f0874c22a946cd
MD5 437508f451f10d638343b2dea7d3cf6b
SHA1 c2409b55d9c9dd8842f7efb41fa5a2027380c7b5
SHA512 54e45fbf7638f6fdcaa1a5c2860950a1d677ba866045644554f529f8c17fa3368bdc56bb27bafc4e3555ec1830bbc3ce6c2408d9a9b34854736de0d2a79c02b3
SSDEEP 6144:5IIII396m1Dczp0BXdfFXqS+7ysfBV+UdvrEFp7hKpu:J1Dct0BttX1+hfBjvrEH7Wu
TLSH
T19164BF003AE087F6E1BD4E3075A9D62526FDB93C0B7888DBE3948A181D9D6C297347D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5199bebbf944b04fd6372570d0e26aa425febd760a64afe4a4f0874c22a946cd

File Explorer

5199bebbf944b04fd6372570d0e26aa425febd760a64afe4a4f0874c22a946cd

.dll 307KB

5199bebbf944b04fd6372570d0e26aa425febd760a64afe4a4f0874c22a946cd

IMPHASH 6b3755fe1c295c9a6bdfff6e03f184aa
SHA256 5199bebbf944b04fd6372570d0e26aa425febd760a64afe4a4f0874c22a946cd
MD5 437508f451f10d638343b2dea7d3cf6b
SHA1 c2409b55d9c9dd8842f7efb41fa5a2027380c7b5
SHA512 54e45fbf7638f6fdcaa1a5c2860950a1d677ba866045644554f529f8c17fa3368bdc56bb27bafc4e3555ec1830bbc3ce6c2408d9a9b34854736de0d2a79c02b3
SSDEEP 6144:5IIII396m1Dczp0BXdfFXqS+7ysfBV+UdvrEFp7hKpu:J1Dct0BttX1+hfBjvrEH7Wu
TLSH
T19164BF003AE087F6E1BD4E3075A9D62526FDB93C0B7888DBE3948A181D9D6C297347D7
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

82196

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\FastCopy\Obj\ReleaseShl\FastExt1.pdb

kernel32

GetSystemDefaultLCID GetLongPathNameW GetCurrentProcess GetStdHandle WriteFile GetModuleFileNameW GetThreadLocale CreatePipe GetFileAttributesW DuplicateHandle CloseHandle GlobalLock CreateProcessW GlobalUnlock GetEnvironmentVariableW GetFullPathNameW CreateFileW GetLastError SetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetProcAddress DeleteCriticalSection GetCurrentProcessId GetModuleHandleW FreeLibrary GetTickCount FindClose MultiByteToWideChar WideCharToMultiByte GetCommandLineW GetVersionExA GetEnvironmentStringsW IsDebuggerPresent GetCurrentThreadId WriteConsoleW GetFileType GetModuleFileNameA RaiseException SetUnhandledExceptionFilter ExitProcess GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount CreateEventW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead GetStartupInfoW RtlUnwind InterlockedFlushSList EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetModuleHandleExW HeapReAlloc HeapFree HeapAlloc GetACP LCMapStringW GetStringTypeW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA FreeEnvironmentStringsW GetProcessHeap SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize SetFilePointerEx DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

5199bebbf944b04fd6372570d0e26aa425febd760a64afe4a4f0874c22a946cd

kernel32

generic