45535b3c2ecb3c35390193a1fa2e0bfaf0db5f3c9d9208a6401f0b05599f375d

Sharing

Copy URL Twitter E-mail

General

Target
45535b3c2ecb3c35390193a1fa2e0bfaf0db5f3c9d9208a6401f0b05599f375d
Size 278KB
Sample261003-schcsasyaz
SHA256 45535b3c2ecb3c35390193a1fa2e0bfaf0db5f3c9d9208a6401f0b05599f375d
MD5 3d930187ad62cc133cb85572716559b1
SHA1 016acde638db45ad6ad322ce631ae39352a8154e
SHA512 df115af54a479aaf4ebb1feca20b3d9d63620eda3f55f7372b0f151d75d960aa7c09641df5ce40f00a6b3a89c4073ec22e0d99eb8f4f862eefb0dfcc757549a1
SSDEEP 6144:gC7dOYY4mr0cU4zS8yboeUiUvy6nS3AKeLAvIAW34lr7L1MOTgVWY10nSaplJqFC:r7q4mr0cU4zS8yboHTe1IAW34lr7L1M+
TLSH
T1AF54F706EEE5DB33E9F7AA7444A7526A1832FC045B30D64FA70E904A0B317249F91F76
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45535b3c2ecb3c35390193a1fa2e0bfaf0db5f3c9d9208a6401f0b05599f375d

File Explorer

45535b3c2ecb3c35390193a1fa2e0bfaf0db5f3c9d9208a6401f0b05599f375d

.dll 278KB

45535b3c2ecb3c35390193a1fa2e0bfaf0db5f3c9d9208a6401f0b05599f375d

IMPHASH 1f0494292747dd6deb36aa4b3eb41633
SHA256 45535b3c2ecb3c35390193a1fa2e0bfaf0db5f3c9d9208a6401f0b05599f375d
MD5 3d930187ad62cc133cb85572716559b1
SHA1 016acde638db45ad6ad322ce631ae39352a8154e
SHA512 df115af54a479aaf4ebb1feca20b3d9d63620eda3f55f7372b0f151d75d960aa7c09641df5ce40f00a6b3a89c4073ec22e0d99eb8f4f862eefb0dfcc757549a1
SSDEEP 6144:gC7dOYY4mr0cU4zS8yboeUiUvy6nS3AKeLAvIAW34lr7L1MOTgVWY10nSaplJqFC:r7q4mr0cU4zS8yboHTe1IAW34lr7L1M+
TLSH
T1AF54F706EEE5DB33E9F7AA7444A7526A1832FC045B30D64FA70E904A0B317249F91F76
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegCreateKeyW RegDeleteKeyW RegEnumKeyExW RegOpenKeyExW RegOpenKeyW RegQueryValueExW RegSetValueExW

kernel32

CloseHandle CreateSemaphoreW DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection ExpandEnvironmentStringsW FindResourceW FlushInstructionCache FreeLibrary GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentVariableW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetProcAddress GetProcessHeap GetSystemTimeAsFileTime GetTickCount GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LoadResource LockResource MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter RaiseException ReleaseSemaphore SetLastError SetUnhandledExceptionFilter SizeofResource Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject lstrcmpiW lstrlenW

msvcrt

__dllonexit _amsg_exit _initterm _iob _lock _memicmp _onexit _unlock _vsnwprintf _wcsicmp abort calloc free fwrite iswspace malloc memcmp memmove memset realloc sprintf strcmp strncmp strrchr vfprintf vsprintf wcscat wcschr wcscmp wcscpy wcslen wcstok wcstol wcstoul

shell32

DragQueryFileW SHChangeNotify ShellExecuteW

user32

CharLowerBuffW CheckDlgButton DialogBoxParamW EnableWindow EndDialog GetDlgItem GetMonitorInfoW GetParent GetWindowLongW GetWindowRect IsDlgButtonChecked LoadStringW MonitorFromWindow MoveWindow SendMessageW SetDlgItemTextW SetFocus SetWindowLongW ShowWindow

Name

.text

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

764B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ATL

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

188B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

59KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rossym

Size

126KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

45535b3c2ecb3c35390193a1fa2e0bfaf0db5f3c9d9208a6401f0b05599f375d

advapi32

kernel32

msvcrt

shell32

user32

generic