d1b3f7c1d18aed4ed7856af8bc002f507ff4a4fb8633af752673fe5a7dda0625

Sharing

Copy URL Twitter E-mail

General

Target
d1b3f7c1d18aed4ed7856af8bc002f507ff4a4fb8633af752673fe5a7dda0625
Size 1.8MB
Sample261006-q3hecsfb62
SHA256 d1b3f7c1d18aed4ed7856af8bc002f507ff4a4fb8633af752673fe5a7dda0625
MD5 6dd2debb974fb181fce3b6490db7fdb1
SHA1 6778efd5976d8fedd4d4bcdb2e90ad2650924fc4
SHA512 8912e096ca2ed60cf1cb3fdb0dda3dc60f13f29d4f37965bc2a28ec2887c14b8583b8f4473fa22eb1de3b8d8622cb6d2302a9a55b06a23798d7aabe53e591003
SSDEEP 24576:B26fQiZjOoD5RlTGPmDCl6rfywv8nzjZlhOX/:B2MQiZjfldD/rfywv8zjZlhOX/
TLSH
T11E952A40F626A8E2E8224674098FE37B1B387F319666CF47D748BD592D33AE31E55702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1b3f7c1d18aed4ed7856af8bc002f507ff4a4fb8633af752673fe5a7dda0625

File Explorer

d1b3f7c1d18aed4ed7856af8bc002f507ff4a4fb8633af752673fe5a7dda0625

.dll 1.8MB

d1b3f7c1d18aed4ed7856af8bc002f507ff4a4fb8633af752673fe5a7dda0625

IMPHASH 9c21f77d46b5386191df9c6f22e7011b
SHA256 d1b3f7c1d18aed4ed7856af8bc002f507ff4a4fb8633af752673fe5a7dda0625
MD5 6dd2debb974fb181fce3b6490db7fdb1
SHA1 6778efd5976d8fedd4d4bcdb2e90ad2650924fc4
SHA512 8912e096ca2ed60cf1cb3fdb0dda3dc60f13f29d4f37965bc2a28ec2887c14b8583b8f4473fa22eb1de3b8d8622cb6d2302a9a55b06a23798d7aabe53e591003
SSDEEP 24576:B26fQiZjOoD5RlTGPmDCl6rfywv8nzjZlhOX/:B2MQiZjfldD/rfywv8zjZlhOX/
TLSH
T11E952A40F626A8E2E8224674098FE37B1B387F319666CF47D748BD592D33AE31E55702
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

128752

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegCreateKeyExW RegCreateKeyW RegOpenKeyA RegOpenKeyExW RegQueryValueExA RegQueryValueExW RegSetValueExW

gdi32

BitBlt CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateFontIndirectW CreatePatternBrush CreatePen CreatePenIndirect CreatePolygonRgn CreateRectRgn CreateRectRgnIndirect CreateRoundRectRgn CreateSolidBrush DPtoLP DeleteDC DeleteObject ExcludeClipRect ExtCreatePen ExtCreateRegion ExtSelectClipRgn ExtTextOutW FillRgn FrameRgn GdiAlphaBlend GdiGetCharDimensions GdiGetCodePage GetBkColor GetBkMode GetCharABCWidthsW GetCharWidthInfo GetCharWidthW GetClipBox GetClipRgn GetCurrentObject GetDIBColorTable GetDIBits GetDeviceCaps GetLayout GetNearestColor GetObjectType GetObjectW GetPixel GetStockObject GetTextCharsetInfo GetTextColor GetTextExtentExPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextExtentPointW GetTextMetricsW IntersectClipRect LineTo MoveToEx OffsetWindowOrgEx PatBlt PlayEnhMetaFile PolyPolyline Polygon RectVisible Rectangle ScriptBreak ScriptStringAnalyse ScriptStringCPtoX ScriptStringFree ScriptStringGetLogicalWidths ScriptStringOut ScriptStringXtoCP ScriptString_pSize ScriptString_pcOutChars SelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetDIBColorTable SetDIBits SetPixel SetPolyFillMode SetRectRgn SetStretchBltMode SetTextAlign SetTextColor SetViewportOrgEx SetWindowOrgEx StretchBlt StretchDIBits TextOutW

imm32

ImmGetCompositionStringW ImmGetContext ImmReleaseContext ImmSetCompositionFontW ImmSetCompositionWindow

kernel32

DelayLoadFailureHook FindResourceA GetModuleHandleW GlobalAddAtomW GlobalDeleteAtom GlobalLock GlobalUnlock IsBadCodePtr IsBadStringPtrA IsBadStringPtrW IsBadWritePtr LocalSize RaiseException ResolveDelayLoadedAPI RtlUnwind

kernelbase

CloseHandle CompareFileTime CompareStringA CompareStringW CreateEventW CreateThread DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FindResourceW FreeResource GetDateFormatW GetDriveTypeW GetLocalTime GetLocaleInfoW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetProcAddress GetThreadLocale GetTickCount GetUserDefaultLCID GetVersion GlobalAlloc GlobalFree HeapAlloc HeapFree HeapReAlloc InitializeCriticalSectionEx IsValidLocale LeaveCriticalSection LoadLibraryW LoadResource LocalAlloc LocalFree LocalLock LocalReAlloc LocalUnlock LockResource MulDiv MultiByteToWideChar SetEvent SizeofResource StrCmpIW StrCmpNIW SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte lstrcmpW lstrcmpiW

ntdll

_vsnprintf

oleaut32

SysAllocString SysAllocStringLen

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _assert _strdup _stricmp _wcsdup _wcsicmp _wcsnicmp floor free fwrite getenv isprint iswalnum memcmp memcpy memmove memset qsort strcat strchr strcmp strcpy strcspn strlen strrchr wcscat wcschr wcscpy wcsncmp wcsrchr wcsstr wcstol

user32

AdjustWindowRect AdjustWindowRectEx AppendMenuW BeginDeferWindowPos BeginPaint CallWindowProcA CallWindowProcW CharLowerBuffW CharLowerW CharUpperBuffW CharUpperW CheckMenuItem ChildWindowFromPoint ClientToScreen CloseClipboard CopyIcon CopyImage CopyRect CreateCaret CreateDialogIndirectParamA CreateDialogIndirectParamW CreateIconIndirect CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcW DeferWindowPos DeleteMenu DestroyCaret DestroyCursor DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamW DialogBoxParamW DispatchMessageW DragDetect DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawStateW DrawTextA DrawTextW EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndDeferWindowPos EndDialog EndPaint EnumChildWindows FillRect FrameRect GetActiveWindow GetAsyncKeyState GetCapture GetCaretPos GetClassLongW GetClassNameW GetClientRect GetClipboardData GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgCtrlID GetDlgItem GetDoubleClickTime GetDpiForWindow GetFocus GetGUIThreadInfo GetIconInfo GetKeyNameTextW GetKeyState GetMenuState GetMessagePos GetMessageTime GetMessageW GetMonitorInfoW GetNextDlgGroupItem GetNextDlgTabItem GetParent GetPropW GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongW GetWindowRect GetWindowRgn GetWindowTextA GetWindowTextLengthA GetWindowTextLengthW GetWindowTextW InternalGetWindowText IntersectRect InvalidateRect InvalidateRgn InvertRect IsChild IsClipboardFormatAvailable IsDialogMessageW IsWindow IsWindowEnabled IsWindowUnicode IsWindowVisible KillSystemTimer KillTimer LoadBitmapW LoadCursorW LoadIconW LoadImageA LoadImageW LoadMenuA LoadStringW MapDialogRect MapVirtualKeyW MapWindowPoints MonitorFromRect MonitorFromWindow MoveWindow NotifyWinEvent OpenClipboard PeekMessageW PostMessageW PostQuitMessage RedrawWindow RegisterClassW RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient ScrollWindow ScrollWindowEx SendDlgItemMessageW SendMessageA SendMessageW SetCapture SetCaretPos SetClipboardData SetCursor SetFocus SetParent SetPropW SetScrollInfo SetScrollPos SetScrollRange SetSystemTimer SetTimer SetWindowLongA SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextA SetWindowTextW ShowCaret ShowScrollBar ShowWindow SubtractRect SystemParametersInfoW TabbedTextOutW TrackMouseEvent TrackPopupMenu TranslateMessage UnionRect UnregisterClassW UpdateWindow ValidateRect WindowFromPoint wsprintfW

AddMRUStringW CreateMRUListW CreateMappedBitmap CreatePropertySheetPage CreatePropertySheetPageA CreatePropertySheetPageW CreateStatusWindow CreateStatusWindowA CreateStatusWindowW CreateToolbar CreateToolbarEx CreateUpDownControl DPA_Clone DPA_Create DPA_CreateEx DPA_DeleteAllPtrs DPA_DeletePtr DPA_Destroy DPA_DestroyCallback DPA_EnumCallback DPA_GetPtr DPA_GetPtrIndex DPA_GetSize DPA_Grow DPA_InsertPtr DPA_Search DPA_SetPtr DPA_Sort DSA_Clone DSA_Create DSA_DeleteAllItems DSA_DeleteItem DSA_Destroy DSA_DestroyCallback DSA_EnumCallback DSA_GetItem DSA_GetItemPtr DSA_GetSize DSA_InsertItem DSA_SetItem DefSubclassProc DestroyPropertySheetPage DllGetVersion DllInstall DrawInsert DrawShadowText DrawStatusText DrawStatusTextA DrawStatusTextW EnumMRUListW FlatSB_EnableScrollBar FlatSB_GetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollProp FlatSB_GetScrollRange FlatSB_SetScrollInfo FlatSB_SetScrollPos FlatSB_SetScrollProp FlatSB_SetScrollRange FlatSB_ShowScrollBar GetEffectiveClientRect GetMUILanguage GetWindowSubclass HIMAGELIST_QueryInterface ImageList_Add ImageList_AddIcon ImageList_AddMasked ImageList_BeginDrag ImageList_CoCreateInstance ImageList_Copy ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_DrawIndirect ImageList_Duplicate ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetFlags ImageList_GetIcon ImageList_GetIconSize ImageList_GetImageCount ImageList_GetImageInfo ImageList_GetImageRect ImageList_LoadImage ImageList_LoadImageA ImageList_LoadImageW ImageList_Merge ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetFilter ImageList_SetFlags ImageList_SetIconSize ImageList_SetImageCount ImageList_SetOverlayImage ImageList_Write ImageList_WriteEx InitCommonControls InitCommonControlsEx InitMUILanguage InitializeFlatSB LBItemFromPt LoadIconMetric LoadIconWithScaleDown MakeDragList MenuHelp PropertySheet PropertySheetA PropertySheetW RegisterClassNameW RemoveWindowSubclass SetWindowSubclass ShowHideMenuCtl TaskDialog TaskDialogIndirect UninitializeFlatSB _TrackMouseEvent

Name

.text

Size

784KB

Virtual Size

781KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

892B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

152KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

324KB

Virtual Size

323KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

48KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

d1b3f7c1d18aed4ed7856af8bc002f507ff4a4fb8633af752673fe5a7dda0625

advapi32

gdi32

imm32

kernel32

kernelbase

ntdll

oleaut32

ucrtbase

user32

generic