1ffd540cf04d4b607c5c84085b0cb7abad701149068f1b85bd5714f5d437920b

General

Target
1ffd540cf04d4b607c5c84085b0cb7abad701149068f1b85bd5714f5d437920b
Size 212KB
Sample261009-3mbcbswtay
SHA256 1ffd540cf04d4b607c5c84085b0cb7abad701149068f1b85bd5714f5d437920b
MD5 4c88d0e21a9406ba7b3d5ab489252d9d
SHA1 7d38358c0fcb19e3fa40815e92521e0fb580f983
SHA512 f79c0aba991dcaaf2a4980ccc6d9b0b62ad231709a884aa68da22d77e92b071bd740924b75d58f2d3bd8663f06ca04fb38eb3ac412f110578f83ecb8cf6d26ac
SSDEEP 3072:wYiepOtgs5N9FtZH17fqWRmmnEtPzXfWw0wfwH2BlPAuaYB:/pvo1
TLSH
T181240B2127F88601F2F2AB792DB953612A367D61AB34C6CFA601A15D1971FE0DE70733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ffd540cf04d4b607c5c84085b0cb7abad701149068f1b85bd5714f5d437920b

File Explorer

1ffd540cf04d4b607c5c84085b0cb7abad701149068f1b85bd5714f5d437920b

.dll 212KB

1ffd540cf04d4b607c5c84085b0cb7abad701149068f1b85bd5714f5d437920b

IMPHASH 2edcfd40c0e8b0eb90dde52813b15b99
SHA256 1ffd540cf04d4b607c5c84085b0cb7abad701149068f1b85bd5714f5d437920b
MD5 4c88d0e21a9406ba7b3d5ab489252d9d
SHA1 7d38358c0fcb19e3fa40815e92521e0fb580f983
SHA512 f79c0aba991dcaaf2a4980ccc6d9b0b62ad231709a884aa68da22d77e92b071bd740924b75d58f2d3bd8663f06ca04fb38eb3ac412f110578f83ecb8cf6d26ac
SSDEEP 3072:wYiepOtgs5N9FtZH17fqWRmmnEtPzXfWw0wfwH2BlPAuaYB:/pvo1
TLSH
T181240B2127F88601F2F2AB792DB953612A367D61AB34C6CFA601A15D1971FE0DE70733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

20512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ole32

CLSIDFromString CoTaskMemFree GetClassFile OleCreate OleCreateFromFile OleGetClipboard OleRegGetUserType

comdlg32

GetOpenFileNameA

user32

CheckDlgButton CheckRadioButton CreatePopupMenu DialogBoxIndirectParamA DialogBoxIndirectParamW EnableWindow EndDialog GetDlgItem GetForegroundWindow GetPropW InsertMenuW LoadStringA LoadStringW MessageBoxW PostMessageW RegisterClipboardFormatW RegisterWindowMessageW RemoveMenu RemovePropW SendMessageA SendMessageW SetDlgItemTextW SetFocus SetPropW SetWindowTextA SetWindowTextW ShowWindow wsprintfW

advapi32

RegEnumKeyW RegOpenKeyExW RegQueryValueW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _strdup _wcsdup free fwrite getenv malloc memcpy memmove memset strchr strcmp strcpy strcspn strlen wcslen wcsstr

kernel32

DisableThreadLibraryCalls FindResourceA FindResourceW FormatMessageW FreeLibrary GetModuleHandleW GetProcAddress GetTickCount GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryA LoadResource LockResource MultiByteToWideChar WideCharToMultiByte

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

1ffd540cf04d4b607c5c84085b0cb7abad701149068f1b85bd5714f5d437920b

ole32

comdlg32

user32

advapi32

ucrtbase

kernel32

ntdll

generic