cea3e2ce4ec1b2076379d0e65b933fb7ab3aeec0a27e064dd823973f30519428

Sharing

Copy URL Twitter E-mail

General

Target
cea3e2ce4ec1b2076379d0e65b933fb7ab3aeec0a27e064dd823973f30519428
Size 444KB
Sample261017-mtjdhsd171
SHA256 cea3e2ce4ec1b2076379d0e65b933fb7ab3aeec0a27e064dd823973f30519428
MD5 3c9ddd61352e4b92aa2edce02922ad82
SHA1 6e711dc6760a5b657123904b23432e9c2aa0e4a9
SHA512 7c44ad191fd75c242122dbf21019a655c48b085b6319d4b74fb1579b1f67be385bef02797c23da5f70d0fd62b47b603adc7035bc382e962a177c60d0d03d569a
SSDEEP 3072:ZA8DeinJJZqmF3jeYOsfWLqReOFLJ5sPvsmq7rHLrTFF1jeSxFzLFb7N/9xwPih1:ZnAWWLgRfgvMPdHFb7N/zwPih1
TLSH
T1BFA42920B6D6A70BD05B83356CF9A612FB726510336B5FD3A3480D3C4EE67E25D78A06
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cea3e2ce4ec1b2076379d0e65b933fb7ab3aeec0a27e064dd823973f30519428

File Explorer

cea3e2ce4ec1b2076379d0e65b933fb7ab3aeec0a27e064dd823973f30519428

.dll 444KB

cea3e2ce4ec1b2076379d0e65b933fb7ab3aeec0a27e064dd823973f30519428

IMPHASH 0f08f605dac9af99b00d61d4db0eeca8
SHA256 cea3e2ce4ec1b2076379d0e65b933fb7ab3aeec0a27e064dd823973f30519428
MD5 3c9ddd61352e4b92aa2edce02922ad82
SHA1 6e711dc6760a5b657123904b23432e9c2aa0e4a9
SHA512 7c44ad191fd75c242122dbf21019a655c48b085b6319d4b74fb1579b1f67be385bef02797c23da5f70d0fd62b47b603adc7035bc382e962a177c60d0d03d569a
SSDEEP 3072:ZA8DeinJJZqmF3jeYOsfWLqReOFLJ5sPvsmq7rHLrTFF1jeSxFzLFb7N/9xwPih1:ZnAWWLgRfgvMPdHFb7N/zwPih1
TLSH
T1BFA42920B6D6A70BD05B83356CF9A612FB726510336B5FD3A3480D3C4EE67E25D78A06
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

107808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

comctl32

InitCommonControls

ole32

CoTaskMemFree StringFromCLSID

user32

CallNextHookEx ClipCursor CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW EndDialog GetClientRect GetCursorPos GetDesktopWindow GetDlgItem GetForegroundWindow GetKeyNameTextW GetKeyState GetKeyboardType GetRawInputData GetSystemMetrics GetWindowLongW GetWindowThreadProcessId IsWindow LoadStringW MapVirtualKeyW MapWindowPoints MsgWaitForMultipleObjectsEx PeekMessageW PostMessageW RegisterClassExW RegisterRawInputDevices SendDlgItemMessageW SendMessageW SetCursorPos SetThreadDpiAwarenessContext SetWindowLongW SetWindowsHookExW ShowCursor TranslateMessage UnhookWindowsHookEx UnregisterClassW

advapi32

GetUserNameW RegCloseKey RegCreateKeyW RegDeleteTreeW RegOpenKeyA RegOpenKeyW RegQueryValueExW RegSetValueExW

hid

HidD_FreePreparsedData HidD_GetAttributes HidD_GetFeature HidD_GetHidGuid HidD_GetPreparsedData HidD_GetProductString HidD_SetFeature HidP_GetCaps HidP_GetLinkCollectionNodes HidP_GetSpecificButtonCaps HidP_GetSpecificValueCaps HidP_GetUsageValue HidP_GetUsages HidP_GetUsagesEx HidP_InitializeReportForID HidP_MaxUsageListLength HidP_SetUsageValue HidP_SetUsages

setupapi

SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInterfaces SetupDiGetClassDevsW SetupDiGetDeviceInstanceIdW SetupDiGetDeviceInterfaceDetailW SetupDiOpenDeviceInfoW

win32u

NtUserCallTwoParam

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsnicmp atan2 calloc cos free fwrite getenv malloc memcmp memcpy memmove memset realloc round sin sqrt strchr strcmp strcpy strcspn strlen strrchr wcscmp wcscpy wcslen wcsstr

kernel32

CancelIoEx CloseHandle CreateEventW CreateFileW CreateProcessW CreateThread DeleteCriticalSection DeviceIoControl DisableThreadLibraryCalls EnterCriticalSection EnumResourceNamesW FindResourceW FreeLibraryAndExitThread GetEnvironmentVariableW GetModuleFileNameA GetModuleFileNameW GetModuleHandleExA GetModuleHandleW GetOverlappedResult GetProcAddress GetTickCount64 GetTickCount HeapAlloc HeapFree HeapReAlloc InitializeCriticalSectionEx IsBadStringPtrA IsBadStringPtrW LeaveCriticalSection LoadLibraryW LoadResource MulDiv MultiByteToWideChar ReadFile SetEvent SetThreadDescription SizeofResource WaitForSingleObject WideCharToMultiByte WriteFile

ntdll

_chkstk _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

cea3e2ce4ec1b2076379d0e65b933fb7ab3aeec0a27e064dd823973f30519428

comctl32

ole32

user32

advapi32

hid

setupapi

win32u

ucrtbase

kernel32

ntdll

generic