8e67959f1da0bd30ac381c69b73572b255882c120dec529fd74462b4385437f5

Sharing

Copy URL Twitter E-mail

General

Target
8e67959f1da0bd30ac381c69b73572b255882c120dec529fd74462b4385437f5
Size 304KB
Sample261022-tysajsstdz
SHA256 8e67959f1da0bd30ac381c69b73572b255882c120dec529fd74462b4385437f5
MD5 a7f0ce04c14c71a9fbf0cfbd03ff7a1e
SHA1 a51688e092c90c80cb3cece659dfa14ec88c22ae
SHA512 d9b1012c44808c3a0152631adb4ce5472a05ee06fb8c534e5813a9ae2ca1608de46d1a4dfe421e8feb03fab6348293713bffe1b86781eb04e45cd11f38f0294d
SSDEEP 3072:Ed6jkpQwDgrINFoDY7BMqX0Y+TJY4mRjuPr4aWTFC25+kVlPdyqv6JbiC5VD6wr/:EnZ8W039Y4mRyjxGzFGX/L8QWA+
TLSH
T1DD647C11B2D4C436D9AF02744562832967F6BC60ABF5C6CBEB803E9E5D365C28A39353
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e67959f1da0bd30ac381c69b73572b255882c120dec529fd74462b4385437f5

File Explorer

8e67959f1da0bd30ac381c69b73572b255882c120dec529fd74462b4385437f5

.dll 304KB

8e67959f1da0bd30ac381c69b73572b255882c120dec529fd74462b4385437f5

IMPHASH babea8eb7408a94372b7cbe24fb8bb2d
SHA256 8e67959f1da0bd30ac381c69b73572b255882c120dec529fd74462b4385437f5
MD5 a7f0ce04c14c71a9fbf0cfbd03ff7a1e
SHA1 a51688e092c90c80cb3cece659dfa14ec88c22ae
SHA512 d9b1012c44808c3a0152631adb4ce5472a05ee06fb8c534e5813a9ae2ca1608de46d1a4dfe421e8feb03fab6348293713bffe1b86781eb04e45cd11f38f0294d
SSDEEP 3072:Ed6jkpQwDgrINFoDY7BMqX0Y+TJY4mRjuPr4aWTFC25+kVlPdyqv6JbiC5VD6wr/:EnZ8W039Y4mRyjxGzFGX/L8QWA+
TLSH
T1DD647C11B2D4C436D9AF02744562832967F6BC60ABF5C6CBEB803E9E5D365C28A39353
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

104570

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\jk_9\workspace\Module_NPAPI_W_WebPages_package\code_path\Main\Bin\Win32\Win_x86_32\InformationDialog.pdb

kernel32

GetCommandLineA HeapFree HeapAlloc GetProcessHeap TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind ExitProcess RaiseException HeapSize HeapReAlloc Sleep GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime VirtualAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetCurrentProcess FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale FormatMessageW GetModuleHandleA WritePrivateProfileStringW MulDiv GlobalFlags SetErrorMode TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalFree LocalAlloc lstrlenW GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GlobalAddAtomW CloseHandle GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameW GetVersion EnumResourceLanguagesW GetLocaleInfoW LoadLibraryW FindResourceW LoadResource LockResource SizeofResource GlobalLock lstrcmpW GlobalAlloc FreeLibrary GetModuleHandleW GetProcAddress SetLastError GetLastError MultiByteToWideChar WideCharToMultiByte InterlockedExchange InterlockedDecrement HeapCreate InterlockedIncrement

user32

EndPaint BeginPaint GrayStringW DrawTextExW DrawTextW TabbedTextOutW LoadCursorW GetDC ReleaseDC GetSysColorBrush ClientToScreen UnregisterClassW ShowWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW LoadIconW SendDlgItemMessageW SendDlgItemMessageA WinHelpW GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextW GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetClientRect GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW RegisterClassW GetSysColor AdjustWindowRectEx CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindow GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog DestroyMenu GetMessageTime GetWindowThreadProcessId GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect PostMessageW PostQuitMessage SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus GetParent SendMessageW ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem EnableWindow GetClassInfoW UnregisterClassA

gdi32

DeleteDC GetStockObject ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW TextOutW PtVisible CreateBitmap SetMapMode RestoreDC SaveDC GetDeviceCaps DeleteObject GetObjectW SetBkColor SetTextColor GetClipBox RectVisible

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegCloseKey

shlwapi

PathFindExtensionW PathFindFileNameW

oleaut32

VariantClear VariantChangeType VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

8e67959f1da0bd30ac381c69b73572b255882c120dec529fd74462b4385437f5

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

generic