abca42d509ad22a035aa233b0eb7beb4034d74e8598f8d9baa2d494f9f8ffc1a

Sharing

Copy URL Twitter E-mail

General

Target
abca42d509ad22a035aa233b0eb7beb4034d74e8598f8d9baa2d494f9f8ffc1a
Size 1.2MB
Sample261027-ar6ptacc85
SHA256 abca42d509ad22a035aa233b0eb7beb4034d74e8598f8d9baa2d494f9f8ffc1a
MD5 5f2fc2f008bf3389f7576532cc23b1f1
SHA1 ddb8a697af6995416e0a52c3d865adf01e3ce944
SHA512 4d182145fab8358df3c4e28c6fc85c3221767f62a2de5a6541d4d96f51f3185bc7da11e3cac04e88f9d42ec69117600901c46bcd80412017ce1070022389dd1b
SSDEEP 6144:03QelMOr/XqKeg77u0rIoLbKNQ6EdMLBukkPP789lS+e8WxNnjFbxWx9QX/:0Aey4GkXrIoL6gkk3uwjFbxWxQ
TLSH
T17245D921E7EC8A06F5F3AB3C2DB922512D367DA6AA36CA4F5201556D08F0F94DD70723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abca42d509ad22a035aa233b0eb7beb4034d74e8598f8d9baa2d494f9f8ffc1a

File Explorer

abca42d509ad22a035aa233b0eb7beb4034d74e8598f8d9baa2d494f9f8ffc1a

.dll 1.2MB

abca42d509ad22a035aa233b0eb7beb4034d74e8598f8d9baa2d494f9f8ffc1a

IMPHASH 116a8efec2fb3a2c661f5682749315b5
SHA256 abca42d509ad22a035aa233b0eb7beb4034d74e8598f8d9baa2d494f9f8ffc1a
MD5 5f2fc2f008bf3389f7576532cc23b1f1
SHA1 ddb8a697af6995416e0a52c3d865adf01e3ce944
SHA512 4d182145fab8358df3c4e28c6fc85c3221767f62a2de5a6541d4d96f51f3185bc7da11e3cac04e88f9d42ec69117600901c46bcd80412017ce1070022389dd1b
SSDEEP 6144:03QelMOr/XqKeg77u0rIoLbKNQ6EdMLBukkPP789lS+e8WxNnjFbxWx9QX/:0Aey4GkXrIoL6gkk3uwjFbxWxQ
TLSH
T17245D921E7EC8A06F5F3AB3C2DB922512D367DA6AA36CA4F5201556D08F0F94DD70723
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

61728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

crypt32

CertAddCRLContextToStore CertAddCTLContextToStore CertAddCertificateContextToStore CertAddStoreToCollection CertCloseStore CertCreateCertificateChainEngine CertDeleteCertificateFromStore CertDuplicateCertificateContext CertEnumCRLsInStore CertEnumCTLsInStore CertEnumCertificatesInStore CertEnumSystemStore CertFindExtension CertFreeCRLContext CertFreeCTLContext CertFreeCertificateChain CertFreeCertificateChainEngine CertFreeCertificateContext CertGetCertificateChain CertGetCertificateContextProperty CertGetEnhancedKeyUsage CertGetNameStringW CertGetPublicKeyLength CertGetStoreProperty CertGetValidUsages CertNameToStrW CertOpenStore CertOpenSystemStoreW CertRDNValueToStrW CertSaveStore CertSetCertificateContextProperty CertSetEnhancedKeyUsage CryptBinaryToStringA CryptDecodeObjectEx CryptFindLocalizedName CryptFindOIDInfo CryptFormatObject CryptQueryObject PFXExportCertStore

ole32

CreateBindCtx OleCreateDefaultHandler

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy ImageList_SetBkColor PropertySheetW

comdlg32

GetOpenFileNameW GetSaveFileNameW

user32

DialogBoxParamW EnableWindow EndDialog EnumChildWindows GetClassLongW GetDC GetDlgItem GetParent GetWindowLongW GetWindowRect IsDlgButtonChecked LoadBitmapW LoadImageW LoadStringW MapWindowPoints MessageBoxW PostMessageW ReleaseDC SendMessageA SendMessageW SetFocus SetWindowLongW SetWindowPos ShowScrollBar ShowWindow

gdi32

CreateFontW DeleteObject GetDeviceCaps

advapi32

CryptAcquireContextW CryptDestroyKey CryptGetKeyParam CryptGetUserKey CryptReleaseContext CryptSetProvParam RegCloseKey RegCreateKeyExW RegDeleteValueA RegQueryValueExA RegSetValueExA

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsdup _wcsicmp calloc free fwrite getenv iswprint iswspace malloc memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen wcslen wcsrchr

kernel32

CloseHandle CompareFileTime CreateFileW DelayLoadFailureHook DisableThreadLibraryCalls EnumResourceNamesW FileTimeToSystemTime FindResourceW FormatMessageW FreeLibrary GetDateFormatW GetEnvironmentVariableW GetLocaleInfoW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount HeapAlloc HeapFree HeapReAlloc IsBadStringPtrW LoadLibraryW LoadResource LocalFree MulDiv MultiByteToWideChar RaiseException ResolveDelayLoadedAPI SizeofResource WriteFile lstrcmpW

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

abca42d509ad22a035aa233b0eb7beb4034d74e8598f8d9baa2d494f9f8ffc1a

crypt32

ole32

comctl32

comdlg32

user32

gdi32

advapi32

ucrtbase

kernel32

ntdll

generic