6a35c1a236627faa4afee5e4a7750b14c82eeafa6e2fd80cce950d6138797d3b

Sharing

Copy URL Twitter E-mail

General

Target
6a35c1a236627faa4afee5e4a7750b14c82eeafa6e2fd80cce950d6138797d3b
Size 432KB
Sample261027-c5lmxaxy4j
SHA256 6a35c1a236627faa4afee5e4a7750b14c82eeafa6e2fd80cce950d6138797d3b
MD5 ce62d1e2288fec7a059d58decb0db665
SHA1 a1ac92f3067f06fb5249fa30997683f5b1916496
SHA512 5b3daa679ff4bdc835274ac682f8c8876bdfbc86adf9788e0f77783ac810e3d1bb885f5642cf32192fa2d0618c40482f8d4e57aa486b6566f07dbdecac380597
SSDEEP 3072:juySFiH3bL6udz2UweNz5sP/hU+XqdcsAghV0ezVRxaz0bNIESdtBwj6ftHB9KX3:xNTlGEgaoWbFbGNCp
TLSH
T1EE940750B6D5A727E07787352CF692217E3279007B7BCACBAF00593C08A57D29EB4B52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a35c1a236627faa4afee5e4a7750b14c82eeafa6e2fd80cce950d6138797d3b

File Explorer

6a35c1a236627faa4afee5e4a7750b14c82eeafa6e2fd80cce950d6138797d3b

.dll 432KB

6a35c1a236627faa4afee5e4a7750b14c82eeafa6e2fd80cce950d6138797d3b

IMPHASH aa20c11863b960fd7976b8208a9dc2ec
SHA256 6a35c1a236627faa4afee5e4a7750b14c82eeafa6e2fd80cce950d6138797d3b
MD5 ce62d1e2288fec7a059d58decb0db665
SHA1 a1ac92f3067f06fb5249fa30997683f5b1916496
SHA512 5b3daa679ff4bdc835274ac682f8c8876bdfbc86adf9788e0f77783ac810e3d1bb885f5642cf32192fa2d0618c40482f8d4e57aa486b6566f07dbdecac380597
SSDEEP 3072:juySFiH3bL6udz2UweNz5sP/hU+XqdcsAghV0ezVRxaz0bNIESdtBwj6ftHB9KX3:xNTlGEgaoWbFbGNCp
TLSH
T1EE940750B6D5A727E07787352CF692217E3279007B7BCACBAF00593C08A57D29EB4B52
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

51376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

oleaut32

SafeArrayAccessData SafeArrayCreate SafeArrayDestroy SafeArrayGetUBound SafeArrayPutElement SafeArrayUnaccessData SysAllocString SysAllocStringLen SysFreeString SysStringLen SystemTimeToVariantTime VarBoolFromCy VarBoolFromDate VarBoolFromDec VarBoolFromI1 VarBoolFromI2 VarBoolFromI4 VarBoolFromI8 VarBoolFromR4 VarBoolFromR8 VarBoolFromStr VarBoolFromUI1 VarBoolFromUI2 VarBoolFromUI4 VarBoolFromUI8 VarBstrFromBool VarBstrFromCy VarBstrFromDate VarBstrFromDec VarBstrFromI1 VarBstrFromI2 VarBstrFromI4 VarBstrFromI8 VarBstrFromR4 VarBstrFromR8 VarBstrFromUI1 VarBstrFromUI2 VarBstrFromUI4 VarBstrFromUI8 VarCyFromBool VarCyFromDate VarCyFromDec VarCyFromI1 VarCyFromI2 VarCyFromI4 VarCyFromI8 VarCyFromR4 VarCyFromR8 VarCyFromStr VarCyFromUI1 VarCyFromUI2 VarCyFromUI4 VarCyFromUI8 VarDateFromBool VarDateFromCy VarDateFromDec VarDateFromI1 VarDateFromI2 VarDateFromI4 VarDateFromI8 VarDateFromR4 VarDateFromR8 VarDateFromStr VarDateFromUI1 VarDateFromUI2 VarDateFromUI4 VarDateFromUI8 VarDecFromI8 VarI1FromBool VarI1FromCy VarI1FromDate VarI1FromDec VarI1FromI2 VarI1FromI4 VarI1FromI8 VarI1FromR4 VarI1FromR8 VarI1FromStr VarI1FromUI1 VarI1FromUI2 VarI1FromUI4 VarI1FromUI8 VarI2FromBool VarI2FromCy VarI2FromDate VarI2FromDec VarI2FromI1 VarI2FromI4 VarI2FromI8 VarI2FromR4 VarI2FromR8 VarI2FromStr VarI2FromUI1 VarI2FromUI2 VarI2FromUI4 VarI2FromUI8 VarI4FromBool VarI4FromCy VarI4FromDate VarI4FromDec VarI4FromI1 VarI4FromI2 VarI4FromI8 VarI4FromR4 VarI4FromR8 VarI4FromStr VarI4FromUI1 VarI4FromUI2 VarI4FromUI4 VarI4FromUI8 VarI8FromStr VarR4FromBool VarR4FromCy VarR4FromDate VarR4FromDec VarR4FromI1 VarR4FromI2 VarR4FromI4 VarR4FromI8 VarR4FromR8 VarR4FromStr VarR4FromUI1 VarR4FromUI2 VarR4FromUI4 VarR4FromUI8 VarR8FromBool VarR8FromCy VarR8FromDate VarR8FromDec VarR8FromI1 VarR8FromI2 VarR8FromI4 VarR8FromI8 VarR8FromR4 VarR8FromStr VarR8FromUI1 VarR8FromUI2 VarR8FromUI4 VarR8FromUI8 VarUI1FromBool VarUI1FromCy VarUI1FromDate VarUI1FromDec VarUI1FromI1 VarUI1FromI2 VarUI1FromI4 VarUI1FromI8 VarUI1FromR4 VarUI1FromR8 VarUI1FromStr VarUI1FromUI2 VarUI1FromUI4 VarUI1FromUI8 VarUI2FromBool VarUI2FromCy VarUI2FromDate VarUI2FromDec VarUI2FromI1 VarUI2FromI2 VarUI2FromI4 VarUI2FromI8 VarUI2FromR4 VarUI2FromR8 VarUI2FromStr VarUI2FromUI1 VarUI2FromUI4 VarUI2FromUI8 VarUI4FromBool VarUI4FromCy VarUI4FromDate VarUI4FromDec VarUI4FromI1 VarUI4FromI2 VarUI4FromI4 VarUI4FromI8 VarUI4FromR4 VarUI4FromR8 VarUI4FromStr VarUI4FromUI1 VarUI4FromUI2 VarUI4FromUI8 VarUI8FromBool VarUI8FromCy VarUI8FromDate VarUI8FromDec VarUI8FromI1 VarUI8FromI2 VarUI8FromI8 VarUI8FromR4 VarUI8FromR8 VarUI8FromStr VarUI8FromUI1 VarUI8FromUI2 VarUI8FromUI4 VariantChangeType VariantClear VariantCopy VariantInit VariantTimeToSystemTime

ole32

CLSIDFromProgID CLSIDFromString CoCreateInstance CoTaskMemAlloc CoTaskMemFree ProgIDFromCLSID StringFromGUID2

comctl32

PropertySheetW

user32

CharLowerW EnableWindow GetDlgItem GetParent GetWindowRect LoadStringW MessageBoxA MessageBoxW SendMessageA SendMessageW SetWindowLongW wsprintfW

advapi32

RegCloseKey RegEnumKeyExW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegOpenKeyW RegQueryValueW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf __stdio_common_vswscanf _strdup _wcsdup _wcsicmp bsearch calloc free fwrite getenv iswspace malloc memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen wcscat wcschr wcscpy wcslen wcsstr

kernel32

DisableThreadLibraryCalls EnumResourceNamesW FindResourceW GetEnvironmentVariableW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc IsBadStringPtrW LoadLibraryW LoadResource MultiByteToWideChar SizeofResource WideCharToMultiByte

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

6a35c1a236627faa4afee5e4a7750b14c82eeafa6e2fd80cce950d6138797d3b

oleaut32

ole32

comctl32

user32

advapi32

ucrtbase

kernel32

ntdll

generic