465d922cc45c6a9e70cf03ea641d128905484476da81c22dfc8b78bd3d39d713

Sharing

Copy URL Twitter E-mail

General

Target
465d922cc45c6a9e70cf03ea641d128905484476da81c22dfc8b78bd3d39d713
Size 152KB
Sample261027-c5lynsce46
SHA256 465d922cc45c6a9e70cf03ea641d128905484476da81c22dfc8b78bd3d39d713
MD5 21dd0908345584df91d0843b4a2176f7
SHA1 c8a8f44647f6a004c60d52f3709e36db42feb3db
SHA512 d2bf7b085986cb1dd69b644e78c9afc04fe57b4b69234d161bb6638748b239386883685bcfa3b622d033476e6bdb1819780d329688b8c391b9ab36c000887396
SSDEEP 1536:CtvOYxo3PI1yDN1wol+dFmhooFZaxFWkxDelGRvaFkGNOcD3+Xf:CtGF3nD3wo+oFs3ZxSlpzzuXf
TLSH
T1BBE3E8741397991AE1260BF82CAC9F7976343A3043F78AC7FE02959929B36F1AD70711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
465d922cc45c6a9e70cf03ea641d128905484476da81c22dfc8b78bd3d39d713

File Explorer

465d922cc45c6a9e70cf03ea641d128905484476da81c22dfc8b78bd3d39d713

.dll 152KB

465d922cc45c6a9e70cf03ea641d128905484476da81c22dfc8b78bd3d39d713

IMPHASH 556f7d2914add35f56215d033f7aeed4
SHA256 465d922cc45c6a9e70cf03ea641d128905484476da81c22dfc8b78bd3d39d713
MD5 21dd0908345584df91d0843b4a2176f7
SHA1 c8a8f44647f6a004c60d52f3709e36db42feb3db
SHA512 d2bf7b085986cb1dd69b644e78c9afc04fe57b4b69234d161bb6638748b239386883685bcfa3b622d033476e6bdb1819780d329688b8c391b9ab36c000887396
SSDEEP 1536:CtvOYxo3PI1yDN1wol+dFmhooFZaxFWkxDelGRvaFkGNOcD3+Xf:CtGF3nD3wo+oFs3ZxSlpzzuXf
TLSH
T1BBE3E8741397991AE1260BF82CAC9F7976343A3043F78AC7FE02959929B36F1AD70711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

winmm

CloseDriver OpenDriver SendDriverMessage mciGetErrorStringA mciGetErrorStringW mciSendCommandA mciSendCommandW mciSendStringA mciSendStringW mmioStringToFOURCCA

comctl32

InitCommonControlsEx

user32

AdjustWindowRect BeginPaint CreateWindowExW DefMDIChildProcW DefWindowProcW DestroyWindow DialogBoxParamW EnableWindow EndDialog EndPaint GetClientRect GetDlgItem GetWindow GetWindowLongW InvalidateRect IsWindowUnicode KillTimer LoadCursorW LoadStringW MessageBoxW RegisterClassW SendDlgItemMessageW SendMessageW SetCursor SetFocus SetTimer SetWindowLongW SetWindowPos SetWindowTextA SetWindowTextW ShowWindow wsprintfA wsprintfW

gdi32

CreateCompatibleDC CreateDIBSection CreateHalftonePalette DeleteDC DeleteObject RealizePalette SelectObject SelectPalette StretchBlt

advapi32

RegCloseKey RegDeleteValueA RegEnumValueA RegOpenKeyExA RegSetValueExA

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _strdup _strnicmp _wcsdup calloc free fwrite getenv isprint malloc memcmp memcpy memmove memset strchr strcmp strcpy strcspn strlen tolower wcschr wcslen

kernel32

DisableThreadLibraryCalls FreeLibrary GetModuleHandleW GetPrivateProfileSectionA GetPrivateProfileStringW GetProcAddress GetTickCount GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryA MulDiv MultiByteToWideChar RaiseException WideCharToMultiByte lstrcmpW

ntdll

RtlCreateUnicodeStringFromAsciiz RtlFreeUnicodeString _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

465d922cc45c6a9e70cf03ea641d128905484476da81c22dfc8b78bd3d39d713

winmm

comctl32

user32

gdi32

advapi32

ucrtbase

kernel32

ntdll

generic