c66715281d953569826fecf689be30ec2a533179efc746fc7777af552290c044

Sharing

Copy URL Twitter E-mail

General

Target
c66715281d953569826fecf689be30ec2a533179efc746fc7777af552290c044
Size 508KB
Sample261030-at174sf14w
SHA256 c66715281d953569826fecf689be30ec2a533179efc746fc7777af552290c044
MD5 cfec96cd9ae3a80a40f1b7f44119bd5e
SHA1 7b09ea0f72e6be722110d41b22ad62b85c5dcf4e
SHA512 126b62d5e0559b81f5f7a8fb72c88c2f2a695ca527b09b85ba173180e08ea41befbb6401c5cdf9440edf5eeca512fbeef4f004d8bb0a7a62c92050e3a22f78e4
SSDEEP 12288:9ZVTIKGIFIXRV/k0z9lL2vU3GxsvCNmg8YY:9rTIKTFIX/k0z9lL2vU3GxsvCNmg
TLSH
T1CCB4F99572E79616E65B073028FE9226FA353D326773CACB6214251C1FF27E06C78722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c66715281d953569826fecf689be30ec2a533179efc746fc7777af552290c044

File Explorer

c66715281d953569826fecf689be30ec2a533179efc746fc7777af552290c044

.dll 508KB

c66715281d953569826fecf689be30ec2a533179efc746fc7777af552290c044

IMPHASH 3d9c35edb892e9deb53fd818c5d4a77c
SHA256 c66715281d953569826fecf689be30ec2a533179efc746fc7777af552290c044
MD5 cfec96cd9ae3a80a40f1b7f44119bd5e
SHA1 7b09ea0f72e6be722110d41b22ad62b85c5dcf4e
SHA512 126b62d5e0559b81f5f7a8fb72c88c2f2a695ca527b09b85ba173180e08ea41befbb6401c5cdf9440edf5eeca512fbeef4f004d8bb0a7a62c92050e3a22f78e4
SSDEEP 12288:9ZVTIKGIFIXRV/k0z9lL2vU3GxsvCNmg8YY:9rTIKTFIX/k0z9lL2vU3GxsvCNmg
TLSH
T1CCB4F99572E79616E65B073028FE9226FA353D326773CACB6214251C1FF27E06C78722
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

180080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

oleaut32

LoadRegTypeLib LoadTypeLib SafeArrayAccessData SafeArrayCreate SafeArrayDestroy SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound SafeArrayLock SafeArrayPtrOfIndex SafeArrayRedim SafeArrayUnaccessData SafeArrayUnlock SysAllocString SysAllocStringLen SysFreeString SysStringLen SystemTimeToVariantTime VarAbs VarAdd VarAnd VarCat VarCmp VarDateFromStr VarDateFromUdateEx VarDiv VarEqv VarFix VarFormatCurrency VarFormatDateTime VarFormatNumber VarFormatPercent VarIdiv VarImp VarInt VarMod VarMonthName VarMul VarNeg VarNot VarOr VarPow VarR8Round VarSub VarWeekdayName VarXor VariantChangeType VariantClear VariantCopy VariantCopyInd VariantTimeToSystemTime

ole32

CLSIDFromProgID CoGetClassObject CoTaskMemFree CreateBindCtx MkParseDisplayName

user32

LoadStringW MessageBoxW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _assert _dclass _strdup _wcsdup _wcsicmp atan calloc cos exp free fwrite getenv isalnum iswalnum iswalpha iswspace log malloc memcpy memmove memset pow realloc sin sqrt strchr strcmp strcpy strcspn strlen tan towlower towupper wcscmp wcslen wcspbrk

kernel32

DisableThreadLibraryCalls EnumResourceNamesW FindResourceW FindStringOrdinal GetCPInfo GetEnvironmentVariableW GetLocalTime GetLocaleInfoW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW IsDBCSLeadByteEx IsValidLocale LoadLibraryW LoadResource MultiByteToWideChar SizeofResource WideCharToMultiByte

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

c66715281d953569826fecf689be30ec2a533179efc746fc7777af552290c044

oleaut32

ole32

user32

ucrtbase

kernel32

ntdll

generic