9c8ee49877cb562f3687d402f1804dd48c5b6e8e2481577b701bbe79c81ae2c8

Sharing

Copy URL Twitter E-mail

General

Target
9c8ee49877cb562f3687d402f1804dd48c5b6e8e2481577b701bbe79c81ae2c8
Size 293KB
Sample261102-kcxhpsty3q
SHA256 9c8ee49877cb562f3687d402f1804dd48c5b6e8e2481577b701bbe79c81ae2c8
MD5 a6ae6e3788c45b57ea6677897a43b598
SHA1 fd5e46bc215947ceba145026965207b1b2ae7b23
SHA512 81e26b6d22ffedb96c55e8c9888289bb92cb9997d4740d768ae591d9b731f7e441c2f350cff922e0baa31a963959f21d48542a37cfe508cd1ec574c81c651c0e
SSDEEP 6144:JniVX0yBrYaw/89c6DlKDeO3wOGiMF6fBQa:Jnihcaw/RN6O3giL
TLSH
T13B54284AB2A44876D057913AC9438B8DE7F27DC64731D38F42504BAB2FB77A24D2B712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c8ee49877cb562f3687d402f1804dd48c5b6e8e2481577b701bbe79c81ae2c8

File Explorer

9c8ee49877cb562f3687d402f1804dd48c5b6e8e2481577b701bbe79c81ae2c8

.dll 293KB

9c8ee49877cb562f3687d402f1804dd48c5b6e8e2481577b701bbe79c81ae2c8

IMPHASH 2b131fba69b602b7a5a09180611847c4
SHA256 9c8ee49877cb562f3687d402f1804dd48c5b6e8e2481577b701bbe79c81ae2c8
MD5 a6ae6e3788c45b57ea6677897a43b598
SHA1 fd5e46bc215947ceba145026965207b1b2ae7b23
SHA512 81e26b6d22ffedb96c55e8c9888289bb92cb9997d4740d768ae591d9b731f7e441c2f350cff922e0baa31a963959f21d48542a37cfe508cd1ec574c81c651c0e
SSDEEP 6144:JniVX0yBrYaw/89c6DlKDeO3wOGiMF6fBQa:Jnihcaw/RN6O3giL
TLSH
T13B54284AB2A44876D057913AC9438B8DE7F27DC64731D38F42504BAB2FB77A24D2B712
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

121192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Administrator\Desktop\dll\x64\Release\demo.pdb

kernel32

DisableThreadLibraryCalls GetCurrentProcessId GetProcAddress lstrcmpA VirtualProtect DebugBreak OutputDebugStringA GetStartupInfoA GetCurrentThread GetModuleFileNameA WriteFile FreeLibrary GlobalAlloc GlobalLock CompareStringA LoadLibraryA GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GetCurrentThreadId GlobalDeleteAtom LocalFree FormatMessageA GlobalUnlock GetLastError SetLastError SetFilePointer FlushFileBuffers InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection LocalAlloc WaitForSingleObject WritePrivateProfileStringA GlobalFlags TlsGetValue TlsAlloc GlobalReAlloc GlobalHandle TlsSetValue LocalReAlloc GlobalAddAtomA GetVersionExA lstrcmpW GlobalFindAtomA GlobalGetAtomNameA GetModuleHandleW GetCPInfo GetOEMCP GetSystemTimeAsFileTime HeapAlloc ExitProcess HeapFree FlsSetValue RtlLookupFunctionEntry RtlUnwindEx HeapReAlloc RaiseException RtlPcToFileHeader HeapQueryInformation HeapSize SetStdHandle GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc GetACP IsValidCodePage GetStringTypeA GetStringTypeW GetStdHandle HeapSetInformation HeapCreate HeapDestroy InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetHandleCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetConsoleCP GetConsoleMode WriteConsoleA GetConsoleOutputCP WriteConsoleW TerminateProcess lstrlenA GetCurrentProcess Sleep CloseHandle CreateFileA MultiByteToWideChar GetTickCount FindResourceA LoadResource LockResource SizeofResource WideCharToMultiByte GetModuleHandleA GlobalFree GetCommandLineA

user32

SetMenu MapWindowPoints GetMessagePos GetMessageTime SetWindowLongPtrA GetWindowLongPtrA DestroyWindow GetTopWindow GetDlgItem GetForegroundWindow IsWindow RemovePropA GetPropA SetPropA GetClassLongPtrA GetClassLongA GetCapture WinHelpA LoadIconA RegisterWindowMessageA GetSysColorBrush LoadCursorA ShowWindow DestroyMenu RegisterClassA DefWindowProcA CallWindowProcA GetMenu SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled EnableWindow GetWindow GetDlgCtrlID GetWindowRect GetWindowLongA GetClassNameA PtInRect GetWindowTextA SetWindowTextA GetSysColor ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA SetCursor SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA EnableMenuItem CheckMenuItem SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible SendMessageA GetKeyState PeekMessageA GetCursorPos ValidateRect UnhookWindowsHookEx GetSystemMetrics GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu PostMessageA PostQuitMessage MessageBoxA CharLowerA AdjustWindowRectEx SetForegroundWindow GetClientRect CreateWindowExA GetClassInfoExA GetClassInfoA CopyRect TabbedTextOutA

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA RegOpenKeyA RegCreateKeyExA RegSetValueExA RegDeleteKeyA RegEnumKeyA RegQueryValueA

shlwapi

PathFindExtensionA

ws2_32

WSAStartup WSACleanup closesocket recv send setsockopt getsockopt select connect ntohs gethostbyname ioctlsocket socket

oleacc

LresultFromObject CreateStdAccessibleObject

gdi32

GetStockObject SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA CreateBitmap SaveDC DeleteDC RestoreDC SetBkColor SetTextColor SetMapMode GetClipBox DeleteObject PtVisible RectVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx GetDeviceCaps

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

oleaut32

VariantClear VariantChangeType VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

9c8ee49877cb562f3687d402f1804dd48c5b6e8e2481577b701bbe79c81ae2c8

kernel32

user32

advapi32

shlwapi

ws2_32

oleacc

gdi32

winspool.drv

oleaut32

generic