02840354ad0d3c57b61dd8297565b22382e5439b2c3fba35665eb5d22875aeec

General

Target
02840354ad0d3c57b61dd8297565b22382e5439b2c3fba35665eb5d22875aeec
Size 372KB
Sample261102-mkcjlsvt6n
SHA256 02840354ad0d3c57b61dd8297565b22382e5439b2c3fba35665eb5d22875aeec
MD5 4f9f2cd4084bed1bb3a39876a6ade6c2
SHA1 489f997595a71a7961bddbf2ff8c7ba4bcc8b3f6
SHA512 7a1547821e43fe1a872bd92e0ae9633417b545f7dc631d9732ec0b85ae9759c8dbb9a38e89ac1e664087a211c28effbf13129d83985b32bc1aa7706cdd508211
SSDEEP 6144:s/DFy3GTJKQUScM3G0MSySx7o1Jhr/KOHseZexT/lohA:+DF/XncMBMvSx7UrKOHsec/lo
TLSH
T165849E02F2A618A9D467C238C213A621F57674590730EEFF039847753E63BE4A73AF56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02840354ad0d3c57b61dd8297565b22382e5439b2c3fba35665eb5d22875aeec

File Explorer

02840354ad0d3c57b61dd8297565b22382e5439b2c3fba35665eb5d22875aeec

.dll 372KB

02840354ad0d3c57b61dd8297565b22382e5439b2c3fba35665eb5d22875aeec

IMPHASH 28ede1d1ae968d26747a77f5b75b1f64
SHA256 02840354ad0d3c57b61dd8297565b22382e5439b2c3fba35665eb5d22875aeec
MD5 4f9f2cd4084bed1bb3a39876a6ade6c2
SHA1 489f997595a71a7961bddbf2ff8c7ba4bcc8b3f6
SHA512 7a1547821e43fe1a872bd92e0ae9633417b545f7dc631d9732ec0b85ae9759c8dbb9a38e89ac1e664087a211c28effbf13129d83985b32bc1aa7706cdd508211
SSDEEP 6144:s/DFy3GTJKQUScM3G0MSySx7o1Jhr/KOHseZexT/lohA:+DF/XncMBMvSx7UrKOHsec/lo
TLSH
T165849E02F2A618A9D467C238C213A621F57674590730EEFF039847753E63BE4A73AF56
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

188516

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zlib

crc32 deflate deflateEnd deflateInit2_ deflateReset inflate inflateEnd inflateInit2_ inflateReset inflateReset2

kernel32

CloseHandle CreateFileW DeleteCriticalSection DeleteFileW EnterCriticalSection ExitProcess FindClose FindFirstFileExA FindNextFileA FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileType GetLastError GetModuleFileNameA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter RaiseException ReadConsoleW ReadFile RtlCaptureContext RtlLookupFunctionEntry RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter WideCharToMultiByte WriteConsoleW WriteFile

png_access_version_number png_benign_error png_build_grayscale_palette png_calloc png_chunk_benign_error png_chunk_error png_chunk_warning png_convert_from_struct_tm png_convert_from_time_t png_convert_to_rfc1123 png_convert_to_rfc1123_buffer png_create_info_struct png_create_read_struct png_create_read_struct_2 png_create_write_struct png_create_write_struct_2 png_data_freer png_destroy_info_struct png_destroy_read_struct png_destroy_write_struct png_error png_free png_free_data png_free_default png_get_IHDR png_get_PLTE png_get_bKGD png_get_bit_depth png_get_cHRM png_get_cHRM_XYZ png_get_cHRM_XYZ_fixed png_get_cHRM_fixed png_get_cICP png_get_cLLI png_get_cLLI_fixed png_get_channels png_get_chunk_cache_max png_get_chunk_malloc_max png_get_color_type png_get_compression_buffer_size png_get_compression_type png_get_copyright png_get_current_pass_number png_get_current_row_number png_get_eXIf png_get_eXIf_1 png_get_error_ptr png_get_filter_type png_get_gAMA png_get_gAMA_fixed png_get_hIST png_get_header_ver png_get_header_version png_get_iCCP png_get_image_height png_get_image_width png_get_int_32 png_get_interlace_type png_get_io_chunk_type png_get_io_ptr png_get_io_state png_get_libpng_ver png_get_mDCV png_get_mDCV_fixed png_get_mem_ptr png_get_oFFs png_get_pCAL png_get_pHYs png_get_pHYs_dpi png_get_palette_max png_get_pixel_aspect_ratio png_get_pixel_aspect_ratio_fixed png_get_pixels_per_inch png_get_pixels_per_meter png_get_progressive_ptr png_get_rgb_to_gray_status png_get_rowbytes png_get_rows png_get_sBIT png_get_sCAL png_get_sCAL_fixed png_get_sCAL_s png_get_sPLT png_get_sRGB png_get_signature png_get_tIME png_get_tRNS png_get_text png_get_uint_16 png_get_uint_31 png_get_uint_32 png_get_unknown_chunks png_get_user_chunk_ptr png_get_user_height_max png_get_user_transform_ptr png_get_user_width_max png_get_valid png_get_x_offset_inches png_get_x_offset_inches_fixed png_get_x_offset_microns png_get_x_offset_pixels png_get_x_pixels_per_inch png_get_x_pixels_per_meter png_get_y_offset_inches png_get_y_offset_inches_fixed png_get_y_offset_microns png_get_y_offset_pixels png_get_y_pixels_per_inch png_get_y_pixels_per_meter png_handle_as_unknown png_image_begin_read_from_file png_image_begin_read_from_memory png_image_begin_read_from_stdio png_image_finish_read png_image_free png_image_write_to_file png_image_write_to_memory png_image_write_to_stdio png_info_init_3 png_init_io png_longjmp png_malloc png_malloc_default png_malloc_warn png_permit_mng_features png_process_data png_process_data_pause png_process_data_skip png_progressive_combine_row png_read_end png_read_image png_read_info png_read_png png_read_row png_read_rows png_read_update_info png_reset_zstream png_save_int_32 png_save_uint_16 png_save_uint_32 png_set_IHDR png_set_PLTE png_set_add_alpha png_set_alpha_mode png_set_alpha_mode_fixed png_set_bKGD png_set_background png_set_background_fixed png_set_benign_errors png_set_bgr png_set_cHRM png_set_cHRM_XYZ png_set_cHRM_XYZ_fixed png_set_cHRM_fixed png_set_cICP png_set_cLLI png_set_cLLI_fixed png_set_check_for_invalid_index png_set_chunk_cache_max png_set_chunk_malloc_max png_set_compression_buffer_size png_set_compression_level png_set_compression_mem_level png_set_compression_method png_set_compression_strategy png_set_compression_window_bits png_set_crc_action png_set_eXIf png_set_eXIf_1 png_set_error_fn png_set_expand png_set_expand_16 png_set_expand_gray_1_2_4_to_8 png_set_filler png_set_filter png_set_filter_heuristics png_set_filter_heuristics_fixed png_set_flush png_set_gAMA png_set_gAMA_fixed png_set_gamma png_set_gamma_fixed png_set_gray_to_rgb png_set_hIST png_set_iCCP png_set_interlace_handling png_set_invalid png_set_invert_alpha png_set_invert_mono png_set_keep_unknown_chunks png_set_longjmp_fn png_set_mDCV png_set_mDCV_fixed png_set_mem_fn png_set_oFFs png_set_option png_set_pCAL png_set_pHYs png_set_packing png_set_packswap png_set_palette_to_rgb png_set_progressive_read_fn png_set_quantize png_set_read_fn png_set_read_status_fn png_set_read_user_chunk_fn png_set_read_user_transform_fn png_set_rgb_to_gray png_set_rgb_to_gray_fixed png_set_rows png_set_sBIT png_set_sCAL png_set_sCAL_fixed png_set_sCAL_s png_set_sPLT png_set_sRGB png_set_sRGB_gAMA_and_cHRM png_set_scale_16 png_set_shift png_set_sig_bytes png_set_strip_16 png_set_strip_alpha png_set_swap png_set_swap_alpha png_set_tIME png_set_tRNS png_set_tRNS_to_alpha png_set_text png_set_text_compression_level png_set_text_compression_mem_level png_set_text_compression_method png_set_text_compression_strategy png_set_text_compression_window_bits png_set_unknown_chunk_location png_set_unknown_chunks png_set_user_limits png_set_user_transform_info png_set_write_fn png_set_write_status_fn png_set_write_user_transform_fn png_sig_cmp png_start_read_image png_warning png_write_chunk png_write_chunk_data png_write_chunk_end png_write_chunk_start png_write_end png_write_flush png_write_image png_write_info png_write_info_before_PLTE png_write_png png_write_row png_write_rows png_write_sig

Name

.text

Size

276KB

Virtual Size

275KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

81KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

02840354ad0d3c57b61dd8297565b22382e5439b2c3fba35665eb5d22875aeec

zlib

kernel32

generic