d4bb32a5def3d4ad8f3b00591f66bb202a1d21fc0db2b95c186cd09c505eb15a

Sharing

Copy URL Twitter E-mail

General

Target
d4bb32a5def3d4ad8f3b00591f66bb202a1d21fc0db2b95c186cd09c505eb15a
Size 152KB
Sample261102-w9n4daex3m
SHA256 d4bb32a5def3d4ad8f3b00591f66bb202a1d21fc0db2b95c186cd09c505eb15a
MD5 15cbe53e8de7d6452f6f906e58e32565
SHA1 8733750520d57fd73f45d69c6a2eb6daf60c7d8d
SHA512 df69bd7bf582225f0816b90ada5608e6cf84b46952c8ecc43feb80254cb10ba732c2217077fcddfe98bd2d06a7ee44612070c247918b1acae87b468fc029ab4f
SSDEEP 1536:/tvOYxo3PI1yDN1wol+dFmhVoFZaxFWkxDelGRvaFkGNOcD3+Xf:/tGF3nD3woToFs3ZxSlpzzuXf
TLSH
T19BE3E8741397991AE1260BF82CAC9F7976343A3043F78AC7FE02959929B36F1AD70711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4bb32a5def3d4ad8f3b00591f66bb202a1d21fc0db2b95c186cd09c505eb15a

File Explorer

d4bb32a5def3d4ad8f3b00591f66bb202a1d21fc0db2b95c186cd09c505eb15a

.dll 152KB

d4bb32a5def3d4ad8f3b00591f66bb202a1d21fc0db2b95c186cd09c505eb15a

IMPHASH 556f7d2914add35f56215d033f7aeed4
SHA256 d4bb32a5def3d4ad8f3b00591f66bb202a1d21fc0db2b95c186cd09c505eb15a
MD5 15cbe53e8de7d6452f6f906e58e32565
SHA1 8733750520d57fd73f45d69c6a2eb6daf60c7d8d
SHA512 df69bd7bf582225f0816b90ada5608e6cf84b46952c8ecc43feb80254cb10ba732c2217077fcddfe98bd2d06a7ee44612070c247918b1acae87b468fc029ab4f
SSDEEP 1536:/tvOYxo3PI1yDN1wol+dFmhVoFZaxFWkxDelGRvaFkGNOcD3+Xf:/tGF3nD3woToFs3ZxSlpzzuXf
TLSH
T19BE3E8741397991AE1260BF82CAC9F7976343A3043F78AC7FE02959929B36F1AD70711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

winmm

CloseDriver OpenDriver SendDriverMessage mciGetErrorStringA mciGetErrorStringW mciSendCommandA mciSendCommandW mciSendStringA mciSendStringW mmioStringToFOURCCA

comctl32

InitCommonControlsEx

user32

AdjustWindowRect BeginPaint CreateWindowExW DefMDIChildProcW DefWindowProcW DestroyWindow DialogBoxParamW EnableWindow EndDialog EndPaint GetClientRect GetDlgItem GetWindow GetWindowLongW InvalidateRect IsWindowUnicode KillTimer LoadCursorW LoadStringW MessageBoxW RegisterClassW SendDlgItemMessageW SendMessageW SetCursor SetFocus SetTimer SetWindowLongW SetWindowPos SetWindowTextA SetWindowTextW ShowWindow wsprintfA wsprintfW

gdi32

CreateCompatibleDC CreateDIBSection CreateHalftonePalette DeleteDC DeleteObject RealizePalette SelectObject SelectPalette StretchBlt

advapi32

RegCloseKey RegDeleteValueA RegEnumValueA RegOpenKeyExA RegSetValueExA

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _strdup _strnicmp _wcsdup calloc free fwrite getenv isprint malloc memcmp memcpy memmove memset strchr strcmp strcpy strcspn strlen tolower wcschr wcslen

kernel32

DisableThreadLibraryCalls FreeLibrary GetModuleHandleW GetPrivateProfileSectionA GetPrivateProfileStringW GetProcAddress GetTickCount GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryA MulDiv MultiByteToWideChar RaiseException WideCharToMultiByte lstrcmpW

ntdll

RtlCreateUnicodeStringFromAsciiz RtlFreeUnicodeString _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

d4bb32a5def3d4ad8f3b00591f66bb202a1d21fc0db2b95c186cd09c505eb15a

winmm

comctl32

user32

gdi32

advapi32

ucrtbase

kernel32

ntdll

generic