9d9f9ba48b5691121e8aa1b7f6da4ccb7dc6448280dec37ef4851857503c343c

Sharing

Copy URL Twitter E-mail

General

Target
9d9f9ba48b5691121e8aa1b7f6da4ccb7dc6448280dec37ef4851857503c343c
Size 171KB
Sample261110-m9qsjasvbx
SHA256 9d9f9ba48b5691121e8aa1b7f6da4ccb7dc6448280dec37ef4851857503c343c
MD5 2ae741d5e82548f57441f5630b7a2ce9
SHA1 c63bf24a1008bb4afbb22845bf033d4c23b986e8
SHA512 beac1a6732917303e1015d2515664da761fcb815e5f7d3205381cc5c695fdf9180749195545cbff905a3d8dcd6dea75151a1689e42d0800da2b0615a89839e2e
SSDEEP 1536:iqh2A3OTxzL8u88ugoK4B+Rwd/NHhxHx5vcMBCv3SX8:72A3OTxzFoKMa8/NHhxHx50MBCv3W8
TLSH
T1C004A7121BEE98F4D17A8FF409F79FB20E3978030FF5825D0B64D91C2DB5A50AAA4356
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d9f9ba48b5691121e8aa1b7f6da4ccb7dc6448280dec37ef4851857503c343c

File Explorer

9d9f9ba48b5691121e8aa1b7f6da4ccb7dc6448280dec37ef4851857503c343c

.dll 171KB

9d9f9ba48b5691121e8aa1b7f6da4ccb7dc6448280dec37ef4851857503c343c

IMPHASH 134938e03748be43435e028a466c6961
SHA256 9d9f9ba48b5691121e8aa1b7f6da4ccb7dc6448280dec37ef4851857503c343c
MD5 2ae741d5e82548f57441f5630b7a2ce9
SHA1 c63bf24a1008bb4afbb22845bf033d4c23b986e8
SHA512 beac1a6732917303e1015d2515664da761fcb815e5f7d3205381cc5c695fdf9180749195545cbff905a3d8dcd6dea75151a1689e42d0800da2b0615a89839e2e
SSDEEP 1536:iqh2A3OTxzL8u88ugoK4B+Rwd/NHhxHx5vcMBCv3SX8:72A3OTxzFoKMa8/NHhxHx50MBCv3W8
TLSH
T1C004A7121BEE98F4D17A8FF409F79FB20E3978030FF5825D0B64D91C2DB5A50AAA4356
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13456

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

CredEnumerateW CredFree CredWriteW

comctl32

InitCommonControls ord410 ord412 ord413

kernel32

DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection EnumResourceNamesW FindResourceW GetEnvironmentVariableW GetModuleFileNameW GetModuleHandleW GetProcAddress GetTickCount HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LeaveCriticalSection LoadLibraryW LoadResource MultiByteToWideChar RaiseException SizeofResource lstrcmpW

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsicmp free fwrite getenv memcmp memcpy memmove strchr strcmp strcspn strlen wcschr wcsrchr

user32

CheckDlgButton CreateWindowExW DestroyWindow DialogBoxParamW EndDialog GetDlgItem GetDlgItemTextW GetFocus GetKeyState GetParent GetWindowLongPtrW GetWindowRect GetWindowTextLengthW GetWindowTextW IsDlgButtonChecked LoadStringW LockSetForegroundWindow SendMessageW SetDlgItemTextW SetFocus SetTimer SetWindowLongPtrW SetWindowPos SetWindowTextW ShowWindow

Name

.text

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

272B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

900B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

804B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

368B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

784B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

104KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

9d9f9ba48b5691121e8aa1b7f6da4ccb7dc6448280dec37ef4851857503c343c

advapi32

comctl32

kernel32

ntdll

ucrtbase

user32

generic