7e17af3f5e7833fd956910e2500a0b97104248d4a12ddce524a88bad28ff4e87
- SHA256 7e17af3f5e7833fd956910e2500a0b97104248d4a12ddce524a88bad28ff4e87
Static task
static1
Behavioral task
behavioral1
Sample
Inquiry - RFQ HMGU66 sw5558.exe
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Inquiry - RFQ HMGU66 sw5558.exe
Resource
win10-en-20211208
windows10_x64
0 signatures
0 seconds
General
- Target 7e17af3f5e7833fd956910e2500a0b97104248d4a12ddce524a88bad28ff4e87
- Size 392KB
- Sample220121-3maqssdbg7
- SHA256 7e17af3f5e7833fd956910e2500a0b97104248d4a12ddce524a88bad28ff4e87
- MD5 b7367395c7d372e082d56a87f55049f0
- SHA1 a29d95485fdaa1edf14cc4c43fc6ff6e4c3b3283
- SHA512 ad88f95bfd55ef705976c1baa52636c7cd775215c0018be7ddede60ed5d63c889bbd8b8a6a183551c2352cb4688bf10020f194dae95d8069cb8a1205475de439
- SSDEEP 6144:OArK81ME66dPxA+MDpf+6L/wyQ5JYL7oQCFDkf8HdZ:VrtmEJdPmdrL/hQwPoVDM4r
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
7e17af3f5e7833fd956910e2500a0b97104248d4a12ddce524a88bad28ff4e87.iso 392KB
-
Inquiry - RFQ HMGU66 sw5558.exe.exe 331KB
Inquiry - RFQ HMGU66 sw5558.exe
- IMPHASH fe19725c720b3564577348fd32bb4f52
- SHA256 1d8ab5bfd618f9c1b5ca0eb61023d1128f3229e1b74764fd1eab57df5f170dc0
- MD5 91ce934b3ddcb118e3511762faec0617
- SHA1 7a06b47645944a01c96de2ee6006905222c477bd
- SHA512 b40543a3884a4d1a0c28e3c90d786bffbf0b24943d98064fa4b83403e875c2d95abd5dea45ec6210717a95ef4173e52bcc8c626e2978447e9a273d32e896e490
- SSDEEP 6144:1ArK81ME66dPxA+MDpf+6L/wyQ5JYL7oQCFDkf8HdZ:WrtmEJdPmdrL/hQwPoVDM4r
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
8148
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
GetStringTypeW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
LoadLibraryExW
FreeLibrary
SetConsoleCtrlHandler
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
HeapFree
FatalAppExitA
IsValidCodePage
VirtualProtect
EnumSystemLocalesA
WaitCommEvent
LeaveCriticalSection
EnterCriticalSection
CreateSemaphoreW
GetModuleHandleW
SetConsoleCursorPosition
SetWaitableTimer
GetTickCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCommandLineA
IsProcessorFeaturePresent
GetLastError
SetLastError
GetCurrentThread
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
CreateFileW
mpr
WNetCancelConnection2A
WNetUseConnectionA
WNetUseConnectionW
WNetConnectionDialog1A
ws2_32
WSAInstallServiceClassA
WSCGetProviderPath
WSASetEvent
ole32
OleQueryLinkFromData
HBITMAP_UserSize
StringFromGUID2
CreateItemMoniker
SNB_UserMarshal
CreateDataCache
HGLOBAL_UserMarshal
comdlg32
ReplaceTextA
ChooseFontW
ChooseColorW
ChooseFontA
GetFileTitleW
winspool.drv
ord211
AddPrintProvidorA
DeletePrinterIC
crypt32
CryptExportPublicKeyInfoEx
CertDuplicateCertificateContext
CryptGetOIDFunctionAddress
CertSetCTLContextProperty
CryptImportPublicKeyInfo
rtutils
TracePrintfA
TracePrintfExA
LogErrorA
TraceDumpExW
RouterGetErrorStringW
LogEventW
user32
CreateIconFromResource
gdi32
GetFontUnicodeRanges
GetEnhMetaFileDescriptionW
GetDeviceCaps
shlwapi
ord158
PathGetArgsW
ord29
imm32
ImmDisableIME
rpcrt4
I_RpcMapWin32Status
winmm
mmioWrite
waveOutSetVolume
Name
.text
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
204KB
Virtual Size
204KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ