information[2022[.]01[.]26_15-59][.]xll

Sharing

Copy URL Twitter E-mail

General

Target
information[2022.01.26_15-59].xll
Size 5.9MB
Sample220126-w4x44agfbj
SHA256 6e4021f7f0cc57e8063785df44aaaeaa80d47aaad6e668c81b4217c5fb080562
MD5 a13e3ac8ebffbbebd599b5459a526af1
SHA1 c2cb460d5d4d9c87648cb3b3b49b19ded6a1cd7f
SHA512 ebe47d43377f0f02cb011bef119c17b73cd1dd28e4953f99938fb255bbe91d1768fd7272f24d49ad0043f2d0e3bec6024e3cadfd06e4b82ebd649fc6456469f9
SSDEEP 24576:Fy6A8UiIdoyDMa1cCx+RrFutTPdp8I7ItsuMHWnpNjggtc3xXWVENBtd0gvYmy4:0CUrJ0wVxffW8WhKusFKvpWVC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

information[2022.01.26_15-59].xll

.xll 5.9MB

information[2022.01.26_15-59].xll

IMPHASH ab5337c34ac36f53d5ed978e9a42f919
SHA256 6e4021f7f0cc57e8063785df44aaaeaa80d47aaad6e668c81b4217c5fb080562
MD5 a13e3ac8ebffbbebd599b5459a526af1
SHA1 c2cb460d5d4d9c87648cb3b3b49b19ded6a1cd7f
SHA512 ebe47d43377f0f02cb011bef119c17b73cd1dd28e4953f99938fb255bbe91d1768fd7272f24d49ad0043f2d0e3bec6024e3cadfd06e4b82ebd649fc6456469f9
SSDEEP 24576:Fy6A8UiIdoyDMa1cCx+RrFutTPdp8I7ItsuMHWnpNjggtc3xXWVENBtd0gvYmy4:0CUrJ0wVxffW8WhKusFKvpWVC
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

6140232

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

msvcp140

?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ??Bid@locale@std@@QEAA_KXZ ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Xlength_error@std@@YAXPEBD@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

kernel32

SetUnhandledExceptionFilter GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetModuleHandleW GetProcAddress CreateProcessW CloseHandle GetEnvironmentVariableW InitializeSListHead

vcruntime140

__std_exception_destroy __std_exception_copy __C_specific_handler _CxxThrowException memset __std_type_info_destroy_list memcpy memmove

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _cexit _initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

fread fsetpos ungetc setvbuf _fseeki64 fgetpos fwrite fgetc fclose fflush fputc _get_stream_buffer_pointers

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc

xlcall32

ord1