993c4b6271f2428f183ebbfa238512cceef51f722669b22ee86ea1517147272c

Sharing

Copy URL Twitter E-mail

General

Target
993c4b6271f2428f183ebbfa238512cceef51f722669b22ee86ea1517147272c
Size 601KB
Sample220128-qkalssdber
SHA256 993c4b6271f2428f183ebbfa238512cceef51f722669b22ee86ea1517147272c
MD5 6ea53e4c32c325f683e8aac731d70f6f
SHA1 84c0730c7ef480845bbb62e7c7e544644375a5ae
SHA512 c365ea8622661b970f588f0297d251642288104a6838af921c5f1467864293791e3c719a54b34a96f094d8faa67272a8ea80d8b30553c7d45d55bde2407bf191
SSDEEP 12288:J2OXWJQZKFgQJIdevPV6N/+aYcfbEJVgmn+hPl3:vbGhPvPV6N/+Bcfb4uc+hh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

993c4b6271f2428f183ebbfa238512cceef51f722669b22ee86ea1517147272c

.dll 601KB

993c4b6271f2428f183ebbfa238512cceef51f722669b22ee86ea1517147272c

IMPHASH c270086ea8ef591ab09b6ccf85dc6072
SHA256 993c4b6271f2428f183ebbfa238512cceef51f722669b22ee86ea1517147272c
MD5 6ea53e4c32c325f683e8aac731d70f6f
SHA1 84c0730c7ef480845bbb62e7c7e544644375a5ae
SHA512 c365ea8622661b970f588f0297d251642288104a6838af921c5f1467864293791e3c719a54b34a96f094d8faa67272a8ea80d8b30553c7d45d55bde2407bf191
SSDEEP 12288:J2OXWJQZKFgQJIdevPV6N/+aYcfbEJVgmn+hPl3:vbGhPvPV6N/+Bcfb4uc+hh
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

183184

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFileAttributesW GetFileSizeEx GetFileTime GetTickCount TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FlsSetValue GetCommandLineA RtlUnwindEx Sleep RaiseException RtlPcToFileHeader HeapQueryInformation HeapReAlloc HeapSize GetSystemInfo EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc GetStdHandle GetModuleFileNameA HeapSetInformation HeapCreate HeapDestroy SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage GetTimeZoneInformation GetLocaleInfoA GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA FileTimeToLocalFileTime FileTimeToSystemTime lstrlenA CreateFileW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale FormatMessageW LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc TlsGetValue LocalFree LocalAlloc WritePrivateProfileStringW MulDiv GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection GlobalFindAtomW GetVersionExW CompareStringW GetVersionExA lstrlenW GlobalUnlock CloseHandle FreeResource GlobalFree GlobalAddAtomW GetCurrentProcessId GetLastError GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesW GetModuleFileNameW lstrcmpA GetLocaleInfoW WideCharToMultiByte CompareStringA MultiByteToWideChar FindResourceW LoadResource LockResource SizeofResource GlobalLock lstrcmpW GlobalAlloc GetModuleHandleW VirtualProtect VirtualAlloc SetLastError IsBadReadPtr GetProcessHeap VirtualFree HeapFree HeapAlloc VirtualQuery GetNativeSystemInfo LoadLibraryA GetProcAddress LoadLibraryW FreeLibrary GetFileType ExitProcess

user32

DestroyMenu RegisterClipboardFormatW PostThreadMessageW SetCapture EndPaint BeginPaint GetWindowDC GrayStringW DrawTextExW DrawTextW TabbedTextOutW GetSysColorBrush ClientToScreen ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageA SendDlgItemMessageW WinHelpW IsChild GetCapture GetClassNameW GetClassLongPtrW SetPropW GetPropW RemovePropW GetForegroundWindow GetWindowLongPtrW SetWindowLongPtrW GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx EqualRect GetDlgCtrlID DefWindowProcW CallWindowProcW GetMenu SetWindowLongW OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics UnhookWindowsHookEx GetWindowTextW GetClientRect CopyRect GetDesktopWindow EnableWindow SendMessageW SetWindowPos LoadIconW SetActiveWindow CreateDialogIndirectParamW DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow IsWindowVisible MessageBeep GetNextDlgGroupItem InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableW CharNextW CharUpperW GetTopWindow UpdateWindow IsWindow GetCursorPos ReleaseDC GetWindowLongW BringWindowToTop InvalidateRect GetDC PtInRect LoadCursorW GetKeyState GetWindowRect ScreenToClient SetCursor ReleaseCapture SetFocus GetFocus CheckMenuItem EnableMenuItem GetMenuState ModifyMenuW GetParent LoadBitmapW GetMenuCheckMarkDimensions SetMenuItemBitmaps PostQuitMessage PostMessageW MessageBoxW IsWindowEnabled GetLastActivePopup GetWindowThreadProcessId MapDialogRect SetWindowContextHelpId GetWindow ValidateRect PeekMessageW

gdi32

ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor GetRgnBox GetMapMode ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape LineTo TextOutW RectVisible PtVisible GetWindowExtEx GetViewportExtEx SetMapMode RestoreDC SaveDC GetDeviceCaps DeleteObject GetObjectW SetBkColor SetTextColor GetClipBox CreateRectRgnIndirect CreateBitmap MoveToEx ExtTextOutW

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegCloseKey

shell32

SHGetFileInfoW

shlwapi

PathFindFileNameW PathStripToRootW PathIsUNCW PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes OleIsCurrentClipboard CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleFlushClipboard CoRegisterMessageFilter CoGetClassObject

oleaut32

SysFreeString SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy