ecf33d6d92b17040d558a7ad711be7e0b47fa2a09c99d9709b4a5324dca46e58

Sharing

Copy URL Twitter E-mail

General

Target
ecf33d6d92b17040d558a7ad711be7e0b47fa2a09c99d9709b4a5324dca46e58
Size 16.0MB
Sample220128-v793dshdgn
SHA256 ecf33d6d92b17040d558a7ad711be7e0b47fa2a09c99d9709b4a5324dca46e58
MD5 2abc0df260fa5f5f7950917d7e9c933e
SHA1 b5b61833088b6da6d0e86be17268d82272330981
SHA512 85afa11c7382a008b90a245fe2eb226721d82023a3efa8c0c2efafda6e5be7080d386778d49d17a3515666ec723ab03b10cac9c020a0ecd87f99d5108a674456
SSDEEP 393216:5hCIPDGkIF9TaTXRtZwCHc/C/kaDq/z9n8H0gnQAcxM:RIiTBwCHcXoUB8H0T
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ecf33d6d92b17040d558a7ad711be7e0b47fa2a09c99d9709b4a5324dca46e58

.exe 16.0MB

ecf33d6d92b17040d558a7ad711be7e0b47fa2a09c99d9709b4a5324dca46e58

IMPHASH c690b039bde324b6f88e949261e3a42a
SHA256 ecf33d6d92b17040d558a7ad711be7e0b47fa2a09c99d9709b4a5324dca46e58
MD5 2abc0df260fa5f5f7950917d7e9c933e
SHA1 b5b61833088b6da6d0e86be17268d82272330981
SHA512 85afa11c7382a008b90a245fe2eb226721d82023a3efa8c0c2efafda6e5be7080d386778d49d17a3515666ec723ab03b10cac9c020a0ecd87f99d5108a674456
SSDEEP 393216:5hCIPDGkIF9TaTXRtZwCHc/C/kaDq/z9n8H0gnQAcxM:RIiTBwCHcXoUB8H0T
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

1332144

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

kernel32

SetFileAttributesW SetFileTime QueryDosDeviceW GetACP LocalFree CloseHandle SizeofResource VirtualProtect UpdateResourceW QueryPerformanceFrequency IsDebuggerPresent FindNextFileW GetFullPathNameW VirtualFree ExitProcess HeapAlloc GetCPInfoExW GetLongPathNameW RtlUnwind GetCPInfo EnumSystemLocalesW GetStdHandle GetTimeZoneInformation FileTimeToLocalFileTime GetModuleHandleW FreeLibrary TryEnterCriticalSection HeapDestroy FileTimeToDosDateTime ReadFile HeapSize GetLastError GetModuleFileNameW SetLastError FindResourceW CreateThread CompareStringW MapViewOfFile LoadLibraryA ResetEvent GetVolumeInformationW FreeResource GetDriveTypeW GetVersion RaiseException FormatMessageW SwitchToThread GetExitCodeThread OutputDebugStringW GetCurrentThread GetLogicalDrives LocalFileTimeToFileTime GetFileAttributesExW LoadLibraryExW LockResource BeginUpdateResourceW FileTimeToSystemTime GetCurrentThreadId UnhandledExceptionFilter VirtualQuery VirtualQueryEx Sleep EnterCriticalSection SetFilePointer LoadResource SuspendThread GetTickCount EnumResourceLanguagesW GetFileSize GetStartupInfoW GetFileAttributesW InitializeCriticalSection GetThreadPriority GetCurrentProcess SetThreadPriority VirtualAlloc GetSystemInfo GetCommandLineW GetTempPathW LeaveCriticalSection GetProcAddress ResumeThread GetLogicalDriveStringsW GetVersionExW VerifyVersionInfoW HeapCreate LCMapStringW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage UnmapViewOfFile lstrlenW QueryPerformanceCounter SetEndOfFile HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent CreateFileW GetLocaleInfoW SystemTimeToFileTime DeleteFileW GetLocalTime WaitForSingleObject WriteFile CreateFileMappingW ExitThread DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode IsValidLocale TlsSetValue EndUpdateResourceW CreateDirectoryW GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW SetThreadLocale GetThreadLocale

shell32

ShellExecuteExW

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

user32

CharUpperBuffW CharNextW MsgWaitForMultipleObjects CharLowerBuffW LoadStringW CharUpperW PeekMessageW GetSystemMetrics MessageBoxW

oleaut32

SysAllocStringLen SafeArrayPtrOfIndex VariantCopy SafeArrayGetLBound SafeArrayGetUBound VariantInit VariantClear SysFreeString SysReAllocStringLen VariantChangeType SafeArrayCreate

msvcrt

memcpy memset

netapi32

NetWkstaGetInfo NetApiBufferFree

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

24KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

698B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

158B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

32B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

93B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

117KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

14.6MB

Virtual Size

14.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ