8deba9fb53096d6ea5e2090b662244293829096eee03d06108deb15e496a807e

Sharing

Copy URL Twitter E-mail

General

Target
8deba9fb53096d6ea5e2090b662244293829096eee03d06108deb15e496a807e
Size 624KB
Sample220201-fs5rsshbcl
SHA256 8deba9fb53096d6ea5e2090b662244293829096eee03d06108deb15e496a807e
MD5 deee7f1b3e1e8114cf8d3aecc2ffce61
SHA1 b140ecfe6d40a82e15e435c4223ae5465f438cdd
SHA512 8c7de26b3a50d20d9ea5ff0a610b8fe8a53b4e969dd0b12dd2e7a83aee4a0798ca001572dad5edc081a5ddcf19262f2d6c50c7dca4b41c71380a87274ceb4803
SSDEEP 12288:BPEVcOtqUsUVosoUbywD5yLun9YjAxEe1Bpr:StqjIopUOw8iJL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

8deba9fb53096d6ea5e2090b662244293829096eee03d06108deb15e496a807e

.exe 624KB

8deba9fb53096d6ea5e2090b662244293829096eee03d06108deb15e496a807e

IMPHASH 5b13da0110ad09b8405416e16328d5df
SHA256 8deba9fb53096d6ea5e2090b662244293829096eee03d06108deb15e496a807e
MD5 deee7f1b3e1e8114cf8d3aecc2ffce61
SHA1 b140ecfe6d40a82e15e435c4223ae5465f438cdd
SHA512 8c7de26b3a50d20d9ea5ff0a610b8fe8a53b4e969dd0b12dd2e7a83aee4a0798ca001572dad5edc081a5ddcf19262f2d6c50c7dca4b41c71380a87274ceb4803
SSDEEP 12288:BPEVcOtqUsUVosoUbywD5yLun9YjAxEe1Bpr:StqjIopUOw8iJL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

167964

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile WriteFile SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize GetThreadLocale DuplicateHandle GetCurrentProcess FindClose FindFirstFileA GetVolumeInformationA GetFullPathNameA GetCPInfo GetOEMCP FileTimeToSystemTime SetErrorMode FileTimeToLocalFileTime GetFileAttributesA GlobalFlags GetTickCount HeapAlloc HeapFree HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery RtlUnwind RaiseException GetCommandLineA GetProcessHeap GetStartupInfoA HeapSize VirtualFree HeapDestroy HeapCreate GetStdHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode GetLocaleInfoW LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GetModuleFileNameW GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA WritePrivateProfileStringA FreeResource GetCurrentProcessId GlobalAddAtomA GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA lstrcmpA FreeLibrary GlobalDeleteAtom GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv SetLastError ExitProcess LoadLibraryW GetProcAddress FindResourceA LoadResource LockResource SizeofResource Sleep CreateFileA EscapeCommFunction SetCommState CloseHandle lstrlenA CompareStringW CompareStringA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetFileTime InterlockedExchange

user32

CharNextA CopyAcceleratorTableA IsRectEmpty SetRect InvalidateRect InvalidateRgn GetNextDlgGroupItem MessageBeep UnregisterClassA RegisterClipboardFormatA PostThreadMessageA ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessagePos MapWindowPoints ReleaseCapture SetForegroundWindow UpdateWindow GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled CharUpperA DrawIcon AppendMenuA MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos SetCapture LoadCursorA GetSysColorBrush SendMessageA GetSystemMenu IsIconic GetClientRect EnableWindow LoadIconA GetSystemMetrics EndPaint BeginPaint GetWindowDC ReleaseDC GetDC GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetMessageTime

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

gdi32

ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject CreateBitmap GetClipBox SetTextColor SetBkColor GetObjectA ExtTextOutA SaveDC SetWindowExtEx RestoreDC GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible GetDeviceCaps GetViewportExtEx DeleteObject SetMapMode GetWindowExtEx

winspool.drv

OpenPrinterA ClosePrinter DocumentPropertiesA

comdlg32

GetFileTitleA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString OleFlushClipboard CoRevokeClassObject CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree CoRegisterMessageFilter OleIsCurrentClipboard

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString