6a03670ab278379848cd3e785dea4c20419f993bb48b4f52d953350af6e44468

Sharing

Copy URL Twitter E-mail

General

Target
6a03670ab278379848cd3e785dea4c20419f993bb48b4f52d953350af6e44468
Size 598KB
Sample220201-glz4eahfdn
SHA256 6a03670ab278379848cd3e785dea4c20419f993bb48b4f52d953350af6e44468
MD5 2217aa5220d5257564af8c0334e5ffb8
SHA1 0f1823f33cf6eb68076bb6721bd5c609732a3fef
SHA512 6de7f0160337736fbba98afc3f1c09ace3dfd58d691b8e521e37e3d4aa7e431570a98fb970b111336ab373a41f8eda6bd22b8b075dfe3d197b5043054c86b626
SSDEEP 12288:fPAx3ihbFAoVWmdIfhjQUZSFvA5iH47O1ceIELtHH:fUShbFTdqfhcmSFMiH46rl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6a03670ab278379848cd3e785dea4c20419f993bb48b4f52d953350af6e44468

.exe 598KB

6a03670ab278379848cd3e785dea4c20419f993bb48b4f52d953350af6e44468

IMPHASH bd0f5a7a10766b84f6871b5eb872a131
SHA256 6a03670ab278379848cd3e785dea4c20419f993bb48b4f52d953350af6e44468
MD5 2217aa5220d5257564af8c0334e5ffb8
SHA1 0f1823f33cf6eb68076bb6721bd5c609732a3fef
SHA512 6de7f0160337736fbba98afc3f1c09ace3dfd58d691b8e521e37e3d4aa7e431570a98fb970b111336ab373a41f8eda6bd22b8b075dfe3d197b5043054c86b626
SSDEEP 12288:fPAx3ihbFAoVWmdIfhjQUZSFvA5iH47O1ceIELtHH:fUShbFTdqfhcmSFMiH46rl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

148828

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile GetFileSize DuplicateHandle GetCurrentProcess FindClose FindFirstFileA GetVolumeInformationA GetFullPathNameA GetCPInfo GetOEMCP GetModuleHandleW FileTimeToSystemTime SetErrorMode FileTimeToLocalFileTime GetFileAttributesA GetFileSizeEx GetFileTime GetTickCount RaiseException RtlUnwind HeapFree UnlockFile GetCommandLineA GetStartupInfoA VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetACP IsValidCodePage GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode GetLocaleInfoW LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags InterlockedDecrement GetModuleFileNameW FormatMessageA LocalFree MulDiv GlobalGetAtomNameA GlobalFindAtomA MultiByteToWideChar lstrcmpW GetVersionExA lstrlenA WritePrivateProfileStringA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId SetLastError GlobalAddAtomA GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA CompareStringA InterlockedExchange GlobalLock lstrcmpA GlobalAlloc FreeLibrary GetModuleHandleA ExitProcess WideCharToMultiByte LoadLibraryW GetProcAddress FindResourceA LoadResource LockResource SizeofResource Sleep CreateFileA EscapeCommFunction SetCommState GetLastError HeapAlloc CloseHandle

user32

CopyAcceleratorTableA IsRectEmpty SetRect InvalidateRect InvalidateRgn GetNextDlgGroupItem MessageBeep UnregisterClassA RegisterClipboardFormatA PostThreadMessageA BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextA GetForegroundWindow GetTopWindow CharNextA GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow InSendMessage CreateWindowExW SendMessageA DrawIcon SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA SetCursor SetWindowsHookExA CharUpperA GetSysColorBrush AppendMenuA GetSystemMenu IsIconic GetClientRect EnableWindow LoadIconA GetSystemMetrics ReleaseCapture LoadCursorA SetCapture UnhookWindowsHookEx EndPaint PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

gdi32

SetTextColor SetBkColor GetObjectA GetDeviceCaps ExtTextOutA GetClipBox SaveDC RestoreDC DeleteDC GetStockObject GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode SetWindowExtEx ScaleWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible ExtSelectClipRgn CreateBitmap GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode

winspool.drv

OpenPrinterA ClosePrinter DocumentPropertiesA

comdlg32

GetFileTitleA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes OleIsCurrentClipboard OleFlushClipboard CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter CoGetClassObject

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString