16df3e97e47e8fd65934cb2d1e90a110f2fe2659f6d19dbf07f83d0762afebee

Sharing

Copy URL Twitter E-mail

General

Target
16df3e97e47e8fd65934cb2d1e90a110f2fe2659f6d19dbf07f83d0762afebee
Size 583KB
Sample220201-mx91msdbhn
SHA256 16df3e97e47e8fd65934cb2d1e90a110f2fe2659f6d19dbf07f83d0762afebee
MD5 0a7e8fb3ea33ebbfc758e975ae5f7a03
SHA1 7c53e9377232e9d2c86fdbb463ecf02f2b5fb4c8
SHA512 f8a569bfea7d497c868c73616816f93a1a14bcce620a9deb496dfe69799f1029be09091077c86775cb4f00e786d828778f6ab548381d332855438cfe47ea3835
SSDEEP 12288:5ebVgxP7QIJxQeMjN5OxvHF+ZwsnfgpgtHKhiqCgy0X0vpu:5ea7BQHjPOx9+ZwsnflHSiqTevpu
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

16df3e97e47e8fd65934cb2d1e90a110f2fe2659f6d19dbf07f83d0762afebee

.dll 583KB

16df3e97e47e8fd65934cb2d1e90a110f2fe2659f6d19dbf07f83d0762afebee

IMPHASH a60eddcd7c4ea68bad0bbe1c9a56a002
SHA256 16df3e97e47e8fd65934cb2d1e90a110f2fe2659f6d19dbf07f83d0762afebee
MD5 0a7e8fb3ea33ebbfc758e975ae5f7a03
SHA1 7c53e9377232e9d2c86fdbb463ecf02f2b5fb4c8
SHA512 f8a569bfea7d497c868c73616816f93a1a14bcce620a9deb496dfe69799f1029be09091077c86775cb4f00e786d828778f6ab548381d332855438cfe47ea3835
SSDEEP 12288:5ebVgxP7QIJxQeMjN5OxvHF+ZwsnfgpgtHKhiqCgy0X0vpu:5ea7BQHjPOx9+ZwsnflHSiqTevpu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

318510

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FlushFileBuffers GetACP HeapReAlloc GetTimeZoneInformation GetUserDefaultLCID IsValidLocale GetTimeFormatW FindClose FindFirstFileExA EnumSystemLocalesW GetDateFormatW SetFileAttributesW GetFileAttributesExW GetStdHandle SetFilePointerEx GetEnvironmentStringsW ReadFile SetEndOfFile SetStdHandle HeapFree GetConsoleMode GetConsoleCP WriteFile GetModuleFileNameA GetModuleHandleExW ExitProcess CloseHandle FindNextFileA CreateFileW LoadLibraryExW FreeLibrary InterlockedFlushSList FreeEnvironmentStringsW SetEnvironmentVariableA WriteConsoleW HeapSize GetExitCodeProcess CreateSemaphoreA CreateProcessA FindFirstChangeNotificationA GetProcessHeap LocalFree HeapAlloc GetWindowsDirectoryA ResetEvent CreateThread DeleteFileA LoadLibraryA GetCurrentThread SetEvent OpenMutexA Sleep DuplicateHandle LocalAlloc RaiseException RtlUnwind GetStartupInfoW IsDebuggerPresent IsValidCodePage GetOEMCP GetCommandLineA GetFileType GetCommandLineW WaitForSingleObject CreateMutexA GetEnvironmentVariableA PeekNamedPipe VirtualProtect ReadConsoleW MoveFileA InitializeSListHead GetCurrentThreadId GetCurrentProcessId MultiByteToWideChar GetLastError WideCharToMultiByte GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter

user32

GetMessageA LoadImageA CheckMenuRadioItem DispatchMessageA UpdateWindow FindWindowA MapDialogRect LoadIconA EndDeferWindowPos IntersectRect IsWindowEnabled GetWindowTextA ExitWindowsEx CloseClipboard OffsetRect GetAsyncKeyState ShowWindow DrawIcon GetClassNameA EndDialog EnumChildWindows GetDC InflateRect GetMessagePos

gdi32

OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx ScaleWindowExtEx

ole32

OleInitialize CoRegisterClassObject CoUninitialize CoRegisterSurrogate OleUninitialize CoInitialize

ws2_32

recvfrom getservbyname send htons WSACleanup getsockopt recv WSAStartup

winspool.drv

OpenPrinterA AddPrinterConnectionA ClosePrinter DocumentPropertiesA GetJobA GetPrinterDataA

advapi32

RegQueryValueExA OpenServiceA OpenThreadToken RegOpenKeyExA InitializeSecurityDescriptor FreeSid OpenProcessToken SetSecurityDescriptorDacl SetEntriesInAclA RegEnumKeyA RegCloseKey StartServiceCtrlDispatcherA RegOpenKeyA QueryServiceStatus RegDeleteKeyA GetTokenInformation AllocateAndInitializeSid LookupPrivilegeValueA SetServiceStatus RegisterServiceCtrlHandlerA OpenSCManagerA RegCreateKeyExA DeleteService RegSetValueExA

winmm

mciGetErrorStringA timeBeginPeriod PlaySoundA mciSendCommandA timeEndPeriod

comdlg32

GetSaveFileNameA CommDlgExtendedError GetOpenFileNameA ChooseFontA ReplaceTextA

comctl32

ImageList_GetImageInfo ImageList_GetImageCount ImageList_Create ImageList_GetBkColor ImageList_EndDrag ImageList_GetDragImage

rasapi32

RasEnumConnectionsA RasGetConnectStatusA