2b63107a1e1e9ba2b50f93fba4da3caf74f5dc09448b566964acac89fe70e6e4

Sharing

Copy URL Twitter E-mail

General

Target
2b63107a1e1e9ba2b50f93fba4da3caf74f5dc09448b566964acac89fe70e6e4
Size 846KB
Sample220201-rltazafefp
SHA256 2b63107a1e1e9ba2b50f93fba4da3caf74f5dc09448b566964acac89fe70e6e4
MD5 8531c6f4d102550afb29ad150881308c
SHA1 54d462772bd7fbada40f8971c9d3430db6d8ce87
SHA512 6cbf31dc9dc407bcf3ab2c7eb5623f52bd58539fd7fec36b6428c9b696a97635509ae73d5bf2c5d60e8e33d57b25c69bc0eeb396a86ef681e3d394bc46b27906
SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhh8:EaGrCJ+H5Iht1JCD9a8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2b63107a1e1e9ba2b50f93fba4da3caf74f5dc09448b566964acac89fe70e6e4

.exe 846KB

2b63107a1e1e9ba2b50f93fba4da3caf74f5dc09448b566964acac89fe70e6e4

IMPHASH 0b4742e1043c666b589ea99d07375511
SHA256 2b63107a1e1e9ba2b50f93fba4da3caf74f5dc09448b566964acac89fe70e6e4
MD5 8531c6f4d102550afb29ad150881308c
SHA1 54d462772bd7fbada40f8971c9d3430db6d8ce87
SHA512 6cbf31dc9dc407bcf3ab2c7eb5623f52bd58539fd7fec36b6428c9b696a97635509ae73d5bf2c5d60e8e33d57b25c69bc0eeb396a86ef681e3d394bc46b27906
SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhh8:EaGrCJ+H5Iht1JCD9a8
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

279000

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFileAttributesW GetFileAttributesExW GetFileSizeEx GetFileTime SystemTimeToTzSpecificLocalTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle SetErrorMode SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW GetTimeZoneInformation GetStringTypeW LCMapStringW GetFileType ExitProcess GetStdHandle VirtualQuery VirtualAlloc GetSystemInfo HeapQueryInformation GetCommandLineW GetCommandLineA RtlPcToFileHeader RtlUnwindEx OutputDebugStringW VirtualProtect FileTimeToSystemTime GetCurrentProcess DuplicateHandle WriteFile UnlockFile SetFilePointer SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FileTimeToLocalFileTime FindFirstFileW CreateFileW GetThreadLocale DeleteFileW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection CompareStringW GlobalFindAtomW GetSystemDirectoryW EncodePointer FormatMessageW MulDiv LocalFree GetCurrentProcessId GlobalAddAtomW CreateEventW GlobalUnlock WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW GetProcAddress GetModuleHandleW GlobalFree lstrcmpW lstrcmpA GlobalDeleteAtom GlobalLock GlobalAlloc LoadLibraryExW FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW LoadLibraryW GetModuleHandleExW GetModuleFileNameW InitializeCriticalSectionAndSpinCount SetLastError OutputDebugStringA GetACP WideCharToMultiByte MultiByteToWideChar DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection HeapFree FindResourceW LoadResource LockResource SizeofResource GetProcessHeap GetTickCount CloseHandle ReadFile GetFileSize FindClose GetTickCount64 LoadLibraryA

user32

GrayStringW DrawTextExW DrawTextW GetMonitorInfoW MonitorFromWindow WinHelpW GetTopWindow GetClassNameW GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW PtInRect EqualRect MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowRect GetWindowTextW RemovePropW GetPropW SetPropW GetScrollPos RedrawWindow EndPaint BeginPaint SetForegroundWindow GetForegroundWindow UpdateWindow SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID EndDeferWindowPos DeferWindowPos BeginDeferWindowPos TabbedTextOutW IsChild IsMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW GetMenuItemCount GetSubMenu LoadIconW GetSystemMenu AppendMenuW SendMessageW CopyRect GetSysColor DestroyMenu UnhookWindowsHookEx GetLastActivePopup GetWindowThreadProcessId MessageBoxW SetCursor CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState IsWindowVisible CharNextW GetDC PeekMessageW DispatchMessageW GetWindowDC ReleaseDC ClientToScreen ShowWindow MoveWindow IsIconic GetSystemMetrics GetClientRect DrawIcon EnableWindow UnregisterClassW SendDlgItemMessageA SetRectEmpty OffsetRect GetParent PostMessageW PostQuitMessage SetWindowPos SetWindowContextHelpId GetWindow MapDialogRect IsWindow DestroyWindow CreateDialogIndirectParamW EndDialog GetDlgItem GetNextDlgTabItem GetActiveWindow IsWindowEnabled SetActiveWindow GetWindowLongW GetDesktopWindow GetFocus CheckMenuItem EnableMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions SetMenuItemInfoW LoadBitmapW GetMessageW TranslateMessage SetWindowTextW IsDialogMessageW SetCapture ReleaseCapture LoadCursorW RealChildWindowFromPoint SetTimer KillTimer PostThreadMessageW RegisterClipboardFormatW CharUpperW GetSysColorBrush MessageBeep GetNextDlgGroupItem IsRectEmpty IntersectRect InvalidateRect InvalidateRgn CopyAcceleratorTableW GetMenuItemID SetRect

gdi32

Escape GetClipBox GetStockObject GetViewportExtEx GetWindowExtEx PtVisible RectVisible RestoreDC SaveDC ExtSelectClipRgn SelectObject SetMapMode DeleteObject TextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode SetTextColor SetBkColor GetDeviceCaps ExtTextOutW GetObjectW DeleteDC CreateBitmap

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegSetValueExW RegEnumValueW RegQueryValueW RegEnumKeyW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCW PathFindFileNameW PathFindExtensionW PathStripToRootW

ole32

CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject OleInitialize CoTaskMemFree CoTaskMemAlloc CoInitialize CoCreateInstance CLSIDFromProgID CLSIDFromString CoCreateGuid CoUninitialize CoFreeUnusedLibraries CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard CoRegisterMessageFilter OleUninitialize

oleaut32

VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen OleCreateFontIndirect VariantChangeType VariantClear VariantInit VariantCopy SysAllocStringLen SysAllocString SysFreeString SafeArrayDestroy

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject LresultFromObject

Name

.text

Size

361KB

Virtual Size

361KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

246KB

Virtual Size

245KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

200KB

Virtual Size

199KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ