b5a01451a0e384903dc3f64ab211110ba959c0b8376bb9162cf0e180eb0d4dfc

Sharing

Copy URL Twitter E-mail

General

Target
b5a01451a0e384903dc3f64ab211110ba959c0b8376bb9162cf0e180eb0d4dfc
Size 846KB
Sample220201-v3afzaadb5
SHA256 b5a01451a0e384903dc3f64ab211110ba959c0b8376bb9162cf0e180eb0d4dfc
MD5 3b3eec313c1e1f10f07bd7624b664ede
SHA1 94f1de342d38dbc10e7c75cc68f53132abe8f71c
SHA512 a217fa54d9d92fd90b462ccf909b3471362637199c8b4dc438eaeced839a6f34a178e3bd6fb7ddcc430734a1f336e012df631076556f3b4cfc19350ea90094fb
SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhM:EaGrCJ+H5Iht1JCD9aM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b5a01451a0e384903dc3f64ab211110ba959c0b8376bb9162cf0e180eb0d4dfc

.exe 846KB

b5a01451a0e384903dc3f64ab211110ba959c0b8376bb9162cf0e180eb0d4dfc

IMPHASH 0b4742e1043c666b589ea99d07375511
SHA256 b5a01451a0e384903dc3f64ab211110ba959c0b8376bb9162cf0e180eb0d4dfc
MD5 3b3eec313c1e1f10f07bd7624b664ede
SHA1 94f1de342d38dbc10e7c75cc68f53132abe8f71c
SHA512 a217fa54d9d92fd90b462ccf909b3471362637199c8b4dc438eaeced839a6f34a178e3bd6fb7ddcc430734a1f336e012df631076556f3b4cfc19350ea90094fb
SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhM:EaGrCJ+H5Iht1JCD9aM
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

279000

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFileAttributesW GetFileAttributesExW GetFileSizeEx GetFileTime SystemTimeToTzSpecificLocalTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle SetErrorMode SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW GetTimeZoneInformation GetStringTypeW LCMapStringW GetFileType ExitProcess GetStdHandle VirtualQuery VirtualAlloc GetSystemInfo HeapQueryInformation GetCommandLineW GetCommandLineA RtlPcToFileHeader RtlUnwindEx OutputDebugStringW VirtualProtect FileTimeToSystemTime GetCurrentProcess DuplicateHandle WriteFile UnlockFile SetFilePointer SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FileTimeToLocalFileTime FindFirstFileW CreateFileW GetThreadLocale DeleteFileW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection CompareStringW GlobalFindAtomW GetSystemDirectoryW EncodePointer FormatMessageW MulDiv LocalFree GetCurrentProcessId GlobalAddAtomW CreateEventW GlobalUnlock WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW GetProcAddress GetModuleHandleW GlobalFree lstrcmpW lstrcmpA GlobalDeleteAtom GlobalLock GlobalAlloc LoadLibraryExW FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW LoadLibraryW GetModuleHandleExW GetModuleFileNameW InitializeCriticalSectionAndSpinCount SetLastError OutputDebugStringA GetACP WideCharToMultiByte MultiByteToWideChar DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection HeapFree FindResourceW LoadResource LockResource SizeofResource GetProcessHeap GetTickCount CloseHandle ReadFile GetFileSize FindClose GetTickCount64 LoadLibraryA

user32

GrayStringW DrawTextExW DrawTextW GetMonitorInfoW MonitorFromWindow WinHelpW GetTopWindow GetClassNameW GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW PtInRect EqualRect MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowRect GetWindowTextW RemovePropW GetPropW SetPropW GetScrollPos RedrawWindow EndPaint BeginPaint SetForegroundWindow GetForegroundWindow UpdateWindow SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID EndDeferWindowPos DeferWindowPos BeginDeferWindowPos TabbedTextOutW IsChild IsMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW GetMenuItemCount GetSubMenu LoadIconW GetSystemMenu AppendMenuW SendMessageW CopyRect GetSysColor DestroyMenu UnhookWindowsHookEx GetLastActivePopup GetWindowThreadProcessId MessageBoxW SetCursor CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState IsWindowVisible CharNextW GetDC PeekMessageW DispatchMessageW GetWindowDC ReleaseDC ClientToScreen ShowWindow MoveWindow IsIconic GetSystemMetrics GetClientRect DrawIcon EnableWindow UnregisterClassW SendDlgItemMessageA SetRectEmpty OffsetRect GetParent PostMessageW PostQuitMessage SetWindowPos SetWindowContextHelpId GetWindow MapDialogRect IsWindow DestroyWindow CreateDialogIndirectParamW EndDialog GetDlgItem GetNextDlgTabItem GetActiveWindow IsWindowEnabled SetActiveWindow GetWindowLongW GetDesktopWindow GetFocus CheckMenuItem EnableMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions SetMenuItemInfoW LoadBitmapW GetMessageW TranslateMessage SetWindowTextW IsDialogMessageW SetCapture ReleaseCapture LoadCursorW RealChildWindowFromPoint SetTimer KillTimer PostThreadMessageW RegisterClipboardFormatW CharUpperW GetSysColorBrush MessageBeep GetNextDlgGroupItem IsRectEmpty IntersectRect InvalidateRect InvalidateRgn CopyAcceleratorTableW GetMenuItemID SetRect

gdi32

Escape GetClipBox GetStockObject GetViewportExtEx GetWindowExtEx PtVisible RectVisible RestoreDC SaveDC ExtSelectClipRgn SelectObject SetMapMode DeleteObject TextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode SetTextColor SetBkColor GetDeviceCaps ExtTextOutW GetObjectW DeleteDC CreateBitmap

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegSetValueExW RegEnumValueW RegQueryValueW RegEnumKeyW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCW PathFindFileNameW PathFindExtensionW PathStripToRootW

ole32

CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject OleInitialize CoTaskMemFree CoTaskMemAlloc CoInitialize CoCreateInstance CLSIDFromProgID CLSIDFromString CoCreateGuid CoUninitialize CoFreeUnusedLibraries CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard CoRegisterMessageFilter OleUninitialize

oleaut32

VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen OleCreateFontIndirect VariantChangeType VariantClear VariantInit VariantCopy SysAllocStringLen SysAllocString SysFreeString SafeArrayDestroy

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject LresultFromObject

Name

.text

Size

361KB

Virtual Size

361KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

246KB

Virtual Size

245KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

200KB

Virtual Size

199KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ