17f4da96a0161991d837a79143a2bd14c8cf31c69eb5864ac6e41d792e0f1864

Sharing

Copy URL Twitter E-mail

General

Target
17f4da96a0161991d837a79143a2bd14c8cf31c69eb5864ac6e41d792e0f1864
Size 846KB
Sample220202-bw94gaeaej
SHA256 17f4da96a0161991d837a79143a2bd14c8cf31c69eb5864ac6e41d792e0f1864
MD5 1a4ee38436c2c28599cb6e902c4016c2
SHA1 47cc1d21e8710d1be7b79871f780d8484eaf22ac
SHA512 7810ee35927606ff0ab6ff457a286b1d2a909d772258da3f13e42739d4738a1a17b46dc45d3241cab30d6ab4efb345a4160cd9c25e3973ad5dc78688547c4789
SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhu:EaGrCJ+H5Iht1JCD9au
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

17f4da96a0161991d837a79143a2bd14c8cf31c69eb5864ac6e41d792e0f1864

.exe 846KB

17f4da96a0161991d837a79143a2bd14c8cf31c69eb5864ac6e41d792e0f1864

IMPHASH 0b4742e1043c666b589ea99d07375511
SHA256 17f4da96a0161991d837a79143a2bd14c8cf31c69eb5864ac6e41d792e0f1864
MD5 1a4ee38436c2c28599cb6e902c4016c2
SHA1 47cc1d21e8710d1be7b79871f780d8484eaf22ac
SHA512 7810ee35927606ff0ab6ff457a286b1d2a909d772258da3f13e42739d4738a1a17b46dc45d3241cab30d6ab4efb345a4160cd9c25e3973ad5dc78688547c4789
SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhu:EaGrCJ+H5Iht1JCD9au
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

279000

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFileAttributesW GetFileAttributesExW GetFileSizeEx GetFileTime SystemTimeToTzSpecificLocalTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle SetErrorMode SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW GetTimeZoneInformation GetStringTypeW LCMapStringW GetFileType ExitProcess GetStdHandle VirtualQuery VirtualAlloc GetSystemInfo HeapQueryInformation GetCommandLineW GetCommandLineA RtlPcToFileHeader RtlUnwindEx OutputDebugStringW VirtualProtect FileTimeToSystemTime GetCurrentProcess DuplicateHandle WriteFile UnlockFile SetFilePointer SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FileTimeToLocalFileTime FindFirstFileW CreateFileW GetThreadLocale DeleteFileW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection CompareStringW GlobalFindAtomW GetSystemDirectoryW EncodePointer FormatMessageW MulDiv LocalFree GetCurrentProcessId GlobalAddAtomW CreateEventW GlobalUnlock WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW GetProcAddress GetModuleHandleW GlobalFree lstrcmpW lstrcmpA GlobalDeleteAtom GlobalLock GlobalAlloc LoadLibraryExW FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW LoadLibraryW GetModuleHandleExW GetModuleFileNameW InitializeCriticalSectionAndSpinCount SetLastError OutputDebugStringA GetACP WideCharToMultiByte MultiByteToWideChar DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection HeapFree FindResourceW LoadResource LockResource SizeofResource GetProcessHeap GetTickCount CloseHandle ReadFile GetFileSize FindClose GetTickCount64 LoadLibraryA

user32

GrayStringW DrawTextExW DrawTextW GetMonitorInfoW MonitorFromWindow WinHelpW GetTopWindow GetClassNameW GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW PtInRect EqualRect MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowRect GetWindowTextW RemovePropW GetPropW SetPropW GetScrollPos RedrawWindow EndPaint BeginPaint SetForegroundWindow GetForegroundWindow UpdateWindow SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID EndDeferWindowPos DeferWindowPos BeginDeferWindowPos TabbedTextOutW IsChild IsMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW GetMenuItemCount GetSubMenu LoadIconW GetSystemMenu AppendMenuW SendMessageW CopyRect GetSysColor DestroyMenu UnhookWindowsHookEx GetLastActivePopup GetWindowThreadProcessId MessageBoxW SetCursor CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState IsWindowVisible CharNextW GetDC PeekMessageW DispatchMessageW GetWindowDC ReleaseDC ClientToScreen ShowWindow MoveWindow IsIconic GetSystemMetrics GetClientRect DrawIcon EnableWindow UnregisterClassW SendDlgItemMessageA SetRectEmpty OffsetRect GetParent PostMessageW PostQuitMessage SetWindowPos SetWindowContextHelpId GetWindow MapDialogRect IsWindow DestroyWindow CreateDialogIndirectParamW EndDialog GetDlgItem GetNextDlgTabItem GetActiveWindow IsWindowEnabled SetActiveWindow GetWindowLongW GetDesktopWindow GetFocus CheckMenuItem EnableMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions SetMenuItemInfoW LoadBitmapW GetMessageW TranslateMessage SetWindowTextW IsDialogMessageW SetCapture ReleaseCapture LoadCursorW RealChildWindowFromPoint SetTimer KillTimer PostThreadMessageW RegisterClipboardFormatW CharUpperW GetSysColorBrush MessageBeep GetNextDlgGroupItem IsRectEmpty IntersectRect InvalidateRect InvalidateRgn CopyAcceleratorTableW GetMenuItemID SetRect

gdi32

Escape GetClipBox GetStockObject GetViewportExtEx GetWindowExtEx PtVisible RectVisible RestoreDC SaveDC ExtSelectClipRgn SelectObject SetMapMode DeleteObject TextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode SetTextColor SetBkColor GetDeviceCaps ExtTextOutW GetObjectW DeleteDC CreateBitmap

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegSetValueExW RegEnumValueW RegQueryValueW RegEnumKeyW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCW PathFindFileNameW PathFindExtensionW PathStripToRootW

ole32

CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject OleInitialize CoTaskMemFree CoTaskMemAlloc CoInitialize CoCreateInstance CLSIDFromProgID CLSIDFromString CoCreateGuid CoUninitialize CoFreeUnusedLibraries CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard CoRegisterMessageFilter OleUninitialize

oleaut32

VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen OleCreateFontIndirect VariantChangeType VariantClear VariantInit VariantCopy SysAllocStringLen SysAllocString SysFreeString SafeArrayDestroy

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject LresultFromObject

Name

.text

Size

361KB

Virtual Size

361KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

246KB

Virtual Size

245KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

200KB

Virtual Size

199KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ