5feb8623b9f5e885f44f23987d0fe1e170b85a5fffc3ae9f7c4a0a06d0b7a0f8

Sharing

Copy URL Twitter E-mail

General

Target
5feb8623b9f5e885f44f23987d0fe1e170b85a5fffc3ae9f7c4a0a06d0b7a0f8
Size 846KB
Sample220202-d2t1jsfeb9
SHA256 5feb8623b9f5e885f44f23987d0fe1e170b85a5fffc3ae9f7c4a0a06d0b7a0f8
MD5 3e9b5ae5ae1d3c5c55263da5a026d79d
SHA1 23a2fae1f39ff1fe919119c82653eed3c4bfd4ce
SHA512 a239a5960b1a70e1d8b8ffb97f00f613cea3f6d487af96020d183856151bee28fbad63ca1163ac73a173c187b790c97a021c5e01075ac15e0452444d9c93870d
SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhl:EaGrCJ+H5Iht1JCD9al
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5feb8623b9f5e885f44f23987d0fe1e170b85a5fffc3ae9f7c4a0a06d0b7a0f8

.exe 846KB

5feb8623b9f5e885f44f23987d0fe1e170b85a5fffc3ae9f7c4a0a06d0b7a0f8

IMPHASH 0b4742e1043c666b589ea99d07375511
SHA256 5feb8623b9f5e885f44f23987d0fe1e170b85a5fffc3ae9f7c4a0a06d0b7a0f8
MD5 3e9b5ae5ae1d3c5c55263da5a026d79d
SHA1 23a2fae1f39ff1fe919119c82653eed3c4bfd4ce
SHA512 a239a5960b1a70e1d8b8ffb97f00f613cea3f6d487af96020d183856151bee28fbad63ca1163ac73a173c187b790c97a021c5e01075ac15e0452444d9c93870d
SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhl:EaGrCJ+H5Iht1JCD9al
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

279000

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFileAttributesW GetFileAttributesExW GetFileSizeEx GetFileTime SystemTimeToTzSpecificLocalTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle SetErrorMode SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW GetTimeZoneInformation GetStringTypeW LCMapStringW GetFileType ExitProcess GetStdHandle VirtualQuery VirtualAlloc GetSystemInfo HeapQueryInformation GetCommandLineW GetCommandLineA RtlPcToFileHeader RtlUnwindEx OutputDebugStringW VirtualProtect FileTimeToSystemTime GetCurrentProcess DuplicateHandle WriteFile UnlockFile SetFilePointer SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FileTimeToLocalFileTime FindFirstFileW CreateFileW GetThreadLocale DeleteFileW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection CompareStringW GlobalFindAtomW GetSystemDirectoryW EncodePointer FormatMessageW MulDiv LocalFree GetCurrentProcessId GlobalAddAtomW CreateEventW GlobalUnlock WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW GetProcAddress GetModuleHandleW GlobalFree lstrcmpW lstrcmpA GlobalDeleteAtom GlobalLock GlobalAlloc LoadLibraryExW FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW LoadLibraryW GetModuleHandleExW GetModuleFileNameW InitializeCriticalSectionAndSpinCount SetLastError OutputDebugStringA GetACP WideCharToMultiByte MultiByteToWideChar DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection HeapFree FindResourceW LoadResource LockResource SizeofResource GetProcessHeap GetTickCount CloseHandle ReadFile GetFileSize FindClose GetTickCount64 LoadLibraryA

user32

GrayStringW DrawTextExW DrawTextW GetMonitorInfoW MonitorFromWindow WinHelpW GetTopWindow GetClassNameW GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW PtInRect EqualRect MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowRect GetWindowTextW RemovePropW GetPropW SetPropW GetScrollPos RedrawWindow EndPaint BeginPaint SetForegroundWindow GetForegroundWindow UpdateWindow SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID EndDeferWindowPos DeferWindowPos BeginDeferWindowPos TabbedTextOutW IsChild IsMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW GetMenuItemCount GetSubMenu LoadIconW GetSystemMenu AppendMenuW SendMessageW CopyRect GetSysColor DestroyMenu UnhookWindowsHookEx GetLastActivePopup GetWindowThreadProcessId MessageBoxW SetCursor CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState IsWindowVisible CharNextW GetDC PeekMessageW DispatchMessageW GetWindowDC ReleaseDC ClientToScreen ShowWindow MoveWindow IsIconic GetSystemMetrics GetClientRect DrawIcon EnableWindow UnregisterClassW SendDlgItemMessageA SetRectEmpty OffsetRect GetParent PostMessageW PostQuitMessage SetWindowPos SetWindowContextHelpId GetWindow MapDialogRect IsWindow DestroyWindow CreateDialogIndirectParamW EndDialog GetDlgItem GetNextDlgTabItem GetActiveWindow IsWindowEnabled SetActiveWindow GetWindowLongW GetDesktopWindow GetFocus CheckMenuItem EnableMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions SetMenuItemInfoW LoadBitmapW GetMessageW TranslateMessage SetWindowTextW IsDialogMessageW SetCapture ReleaseCapture LoadCursorW RealChildWindowFromPoint SetTimer KillTimer PostThreadMessageW RegisterClipboardFormatW CharUpperW GetSysColorBrush MessageBeep GetNextDlgGroupItem IsRectEmpty IntersectRect InvalidateRect InvalidateRgn CopyAcceleratorTableW GetMenuItemID SetRect

gdi32

Escape GetClipBox GetStockObject GetViewportExtEx GetWindowExtEx PtVisible RectVisible RestoreDC SaveDC ExtSelectClipRgn SelectObject SetMapMode DeleteObject TextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode SetTextColor SetBkColor GetDeviceCaps ExtTextOutW GetObjectW DeleteDC CreateBitmap

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegSetValueExW RegEnumValueW RegQueryValueW RegEnumKeyW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCW PathFindFileNameW PathFindExtensionW PathStripToRootW

ole32

CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject OleInitialize CoTaskMemFree CoTaskMemAlloc CoInitialize CoCreateInstance CLSIDFromProgID CLSIDFromString CoCreateGuid CoUninitialize CoFreeUnusedLibraries CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard CoRegisterMessageFilter OleUninitialize

oleaut32

VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen OleCreateFontIndirect VariantChangeType VariantClear VariantInit VariantCopy SysAllocStringLen SysAllocString SysFreeString SafeArrayDestroy

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject LresultFromObject

Name

.text

Size

361KB

Virtual Size

361KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

246KB

Virtual Size

245KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

200KB

Virtual Size

199KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ