ef57ecd4355de12ac8d2cea7807d18c0d369d9787a14fa8471d6792d47529bbe

Sharing

Copy URL Twitter E-mail

General

Target
ef57ecd4355de12ac8d2cea7807d18c0d369d9787a14fa8471d6792d47529bbe
Size 846KB
Sample220202-e4x1nagcc5
SHA256 ef57ecd4355de12ac8d2cea7807d18c0d369d9787a14fa8471d6792d47529bbe
MD5 0be236203b2252be1f333ea52bbcc62f
SHA1 31f7b15406dd83be797631b941571a7491b5a709
SHA512 77eafc4ed66a6e49d6ff988eb24aea866243a8396be99f977855316d3e17dc5143a1241b943751987a40524bb61098e691dd58917a5a109d97d3e52068846e32
SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhK:EaGrCJ+H5Iht1JCD9aK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ef57ecd4355de12ac8d2cea7807d18c0d369d9787a14fa8471d6792d47529bbe

.exe 846KB

ef57ecd4355de12ac8d2cea7807d18c0d369d9787a14fa8471d6792d47529bbe

IMPHASH 0b4742e1043c666b589ea99d07375511
SHA256 ef57ecd4355de12ac8d2cea7807d18c0d369d9787a14fa8471d6792d47529bbe
MD5 0be236203b2252be1f333ea52bbcc62f
SHA1 31f7b15406dd83be797631b941571a7491b5a709
SHA512 77eafc4ed66a6e49d6ff988eb24aea866243a8396be99f977855316d3e17dc5143a1241b943751987a40524bb61098e691dd58917a5a109d97d3e52068846e32
SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhK:EaGrCJ+H5Iht1JCD9aK
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

279000

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFileAttributesW GetFileAttributesExW GetFileSizeEx GetFileTime SystemTimeToTzSpecificLocalTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle SetErrorMode SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW GetTimeZoneInformation GetStringTypeW LCMapStringW GetFileType ExitProcess GetStdHandle VirtualQuery VirtualAlloc GetSystemInfo HeapQueryInformation GetCommandLineW GetCommandLineA RtlPcToFileHeader RtlUnwindEx OutputDebugStringW VirtualProtect FileTimeToSystemTime GetCurrentProcess DuplicateHandle WriteFile UnlockFile SetFilePointer SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FileTimeToLocalFileTime FindFirstFileW CreateFileW GetThreadLocale DeleteFileW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection CompareStringW GlobalFindAtomW GetSystemDirectoryW EncodePointer FormatMessageW MulDiv LocalFree GetCurrentProcessId GlobalAddAtomW CreateEventW GlobalUnlock WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW GetProcAddress GetModuleHandleW GlobalFree lstrcmpW lstrcmpA GlobalDeleteAtom GlobalLock GlobalAlloc LoadLibraryExW FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW LoadLibraryW GetModuleHandleExW GetModuleFileNameW InitializeCriticalSectionAndSpinCount SetLastError OutputDebugStringA GetACP WideCharToMultiByte MultiByteToWideChar DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection HeapFree FindResourceW LoadResource LockResource SizeofResource GetProcessHeap GetTickCount CloseHandle ReadFile GetFileSize FindClose GetTickCount64 LoadLibraryA

user32

GrayStringW DrawTextExW DrawTextW GetMonitorInfoW MonitorFromWindow WinHelpW GetTopWindow GetClassNameW GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW PtInRect EqualRect MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowRect GetWindowTextW RemovePropW GetPropW SetPropW GetScrollPos RedrawWindow EndPaint BeginPaint SetForegroundWindow GetForegroundWindow UpdateWindow SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID EndDeferWindowPos DeferWindowPos BeginDeferWindowPos TabbedTextOutW IsChild IsMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW GetMenuItemCount GetSubMenu LoadIconW GetSystemMenu AppendMenuW SendMessageW CopyRect GetSysColor DestroyMenu UnhookWindowsHookEx GetLastActivePopup GetWindowThreadProcessId MessageBoxW SetCursor CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState IsWindowVisible CharNextW GetDC PeekMessageW DispatchMessageW GetWindowDC ReleaseDC ClientToScreen ShowWindow MoveWindow IsIconic GetSystemMetrics GetClientRect DrawIcon EnableWindow UnregisterClassW SendDlgItemMessageA SetRectEmpty OffsetRect GetParent PostMessageW PostQuitMessage SetWindowPos SetWindowContextHelpId GetWindow MapDialogRect IsWindow DestroyWindow CreateDialogIndirectParamW EndDialog GetDlgItem GetNextDlgTabItem GetActiveWindow IsWindowEnabled SetActiveWindow GetWindowLongW GetDesktopWindow GetFocus CheckMenuItem EnableMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions SetMenuItemInfoW LoadBitmapW GetMessageW TranslateMessage SetWindowTextW IsDialogMessageW SetCapture ReleaseCapture LoadCursorW RealChildWindowFromPoint SetTimer KillTimer PostThreadMessageW RegisterClipboardFormatW CharUpperW GetSysColorBrush MessageBeep GetNextDlgGroupItem IsRectEmpty IntersectRect InvalidateRect InvalidateRgn CopyAcceleratorTableW GetMenuItemID SetRect

gdi32

Escape GetClipBox GetStockObject GetViewportExtEx GetWindowExtEx PtVisible RectVisible RestoreDC SaveDC ExtSelectClipRgn SelectObject SetMapMode DeleteObject TextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode SetTextColor SetBkColor GetDeviceCaps ExtTextOutW GetObjectW DeleteDC CreateBitmap

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegSetValueExW RegEnumValueW RegQueryValueW RegEnumKeyW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCW PathFindFileNameW PathFindExtensionW PathStripToRootW

ole32

CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject OleInitialize CoTaskMemFree CoTaskMemAlloc CoInitialize CoCreateInstance CLSIDFromProgID CLSIDFromString CoCreateGuid CoUninitialize CoFreeUnusedLibraries CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard CoRegisterMessageFilter OleUninitialize

oleaut32

VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen OleCreateFontIndirect VariantChangeType VariantClear VariantInit VariantCopy SysAllocStringLen SysAllocString SysFreeString SafeArrayDestroy

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject LresultFromObject

Name

.text

Size

361KB

Virtual Size

361KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

246KB

Virtual Size

245KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

200KB

Virtual Size

199KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ