9dfe652042ebe64aff49368a5e7aeaaf2a5567adb056163dc2cea4cfe33da04e

Sharing

Copy URL Twitter E-mail

General

Target
9dfe652042ebe64aff49368a5e7aeaaf2a5567adb056163dc2cea4cfe33da04e
Size 1.7MB
Sample220203-s6d78abdar
SHA256 9dfe652042ebe64aff49368a5e7aeaaf2a5567adb056163dc2cea4cfe33da04e
MD5 3cef5f47f07f15094c9af0d6a9f9937d
SHA1 8153f93a1b8dc86f8c48e49a1bafab797404da70
SHA512 02d622020b0346040e78de301e351506f78b88a1daa7106ddf599a5eda331ab875fc7e364428336a6ea25fe3c0ef66016f2abccae1df0a6c3bb11e6cc7cab263
SSDEEP 49152:30cWXWjEJJ83Os4Gi1t4bdvBUgTGLxiuZ7lJQJt:35+qEr837/HExiuZh2t
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9dfe652042ebe64aff49368a5e7aeaaf2a5567adb056163dc2cea4cfe33da04e

.exe 1.7MB

9dfe652042ebe64aff49368a5e7aeaaf2a5567adb056163dc2cea4cfe33da04e

IMPHASH 553ef6236c6cb4268814330cd1e93c7d
SHA256 9dfe652042ebe64aff49368a5e7aeaaf2a5567adb056163dc2cea4cfe33da04e
MD5 3cef5f47f07f15094c9af0d6a9f9937d
SHA1 8153f93a1b8dc86f8c48e49a1bafab797404da70
SHA512 02d622020b0346040e78de301e351506f78b88a1daa7106ddf599a5eda331ab875fc7e364428336a6ea25fe3c0ef66016f2abccae1df0a6c3bb11e6cc7cab263
SSDEEP 49152:30cWXWjEJJ83Os4Gi1t4bdvBUgTGLxiuZ7lJQJt:35+qEr837/HExiuZh2t
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

46467

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

InitCommonControlsEx

shlwapi

SHAutoComplete

kernel32

DeleteFileW DeleteFileA CreateDirectoryA CreateDirectoryW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW GetTickCount WideCharToMultiByte GlobalAlloc GetVersionExW GetFullPathNameA GetFullPathNameW MultiByteToWideChar GetModuleFileNameW FindResourceW GetModuleHandleW HeapAlloc GetProcessHeap HeapFree HeapReAlloc CompareStringA ExitProcess GetLocaleInfoW SetFileAttributesW DosDateTimeToFileTime GetDateFormatW GetTimeFormatW FileTimeToSystemTime FileTimeToLocalFileTime ExpandEnvironmentStringsW WaitForSingleObject Sleep GetExitCodeProcess GetTempPathW MoveFileExW UnmapViewOfFile MapViewOfFile GetCommandLineW CreateFileMappingW SetEnvironmentVariableW OpenFileMappingW GetProcAddress LocalFileTimeToFileTime SystemTimeToFileTime GetSystemTime CompareStringW IsDBCSLeadByte GetCPInfo SetCurrentDirectoryW LoadLibraryW FreeLibrary SetFileAttributesA GetFileAttributesW GetFileAttributesA WriteFile GetStdHandle ReadFile CreateFileW GetCurrentDirectoryW CreateFileA GetFileType SetEndOfFile SetFilePointer MoveFileW SetFileTime GetCurrentProcess CloseHandle SetLastError GetLastError GetNumberFormatW

user32

wvsprintfA wvsprintfW ReleaseDC GetDC SendMessageW SetDlgItemTextW SetFocus EndDialog DestroyIcon SendDlgItemMessageW GetDlgItemTextW GetClassNameW DialogBoxParamW IsWindowVisible WaitForInputIdle SetForegroundWindow GetSysColor PostMessageW LoadBitmapW LoadIconW CharToOemA OemToCharA MapWindowPoints CreateWindowExW SetWindowTextW UpdateWindow LoadCursorW RegisterClassExW SetWindowLongW GetWindowLongW DefWindowProcW PeekMessageW GetMessageW TranslateMessage DispatchMessageW DestroyWindow CopyRect IsWindow CharToOemBuffW MessageBoxW ShowWindow GetDlgItem EnableWindow OemToCharBuffA CharUpperA CharToOemBuffA LoadStringW SetWindowPos GetWindowTextW GetSystemMetrics GetWindow CharUpperW GetWindowRect FindWindowExW GetParent GetClientRect

gdi32

GetDeviceCaps GetObjectW CreateCompatibleBitmap SelectObject StretchBlt CreateCompatibleDC DeleteObject DeleteDC

comdlg32

GetOpenFileNameW CommDlgExtendedError GetSaveFileNameW

advapi32

RegOpenKeyExW LookupPrivilegeValueW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey SetFileSecurityW SetFileSecurityA OpenProcessToken AdjustTokenPrivileges

shell32

SHChangeNotify ShellExecuteExW SHFileOperationW SHGetFileInfoW SHGetSpecialFolderLocation SHGetMalloc SHBrowseForFolderW SHGetPathFromIDListW

ole32

OleUninitialize OleInitialize CoCreateInstance CreateStreamOnHGlobal CLSIDFromString

oleaut32

VariantInit