42ccd61f1357d37d8c439082e195eed6eb0d3a6b060852ce57161b469919f778

Sharing

Copy URL Twitter E-mail

General

Target
42ccd61f1357d37d8c439082e195eed6eb0d3a6b060852ce57161b469919f778
Size 122.5MB
Sample220218-j5f6radbep
SHA256 42ccd61f1357d37d8c439082e195eed6eb0d3a6b060852ce57161b469919f778
MD5 c893af41e33ca5da0a8acf8ac623c2ae
SHA1 65412f1aa3839e41a00adc2ebc7162880c258be7
SHA512 20474b4ab6e85a7b33d544a5f8cdb5d6b03b86ee67b07a54a17ee6358d51abdcd0711a78999fceb83f971590707c62941f0d2c5d18abc1c091694ea29ceb517f
SSDEEP 3145728:zvTXJ9SA7SJ4rS5rCf5PSiDLJHYbxYUBQDLfy/LEXwzce:zTJsrc56YLJHYVlBQHKN4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

42ccd61f1357d37d8c439082e195eed6eb0d3a6b060852ce57161b469919f778

.exe 122.5MB

42ccd61f1357d37d8c439082e195eed6eb0d3a6b060852ce57161b469919f778

IMPHASH ad3427a846d7d2b1db90e6b34d95e738
SHA256 42ccd61f1357d37d8c439082e195eed6eb0d3a6b060852ce57161b469919f778
MD5 c893af41e33ca5da0a8acf8ac623c2ae
SHA1 65412f1aa3839e41a00adc2ebc7162880c258be7
SHA512 20474b4ab6e85a7b33d544a5f8cdb5d6b03b86ee67b07a54a17ee6358d51abdcd0711a78999fceb83f971590707c62941f0d2c5d18abc1c091694ea29ceb517f
SSDEEP 3145728:zvTXJ9SA7SJ4rS5rCf5PSiDLJHYbxYUBQDLfy/LEXwzce:zTJsrc56YLJHYVlBQHKN4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

1938917

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ShellExecuteA

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

winmm

timeKillEvent timeSetEvent

userenv

GetUserProfileDirectoryW

ws2_32

WSAAsyncSelect

netapi32

NetApiBufferFree NetShareEnum

kernel32

InitializeCriticalSectionAndSpinCount TryEnterCriticalSection DeleteCriticalSection Sleep CreateFileW FlushFileBuffers SetFilePointer WriteFile CloseHandle SetEvent GetStdHandle DuplicateHandle GetLastError WaitForSingleObject GetCurrentProcess GetCurrentProcessId TerminateProcess GetExitCodeProcess GetStartupInfoW OpenProcess GetConsoleWindow GetCurrentThreadId SetThreadPriority GetExitCodeThread TlsAlloc TlsGetValue TlsSetValue TlsFree CreateDirectoryW DeleteFileW GetFileAttributesW GetFileAttributesExW RemoveDirectoryW SetEndOfFile SetFileAttributesW SetFileTime CopyFileW MoveFileExW GetCurrentDirectoryW GetLongPathNameW GetTempPathW GetSystemDirectoryW WideCharToMultiByte CreateEventW ReadFile FindClose FindFirstFileW FindNextFileW LocalFree FormatMessageW ResetEvent ReleaseMutex WaitForMultipleObjects OutputDebugStringW IsProcessorFeaturePresent GetModuleHandleW GetProcAddress WaitForSingleObjectEx GetCommandLineW QueryPerformanceCounter QueryPerformanceFrequency GetTickCount64 GetSystemTime GetLocalTime CreateThread GetCurrentThread GetThreadPriority TerminateThread ResumeThread GetDateFormatW GetTimeFormatW GetLocaleInfoW GetCurrencyFormatW GetUserDefaultLCID GetUserPreferredUILanguages GetModuleFileNameW GetFileInformationByHandle GetSystemInfo GetLogicalDrives GetVolumePathNamesForVolumeNameW SetErrorMode DeviceIoControl MoveFileW TzSpecificLocalTimeToSystemTime FileTimeToSystemTime SystemTimeToFileTime GetComputerNameW GetFileType SetFilePointerEx CreateFileMappingW MapViewOfFile UnmapViewOfFile UnregisterWaitEx RegisterWaitForSingleObject FindFirstFileExW FreeLibrary GetModuleHandleExW LoadLibraryW LoadLibraryA CreateFileA InitializeCriticalSectionEx EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx RaiseException GetLocaleInfoEx GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeSListHead IsDebuggerPresent RtlUnwind InterlockedPushEntrySList SetLastError LoadLibraryExW ExitProcess ExitThread FreeLibraryAndExitThread GetCommandLineA GetConsoleMode ReadConsoleW GetConsoleOutputCP SetStdHandle GetFileSizeEx HeapFree HeapReAlloc HeapAlloc CompareStringW LCMapStringW IsValidLocale EnumSystemLocalesW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap HeapSize WriteConsoleW InitOnceComplete InitOnceBeginInitialize SleepConditionVariableSRW SleepConditionVariableCS WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock VirtualFree VirtualAlloc CreateMutexA GetUserGeoID GetGeoInfoW GetDynamicTimeZoneInformation LCIDToLocaleName LocaleNameToLCID SetEnvironmentVariableW GetTimeZoneInformation GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetFileInformationByHandleEx GetFullPathNameW ResolveLocaleName GetCurrencyFormatEx GetNumberFormatEx

user32

TranslateMessage CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW SetWindowLongW GetWindowLongW KillTimer SetTimer MsgWaitForMultipleObjectsEx GetQueueStatus DestroyWindow CreateWindowExW UnregisterClassW RegisterClassW DispatchMessageW PostMessageW PeekMessageW DefWindowProcW

advapi32

GetSidSubAuthorityCount GetSidSubAuthority RegSetValueExW RegQueryInfoKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW BuildTrusteeWithSidW GetNamedSecurityInfoW GetEffectiveRightsFromAclW LookupAccountSidW MapGenericMask GetTokenInformation GetLengthSid FreeSid DuplicateToken CopySid AllocateAndInitializeSid AccessCheck OpenProcessToken SystemFunction036 RegQueryValueExW RegOpenKeyExW RegCloseKey

ole32

CoUninitialize CoCreateInstance CoTaskMemFree CoInitialize