8b588bf5db57e8a9e4d50d62bffd0cfd154158c882533388f9e74fb26ea8d69e

Sharing

Copy URL Twitter E-mail

General

Target
8b588bf5db57e8a9e4d50d62bffd0cfd154158c882533388f9e74fb26ea8d69e
Size 731KB
Sample220219-lbyj2sbdam
SHA256 8b588bf5db57e8a9e4d50d62bffd0cfd154158c882533388f9e74fb26ea8d69e
MD5 b8157612ee8f2c2ff4e508cb92af3c2c
SHA1 53370fb3b857e9b0967821eb88178c6b33c17b0a
SHA512 e267bc6a87319d6bf1303635e8dcca383cc6ae6aeba142cd66b14d7ac4105681988d0b49c93e12df3c85535dc322fd6d2aa4941653988363405af6c188338688
SSDEEP 12288:cKqaDR7HMViJfUCYntdHuQFCBjBV1AFBQ3n/o/huU5B0:cKpVHMUfUDtdfFQ0QPEhN0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

8b588bf5db57e8a9e4d50d62bffd0cfd154158c882533388f9e74fb26ea8d69e

.exe 731KB

8b588bf5db57e8a9e4d50d62bffd0cfd154158c882533388f9e74fb26ea8d69e

IMPHASH bc70c4fa605f17c85050b7c7b6d42e44
SHA256 8b588bf5db57e8a9e4d50d62bffd0cfd154158c882533388f9e74fb26ea8d69e
MD5 b8157612ee8f2c2ff4e508cb92af3c2c
SHA1 53370fb3b857e9b0967821eb88178c6b33c17b0a
SHA512 e267bc6a87319d6bf1303635e8dcca383cc6ae6aeba142cd66b14d7ac4105681988d0b49c93e12df3c85535dc322fd6d2aa4941653988363405af6c188338688
SSDEEP 12288:cKqaDR7HMViJfUCYntdHuQFCBjBV1AFBQ3n/o/huU5B0:cKpVHMUfUDtdfFQ0QPEhN0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27088

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

OpenProcessToken GetTokenInformation RegSetValueExA EqualSid RegQueryValueExA LookupPrivilegeValueA RegCreateKeyExA RegOpenKeyExA RegQueryInfoKeyA RegDeleteValueA AllocateAndInitializeSid FreeSid AdjustTokenPrivileges RegCloseKey

kernel32

GetPrivateProfileIntA GetFileAttributesA IsDBCSLeadByte GetSystemDirectoryA GlobalUnlock GetShortPathNameA CreateDirectoryA FindFirstFileA GetLastError GetProcAddress RemoveDirectoryA SetFileAttributesA GlobalFree FindClose GetPrivateProfileStringA LoadLibraryA LocalAlloc WritePrivateProfileStringA GetModuleFileNameA FindNextFileA CompareStringA _lopen CloseHandle LocalFree DeleteFileA ExitProcess DosDateTimeToFileTime CreateFileA FindResourceA GlobalAlloc ExpandEnvironmentStringsA LoadResource WaitForSingleObject SetEvent GetModuleHandleW FormatMessageA SetFileTime WriteFile GetDriveTypeA GetVolumeInformationA TerminateThread SizeofResource CreateEventA GetExitCodeProcess CreateProcessA _llseek SetCurrentDirectoryA GetTempFileNameA ResetEvent LockResource GetSystemInfo LoadLibraryExA CreateMutexA GetCurrentDirectoryA GetVersionExA GetVersion GetTempPathA CreateThread LocalFileTimeToFileTime SetFilePointer GetWindowsDirectoryA lstrcmpA _lclose GlobalLock GetCurrentProcess FreeResource FreeLibrary Sleep GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess OutputDebugStringA RtlUnwind GetModuleHandleA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount EnumResourceLanguagesA MulDiv GetDiskFreeSpaceA ReadFile

gdi32

GetDeviceCaps

user32

GetDC SendMessageA SetForegroundWindow MsgWaitForMultipleObjects SendDlgItemMessageA GetWindowRect MessageBoxA GetWindowLongA PeekMessageA ReleaseDC GetDlgItem SetWindowPos ShowWindow DispatchMessageA SetWindowTextA EnableWindow CallWindowProcA DialogBoxIndirectParamA GetDlgItemTextA LoadStringA MessageBeep CharUpperA CharNextA ExitWindowsEx CharPrevA EndDialog GetDesktopWindow SetDlgItemTextA SetWindowLongA GetSystemMetrics

msvcrt

memset ?terminate@@YAXXZ _controlfp memcpy _ismbblead __p__fmode _cexit _exit exit __set_app_type __getmainargs _acmdln _initterm _amsg_exit __p__commode _XcptFilter _errno _vsnprintf __setusermatherr

comctl32

ord17

cabinet

ord22 ord23 ord21 ord20

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA