d69ffa1fd0c833c93e631225c0a3548d85ff5e0476091dc1a37894546c70c096

Sharing

Copy URL Twitter E-mail

General

Target
d69ffa1fd0c833c93e631225c0a3548d85ff5e0476091dc1a37894546c70c096
Size 1.2MB
Sample220221-lymq3acebn
SHA256 d69ffa1fd0c833c93e631225c0a3548d85ff5e0476091dc1a37894546c70c096
MD5 fe266fec96d89096d8c6ecb098416492
SHA1 179395d02ebab83c5e965886ff209de003d2325f
SHA512 8b230b7a7919fb1277f2952f453aeebd9aa9099c11d8128c1eb34d408515567b47f37e6213d092c6eccfa38d00624c25276c2fd5f9a7516c482f738b4710f106
SSDEEP 12288:xd6/UwByn2AkJcrHMkr+2oCu72bi2m98errq5OtrKFb0Ka3LwSuW9xpzz8Q/nm:UAnKcn+2GZHFe0EFbCLwSvSQ/m
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d69ffa1fd0c833c93e631225c0a3548d85ff5e0476091dc1a37894546c70c096

.iso 1.2MB
DHL_JANU.EXE

.exe 736KB

d69ffa1fd0c833c93e631225c0a3548d85ff5e0476091dc1a37894546c70c096

SHA256 d69ffa1fd0c833c93e631225c0a3548d85ff5e0476091dc1a37894546c70c096
MD5 fe266fec96d89096d8c6ecb098416492
SHA1 179395d02ebab83c5e965886ff209de003d2325f
SHA512 8b230b7a7919fb1277f2952f453aeebd9aa9099c11d8128c1eb34d408515567b47f37e6213d092c6eccfa38d00624c25276c2fd5f9a7516c482f738b4710f106
SSDEEP 12288:xd6/UwByn2AkJcrHMkr+2oCu72bi2m98errq5OtrKFb0Ka3LwSuW9xpzz8Q/nm:UAnKcn+2GZHFe0EFbCLwSvSQ/m
MD5 SHA1 SHA512 SSDEEP

DHL_JANU.EXE

IMPHASH e7da020c2fad0c59a3d5e97971484548
SHA256 a39304a39ad9b9427b000045f7f5c60ed7790fe1a79d604ba9379bb94c0da593
MD5 b9ca60bd296e8b80185f531b8fd82a8b
SHA1 39b868b11fe71cc7d0bbb88f3ebb8198648808cc
SHA512 1ab95c7f9c8b5db41d4161b0694545b25a758b3222b6fbfd47123f0c622c2ddfe7574f31026d646d0d026bff77a4c30b7e1e9a03c90925fcdba5f268af0c734e
SSDEEP 12288:7d6/UwByn2AkJcrHMkr+2oCu72bi2m98errq5OtrKFb0Ka3LwSuW9xpzz8Q/nm7:OAnKcn+2GZHFe0EFbCLwSvSQ/m7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RaiseException ReadConsoleW ReadFile CreateFileW WriteConsoleW GetStringTypeW LCMapStringEx SetConsoleCursorPosition LoadLibraryW GetModuleHandleW HeapReAlloc HeapSize OutputDebugStringW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStringsW GetProcessHeap HeapAlloc GetStdHandle GetTickCount64 GetSystemTimeAsFileTime QueryPerformanceCounter GetModuleFileNameA GetCurrentThreadId SetLastError GetCPInfo GetOEMCP GetACP EncodePointer DecodePointer GetLastError InterlockedDecrement ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar GetLocalTime GetCommandLineA IsDebuggerPresent IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection CloseHandle HeapFree InitializeCriticalSectionAndSpinCount RtlUnwind GetFileType DeleteCriticalSection InitOnceExecuteOnce GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess WriteFile GetModuleFileNameW Sleep LoadLibraryExW InterlockedIncrement IsValidCodePage SetEndOfFile

msi

ord122 ord44 ord162 ord133 ord57 ord147 ord109

loadperf

LoadPerfCounterTextStringsA UnloadPerfCounterTextStringsW UnloadPerfCounterTextStringsA

msvfw32

StretchDIB

avifil32

AVIFileExit AVIStreamReadData

pdh

PdhEnumObjectsW PdhSetQueryTimeRange PdhGetDllVersion

wsock32

WSASetBlockingHook WSACancelAsyncRequest bind ord1104 ord1108 ord1130

gdi32

StartDocW GdiGetSpoolFileHandle PolyBezier

mapi32

ord46 ord179 ord166 ord198 ord181 ord22

msacm32

acmDriverPriority acmFilterTagDetailsA