84ced70af586582a43dfd929b6a9fb051eca399ca234c3e2d9a4385f21907484
- SHA256 84ced70af586582a43dfd929b6a9fb051eca399ca234c3e2d9a4385f21907484
Static task
static1
Behavioral task
behavioral1
Sample
appraisal.exe
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
appraisal.exe
Resource
win10v2004-en-20220112
windows10-2004_x64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
property.exe
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
General
- Target 84ced70af586582a43dfd929b6a9fb051eca399ca234c3e2d9a4385f21907484
- Size 540KB
- Sample220221-ncppmsahgj
- SHA256 84ced70af586582a43dfd929b6a9fb051eca399ca234c3e2d9a4385f21907484
- MD5 7a2f01abb8b460cc4e69910e074551ed
- SHA1 b537336f87d101ee7159cb85013c3f4f8d9fa9c8
- SHA512 c4d552e139835f7963ad43a59432aab0599cde0a93f50d7dd9830f08d54188dd4d25407f1978671b18a1bb344df309587fbe86750d4eb4bc4ad2a88a8d0857e9
- SSDEEP 12288:77r3CRsh6ZGjBOSoB791wOZiiSdSI4B35HZEekO1Ee8p:Hr4shymiPZiTdZ41ZjHEew
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
84ced70af586582a43dfd929b6a9fb051eca399ca234c3e2d9a4385f21907484.zip 540KB
-
appraisal.exe.exe 353KB
-
property.exe.exe 715KB
appraisal.exe
- IMPHASH 22673e55edaa8d924306e1f5da0283cf
- SHA256 220ab940326b10e217ed23f4806edd06fac3cf52cbd3c8863863eac6893b02ea
- MD5 d7fbaec1422aa58ccbce61274c369343
- SHA1 8719753b80fb4cc585532a37f7e974bc0e1c91e5
- SHA512 8efbf83841cd7283ae80212047166db6a13fe335de085839e4bbb593a22e90aec4690a9c5cd282b5fbdd3ae3c9dedcf88811af7d9f2730499427746bf758b622
- SSDEEP 6144:B+n6NQ5/BZ2rLzoYM4TOzTCdSGbbRs+wyxTKXecHPhG9woB7OWhbWANQ:B+6OVa3oYM4eT0bRshi9cHpGSoB7Dg
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
38069
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetConsoleMode
ReadConsoleInputA
CreateFileW
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
HeapReAlloc
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
PeekConsoleInputA
HeapSize
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CreateFileA
SetStdHandle
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
LoadLibraryW
Sleep
GetProcessHeap
HeapAlloc
GetStdHandle
GetStringTypeW
SetConsoleCursorPosition
FreeEnvironmentStringsW
GetModuleFileNameA
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
EnterCriticalSection
LeaveCriticalSection
GetLastError
MoveFileA
DeleteFileA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetTimeZoneInformation
HeapFree
CloseHandle
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetFilePointer
RtlUnwind
GetFileAttributesA
IsProcessorFeaturePresent
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
WriteFile
GetModuleFileNameW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
MultiByteToWideChar
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetNumberOfConsoleInputEvents
urlmon
HlinkNavigateMoniker
HlinkGoForward
UrlMkBuildVersion
pdh
PdhVbGetDoubleCounterValue
PdhAddCounterA
PdhVbGetOneCounterPath
ws2_32
WSAAsyncGetHostByAddr
WSALookupServiceNextW
WSARecvDisconnect
bind
mapi32
ord49
ord54
ord126
ord72
mscms
SetStandardColorSpaceProfileA
AssociateColorProfileWithDeviceA
EnumColorProfilesW
rpcrt4
NdrConformantArrayUnmarshall
NdrComplexStructBufferSize
RpcMgmtEnableIdleCleanup
gdi32
CreateDIBPatternBrush
GdiSetBatchLimit
StartFormPage
RemoveFontResourceW
GetWorldTransform
ExtTextOutW
GetCurrentObject
ole32
CoInstall
Name
.text
Size
147KB
Virtual Size
146KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
15KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
property.exe
- IMPHASH 22673e55edaa8d924306e1f5da0283cf
- SHA256 0ad637fd2f6be43b412315027c0e2636329b7da0f51a40e80e9ad8c76558bb6b
- MD5 a7ce2f883660a89695ae17ce9c60a7dc
- SHA1 d1d38d629f7d86d854efef65eb81635e4ab5d9f0
- SHA512 b4158764b854f291e83bd47938b64e69029e63dc2f7bb96fc7ae11f3d9895109193e9ee0a2b2aee7d6d0b4022a38d2560cab4393609b58734326971cbd915031
- SSDEEP 12288:kshtVIb/hAjTT3dmxSI493jHZ+ekOzEB81:ksWb6T7dmxZ4xDVJEB+
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
38149
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetConsoleMode
ReadConsoleInputA
CreateFileW
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
HeapReAlloc
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
PeekConsoleInputA
HeapSize
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CreateFileA
SetStdHandle
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
LoadLibraryW
Sleep
GetProcessHeap
HeapAlloc
GetStdHandle
GetStringTypeW
SetConsoleCursorPosition
FreeEnvironmentStringsW
GetModuleFileNameA
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
EnterCriticalSection
LeaveCriticalSection
GetLastError
MoveFileA
DeleteFileA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetTimeZoneInformation
HeapFree
CloseHandle
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetFilePointer
RtlUnwind
GetFileAttributesA
IsProcessorFeaturePresent
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
WriteFile
GetModuleFileNameW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
MultiByteToWideChar
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetNumberOfConsoleInputEvents
urlmon
HlinkNavigateMoniker
HlinkGoForward
UrlMkBuildVersion
pdh
PdhVbGetDoubleCounterValue
PdhAddCounterA
PdhVbGetOneCounterPath
ws2_32
WSAAsyncGetHostByAddr
WSALookupServiceNextW
WSARecvDisconnect
bind
mapi32
ord49
ord54
ord126
ord72
mscms
SetStandardColorSpaceProfileA
AssociateColorProfileWithDeviceA
EnumColorProfilesW
rpcrt4
NdrConformantArrayUnmarshall
NdrComplexStructBufferSize
RpcMgmtEnableIdleCleanup
gdi32
CreateDIBPatternBrush
GdiSetBatchLimit
StartFormPage
RemoveFontResourceW
GetWorldTransform
ExtTextOutW
GetCurrentObject
ole32
CoInstall
Name
.text
Size
147KB
Virtual Size
146KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
15KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
368KB
Virtual Size
368KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ