704c5fbb5766bca421e96cbfe0b4670a05fb2f09680983c2a681d45354d1421f

Sharing

Copy URL Twitter E-mail

General

Target
704c5fbb5766bca421e96cbfe0b4670a05fb2f09680983c2a681d45354d1421f
Size 1.8MB
Sample220310-b2xqbsfdgr
SHA256 704c5fbb5766bca421e96cbfe0b4670a05fb2f09680983c2a681d45354d1421f
MD5 66a22d6297647aa45056ce1410befd39
SHA1 05d13a6b47f13fa9e49e9bc95291562afa46c2a6
SHA512 212efaa509f2e70c68236ce6a484ec43e804cdda902fc33c70b3e872061c56d2620c0ab164b74157c1d8cfe06a8fe0a89e67d5b84a48265329d08a9f524efda1
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

704c5fbb5766bca421e96cbfe0b4670a05fb2f09680983c2a681d45354d1421f

.exe 1.8MB

704c5fbb5766bca421e96cbfe0b4670a05fb2f09680983c2a681d45354d1421f

IMPHASH 3e5b9923ab1e9eb27fe6580af9265696
SHA256 704c5fbb5766bca421e96cbfe0b4670a05fb2f09680983c2a681d45354d1421f
MD5 66a22d6297647aa45056ce1410befd39
SHA1 05d13a6b47f13fa9e49e9bc95291562afa46c2a6
SHA512 212efaa509f2e70c68236ce6a484ec43e804cdda902fc33c70b3e872061c56d2620c0ab164b74157c1d8cfe06a8fe0a89e67d5b84a48265329d08a9f524efda1
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

27328

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

GetTokenInformation RegDeleteValueA RegOpenKeyExA RegQueryInfoKeyA FreeSid OpenProcessToken RegSetValueExA RegCreateKeyExA LookupPrivilegeValueA AllocateAndInitializeSid RegQueryValueExA EqualSid RegCloseKey AdjustTokenPrivileges

kernel32

_lopen _llseek CompareStringA GetLastError GetFileAttributesA GetSystemDirectoryA LoadLibraryA DeleteFileA GlobalAlloc GlobalFree CloseHandle WritePrivateProfileStringA IsDBCSLeadByte GetWindowsDirectoryA SetFileAttributesA GetProcAddress GlobalLock LocalFree RemoveDirectoryA FreeLibrary _lclose CreateDirectoryA GetPrivateProfileIntA GetPrivateProfileStringA GlobalUnlock ReadFile SizeofResource WriteFile GetDriveTypeA lstrcmpA SetFileTime SetFilePointer FindResourceA CreateMutexA GetVolumeInformationA WaitForSingleObject FindClose FreeResource GetVersion SetCurrentDirectoryA GetTempPathA LocalFileTimeToFileTime CreateFileA SetEvent TerminateThread GetVersionExA LockResource GetSystemInfo CreateThread ResetEvent LoadResource ExitProcess GetModuleHandleW CreateProcessA FormatMessageA GetTempFileNameA DosDateTimeToFileTime CreateEventA GetExitCodeProcess GetModuleFileNameA LocalAlloc MulDiv GetDiskFreeSpaceA EnumResourceLanguagesA GetTickCount GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetStartupInfoW Sleep ExpandEnvironmentStringsA FindNextFileA GetCurrentProcess GetCurrentDirectoryA FindFirstFileA GetShortPathNameA LoadLibraryExA

gdi32

GetDeviceCaps

user32

SetWindowLongA GetDlgItemTextA DialogBoxIndirectParamA ShowWindow MsgWaitForMultipleObjects SetWindowPos GetDC GetWindowRect DispatchMessageA GetDesktopWindow CharUpperA SetDlgItemTextA ExitWindowsEx MessageBeep EndDialog CharPrevA LoadStringA CharNextA EnableWindow ReleaseDC SetForegroundWindow PeekMessageA GetDlgItem SendMessageA SendDlgItemMessageA MessageBoxA SetWindowTextA GetWindowLongA GetSystemMetrics CallWindowProcA

msvcrt

_controlfp _acmdln _initterm ?terminate@@YAXXZ _except_handler4_common __setusermatherr _ismbblead __p__fmode _cexit _exit exit __set_app_type __getmainargs _amsg_exit __p__commode _XcptFilter memcpy_s _vsnprintf memcpy memset

comctl32

ord17

cabinet

ord21 ord23 ord22 ord20

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA