03bd708a5f9411d190d3ac363d0b01eaa4d0c8625d9b68951e5a6448d659495c

Sharing

Copy URL Twitter E-mail

General

Target
03bd708a5f9411d190d3ac363d0b01eaa4d0c8625d9b68951e5a6448d659495c
Size 550KB
Sample220412-mkyf3saefq
SHA256 03bd708a5f9411d190d3ac363d0b01eaa4d0c8625d9b68951e5a6448d659495c
MD5 9cf986a644dd4f06d9387f25a6da6085
SHA1 80a3cdfe0972a699c38e044a539d49c70007d22b
SHA512 445720d3300c25589c9333a001c985e26cd9d700f059f9c0c5cdee75c8469b159101a2101a7ab63f5cd9794600865085df31d955862adbccdfbd77314bf93aca
SSDEEP 12288:et1GYxq+AVzmKoXmysHMZmaOeVIKjoiUBZ8TOXXGN93Wa:etQkQmKoXmysHMZDVIDWUa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

03bd708a5f9411d190d3ac363d0b01eaa4d0c8625d9b68951e5a6448d659495c

.exe 550KB

03bd708a5f9411d190d3ac363d0b01eaa4d0c8625d9b68951e5a6448d659495c

IMPHASH 3743526d94457fb013584724635b7f97
SHA256 03bd708a5f9411d190d3ac363d0b01eaa4d0c8625d9b68951e5a6448d659495c
MD5 9cf986a644dd4f06d9387f25a6da6085
SHA1 80a3cdfe0972a699c38e044a539d49c70007d22b
SHA512 445720d3300c25589c9333a001c985e26cd9d700f059f9c0c5cdee75c8469b159101a2101a7ab63f5cd9794600865085df31d955862adbccdfbd77314bf93aca
SSDEEP 12288:et1GYxq+AVzmKoXmysHMZmaOeVIKjoiUBZ8TOXXGN93Wa:etQkQmKoXmysHMZDVIDWUa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

190256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleOutputCP WriteConsoleA GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetProcessHeap GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount IsValidCodePage GetOEMCP GetACP HeapReAlloc HeapSize HeapAlloc VirtualFree HeapFree HeapCreate HeapDestroy GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemTimeAsFileTime GetTickCount GetStartupInfoA SetHandleCount SetStdHandle CreateFileA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess VirtualAlloc OutputDebugStringW GetFileType WriteConsoleW OutputDebugStringA GetStdHandle DebugBreak ExitProcess GetModuleFileNameA RaiseException RtlUnwind IsBadReadPtr HeapValidate GetStartupInfoW SetEndOfFile CreateFileMappingA FlushFileBuffers SetFilePointer WriteFile ReadFile DuplicateHandle InterlockedIncrement GetCurrentThread GlobalFlags lstrlenA lstrcmpA FormatMessageW GetModuleHandleA SetEvent CompareStringW LoadLibraryA lstrcmpW GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetVersionExA WideCharToMultiByte GetCurrentProcessId TlsGetValue LocalReAlloc TlsSetValue GlobalAlloc GlobalReAlloc GlobalLock TlsFree GlobalHandle GlobalUnlock GlobalFree TlsAlloc LocalAlloc LocalFree LoadResource SizeofResource FindResourceW FreeLibrary GetDateFormatW InterlockedDecrement EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection MultiByteToWideChar lstrlenW GetModuleFileNameW GetProcAddress GetAtomNameW GlobalGetAtomNameW GetLastError SetLastError MapViewOfFile UnmapViewOfFile OpenEventA GetVolumeInformationW GetSystemTime CloseHandle VirtualProtect GetSystemInfo LockResource GetTempPathW CreateFileW GetFileAttributesW GetVersionExW Sleep LoadLibraryW OpenProcess GetModuleHandleW QueryPerformanceCounter GetCurrentProcess CreateProcessW GetCPInfo

user32

GetWindow GetTopWindow EndDeferWindowPos CopyRect BeginDeferWindowPos DeferWindowPos EqualRect ScreenToClient AdjustWindowRectEx SetActiveWindow DispatchMessageW GetSysColor MapWindowPoints LoadIconW RegisterClassW GetClassInfoW CreateWindowExW RegisterWindowMessageW ValidateRect GetSysColorBrush LoadBitmapW FillRect DrawTextW DrawTextExW GrayStringW CreatePopupMenu IsMenu CheckMenuItem EnableMenuItem GetMenuItemCount GetMenuItemID GetMenuState GetMenuItemInfoW GetSubMenu InsertMenuItemW ModifyMenuW SetMenuItemBitmaps LoadMenuW ClientToScreen ReleaseDC GetWindowDC GetActiveWindow GetDesktopWindow GetMenuCheckMarkDimensions RemovePropW BringWindowToTop InvalidateRect IsWindowVisible ShowOwnedPopups GetCapture SetForegroundWindow GetForegroundWindow LoadCursorW SetWindowTextW SetRectEmpty SetCursor ReleaseCapture LoadAcceleratorsW TranslateAcceleratorW DestroyMenu ReuseDDElParam UnpackDDElParam GetClipboardFormatNameA GetClipboardFormatNameW SystemParametersInfoW PtInRect InflateRect GetCursorPos GetClassNameW GetWindowTextW AppendMenuW WinHelpW TrackPopupMenu GetDlgItem GetKeyState GetAsyncKeyState RegisterClassExW GetDC GetClassInfoExW DestroyWindow GetDlgCtrlID SetWindowsHookExW CallNextHookEx GetClassLongW SetPropW DefWindowProcW SetMenu GetMenu GetMessageTime SetWindowLongW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetSystemMetrics MessageBoxW GetWindowLongW GetParent GetLastActivePopup IsWindowEnabled EnableWindow GetWindowThreadProcessId TabbedTextOutW PostMessageW SendMessageW IsWindow UnhookWindowsHookEx PeekMessageW PostQuitMessage SetFocus GetClientRect FindWindowW GetFocus GetMessageW GetWindowTextLengthW EnumChildWindows ShowWindow UpdateWindow CallWindowProcW GetMessagePos GetPropW

comctl32

ord17 ImageList_DragLeave ImageList_BeginDrag _TrackMouseEvent

comdlg32

FindTextW GetFileTitleW GetOpenFileNameW GetSaveFileNameW

ole32

StringFromCLSID CoUninitialize CoInitialize CoTaskMemFree CoTaskMemAlloc

oleaut32

VariantInit VariantChangeType VariantClear

shlwapi

PathGetArgsW

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW RegCreateKeyW SetThreadToken RevertToSelf OpenThreadToken

winmm

timeBeginPeriod

xolehlp

ord7

imm32

ImmGetContext ImmGetCompositionStringW ImmSetCompositionWindow ImmSetCompositionFontW

gdi32

SetWindowExtEx ScaleWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode DeleteObject SetBkMode RestoreDC SaveDC DeleteDC Escape GetTextExtentPoint32W TextOutW GetPixel BitBlt RectVisible PtVisible SelectObject GetDeviceCaps CreateCompatibleDC CreateCompatibleBitmap CreateBitmap CreateFontIndirectW CreatePatternBrush CreateSolidBrush GetObjectType GetStockObject GetObjectW SetBkColor SetTextColor GetClipBox ExtTextOutW

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

shell32

DragQueryFileW DragFinish

oleacc

LresultFromObject CreateStdAccessibleObject