e3fb27a6761d3a9403ff5b3ddbc86e5231664980149c8fd85bcfb319cc1ebb8c

Sharing

Copy URL Twitter E-mail

General

Target
e3fb27a6761d3a9403ff5b3ddbc86e5231664980149c8fd85bcfb319cc1ebb8c
Size 550KB
Sample220412-mkyf3saefr
SHA256 e3fb27a6761d3a9403ff5b3ddbc86e5231664980149c8fd85bcfb319cc1ebb8c
MD5 ce956c480e303a9f77422054365f8e37
SHA1 8e5f8b5043e92d425a3731cb2c12bec880279974
SHA512 b8e2d0d9924ae5a779571f96518adda997f84e617c3b5b7b0714c2a2238f4b87dfceafc920ec2fa118d402926e47e0a4a69e67a0eeab4b6ef7c7b5ef9f79e5dc
SSDEEP 12288:Jt1GYxq+AVzmKoXmysHMZmaOeVIKjoiUBZ8TOXXGN93Wa:JtQkQmKoXmysHMZDVIDWUa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e3fb27a6761d3a9403ff5b3ddbc86e5231664980149c8fd85bcfb319cc1ebb8c

.exe 550KB

e3fb27a6761d3a9403ff5b3ddbc86e5231664980149c8fd85bcfb319cc1ebb8c

IMPHASH 3743526d94457fb013584724635b7f97
SHA256 e3fb27a6761d3a9403ff5b3ddbc86e5231664980149c8fd85bcfb319cc1ebb8c
MD5 ce956c480e303a9f77422054365f8e37
SHA1 8e5f8b5043e92d425a3731cb2c12bec880279974
SHA512 b8e2d0d9924ae5a779571f96518adda997f84e617c3b5b7b0714c2a2238f4b87dfceafc920ec2fa118d402926e47e0a4a69e67a0eeab4b6ef7c7b5ef9f79e5dc
SSDEEP 12288:Jt1GYxq+AVzmKoXmysHMZmaOeVIKjoiUBZ8TOXXGN93Wa:JtQkQmKoXmysHMZDVIDWUa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

190256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleOutputCP WriteConsoleA GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetProcessHeap GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount IsValidCodePage GetOEMCP GetACP HeapReAlloc HeapSize HeapAlloc VirtualFree HeapFree HeapCreate HeapDestroy GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemTimeAsFileTime GetTickCount GetStartupInfoA SetHandleCount SetStdHandle CreateFileA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess VirtualAlloc OutputDebugStringW GetFileType WriteConsoleW OutputDebugStringA GetStdHandle DebugBreak ExitProcess GetModuleFileNameA RaiseException RtlUnwind IsBadReadPtr HeapValidate GetStartupInfoW SetEndOfFile CreateFileMappingA FlushFileBuffers SetFilePointer WriteFile ReadFile DuplicateHandle InterlockedIncrement GetCurrentThread GlobalFlags lstrlenA lstrcmpA FormatMessageW GetModuleHandleA SetEvent CompareStringW LoadLibraryA lstrcmpW GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetVersionExA WideCharToMultiByte GetCurrentProcessId TlsGetValue LocalReAlloc TlsSetValue GlobalAlloc GlobalReAlloc GlobalLock TlsFree GlobalHandle GlobalUnlock GlobalFree TlsAlloc LocalAlloc LocalFree LoadResource SizeofResource FindResourceW FreeLibrary GetDateFormatW InterlockedDecrement EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection MultiByteToWideChar lstrlenW GetModuleFileNameW GetProcAddress GetAtomNameW GlobalGetAtomNameW GetLastError SetLastError MapViewOfFile UnmapViewOfFile OpenEventA GetVolumeInformationW GetSystemTime CloseHandle VirtualProtect GetSystemInfo LockResource GetTempPathW CreateFileW GetFileAttributesW GetVersionExW Sleep LoadLibraryW OpenProcess GetModuleHandleW QueryPerformanceCounter GetCurrentProcess CreateProcessW GetCPInfo

user32

GetWindow GetTopWindow EndDeferWindowPos CopyRect BeginDeferWindowPos DeferWindowPos EqualRect ScreenToClient AdjustWindowRectEx SetActiveWindow DispatchMessageW GetSysColor MapWindowPoints LoadIconW RegisterClassW GetClassInfoW CreateWindowExW RegisterWindowMessageW ValidateRect GetSysColorBrush LoadBitmapW FillRect DrawTextW DrawTextExW GrayStringW CreatePopupMenu IsMenu CheckMenuItem EnableMenuItem GetMenuItemCount GetMenuItemID GetMenuState GetMenuItemInfoW GetSubMenu InsertMenuItemW ModifyMenuW SetMenuItemBitmaps LoadMenuW ClientToScreen ReleaseDC GetWindowDC GetActiveWindow GetDesktopWindow GetMenuCheckMarkDimensions RemovePropW BringWindowToTop InvalidateRect IsWindowVisible ShowOwnedPopups GetCapture SetForegroundWindow GetForegroundWindow LoadCursorW SetWindowTextW SetRectEmpty SetCursor ReleaseCapture LoadAcceleratorsW TranslateAcceleratorW DestroyMenu ReuseDDElParam UnpackDDElParam GetClipboardFormatNameA GetClipboardFormatNameW SystemParametersInfoW PtInRect InflateRect GetCursorPos GetClassNameW GetWindowTextW AppendMenuW WinHelpW TrackPopupMenu GetDlgItem GetKeyState GetAsyncKeyState RegisterClassExW GetDC GetClassInfoExW DestroyWindow GetDlgCtrlID SetWindowsHookExW CallNextHookEx GetClassLongW SetPropW DefWindowProcW SetMenu GetMenu GetMessageTime SetWindowLongW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetSystemMetrics MessageBoxW GetWindowLongW GetParent GetLastActivePopup IsWindowEnabled EnableWindow GetWindowThreadProcessId TabbedTextOutW PostMessageW SendMessageW IsWindow UnhookWindowsHookEx PeekMessageW PostQuitMessage SetFocus GetClientRect FindWindowW GetFocus GetMessageW GetWindowTextLengthW EnumChildWindows ShowWindow UpdateWindow CallWindowProcW GetMessagePos GetPropW

comctl32

ord17 ImageList_DragLeave ImageList_BeginDrag _TrackMouseEvent

comdlg32

FindTextW GetFileTitleW GetOpenFileNameW GetSaveFileNameW

ole32

StringFromCLSID CoUninitialize CoInitialize CoTaskMemFree CoTaskMemAlloc

oleaut32

VariantInit VariantChangeType VariantClear

shlwapi

PathGetArgsW

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW RegCreateKeyW SetThreadToken RevertToSelf OpenThreadToken

winmm

timeBeginPeriod

xolehlp

ord7

imm32

ImmGetContext ImmGetCompositionStringW ImmSetCompositionWindow ImmSetCompositionFontW

gdi32

SetWindowExtEx ScaleWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode DeleteObject SetBkMode RestoreDC SaveDC DeleteDC Escape GetTextExtentPoint32W TextOutW GetPixel BitBlt RectVisible PtVisible SelectObject GetDeviceCaps CreateCompatibleDC CreateCompatibleBitmap CreateBitmap CreateFontIndirectW CreatePatternBrush CreateSolidBrush GetObjectType GetStockObject GetObjectW SetBkColor SetTextColor GetClipBox ExtTextOutW

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

shell32

DragQueryFileW DragFinish

oleacc

LresultFromObject CreateStdAccessibleObject