d765e722e295969c0a5c2d90f549db8b89ab617900bf4698db41c7cdad993bb9

Sharing

Copy URL Twitter E-mail

General

Target
d765e722e295969c0a5c2d90f549db8b89ab617900bf4698db41c7cdad993bb9
Size 338KB
Sample220419-c4117sgdar
SHA256 d765e722e295969c0a5c2d90f549db8b89ab617900bf4698db41c7cdad993bb9
MD5 04fb36199787f2e3e2135611a38321eb
SHA1 65559245709fe98052eb284577f1fd61c01ad20d
SHA512 533d6603f6e2a77bd1b2c6591a135c4717753d53317c1be06e43774e896d9543bcd0ea6904a0688aa84b2d8424641d68994b1e7dc4aa46d66c36feecb6145444
SSDEEP 6144:sWmw0EuCN0pLWgTO3x5N22vWvLRKKAX5l++SybIvC:sWkEuCaNT85I2vCMX5l+ZRv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d765e722e295969c0a5c2d90f549db8b89ab617900bf4698db41c7cdad993bb9

.exe 338KB

d765e722e295969c0a5c2d90f549db8b89ab617900bf4698db41c7cdad993bb9

IMPHASH 7e8ad4139efc6cbcf31df3bc4b291dd8
SHA256 d765e722e295969c0a5c2d90f549db8b89ab617900bf4698db41c7cdad993bb9
MD5 04fb36199787f2e3e2135611a38321eb
SHA1 65559245709fe98052eb284577f1fd61c01ad20d
SHA512 533d6603f6e2a77bd1b2c6591a135c4717753d53317c1be06e43774e896d9543bcd0ea6904a0688aa84b2d8424641d68994b1e7dc4aa46d66c36feecb6145444
SSDEEP 6144:sWmw0EuCN0pLWgTO3x5N22vWvLRKKAX5l++SybIvC:sWkEuCaNT85I2vCMX5l+ZRv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

7680

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_except_handler3 memcpy memmove _vsnprintf _vsnwprintf _purecall memset

kernel32

LoadLibraryW FreeLibrary GetProcAddress WideCharToMultiByte MultiByteToWideChar lstrcmpA GlobalLock GlobalAlloc GlobalUnlock GlobalFree CreateMutexW ReleaseMutex FindResourceExW LoadResource SizeofResource LockResource CreateProcessW SetFilePointerEx FindNextFileW SystemTimeToFileTime FileTimeToSystemTime FileTimeToLocalFileTime GetSystemTime GetDateFormatW GetTimeFormatW GetCurrentThreadId HeapReAlloc HeapAlloc HeapFree GetProcessHeap GetEnvironmentVariableW CopyFileExW GetUserDefaultUILanguage DeleteCriticalSection FindClose FindFirstFileW DeleteFileW GetFileTime SetLastError GetFileSizeEx FlushFileBuffers ReadFile WriteFile SetFileTime ResumeThread EnterCriticalSection LeaveCriticalSection InitializeCriticalSection QueryPerformanceCounter SetFileAttributesW CreateFileW GetFileAttributesW Sleep GetTickCount MoveFileExW ExpandEnvironmentStringsW GetVolumeInformationW GetDiskFreeSpaceExW WaitForMultipleObjects ResetEvent GetTempPathW GetLogicalDrives GetDriveTypeW LocalFree CloseHandle CreateEventW GetLastError GetHandleInformation SetThreadPriority GetModuleFileNameW GetCurrentThread GetModuleHandleW SetEvent GetComputerNameW WaitForSingleObject SetErrorMode GetCommandLineW ExitProcess CreateThread

user32

MessageBoxIndirectW InSendMessage ClientToScreen GetWindowLongW GetClassNameW GetCaretPos TrackPopupMenu AppendMenuW GetCursorPos CreatePopupMenu SetMenuDefaultItem DestroyMenu LoadIconW CloseClipboard EmptyClipboard OpenClipboard SetClipboardData SystemParametersInfoW ScrollWindowEx GetSystemMetrics UpdateWindow SetScrollInfo MessageBoxW EndPaint ScreenToClient GetWindowRect DrawTextW GetParent GetClientRect IsDialogMessageW DestroyWindow BeginPaint DrawFocusRect IntersectRect GetDlgItem SendMessageW GetDlgCtrlID SetWindowTextW MoveWindow GetDC ReleaseDC CharLowerW PostQuitMessage MsgWaitForMultipleObjects TranslateMessage PeekMessageW DispatchMessageW SetTimer PostMessageW SetFocus RegisterClassExW FlashWindowEx InvalidateRect GetWindowTextW MonitorFromWindow SetWindowPos ShowWindow GetForegroundWindow AdjustWindowRectEx IsWindowVisible GetMonitorInfoW DefWindowProcW DialogBoxParamW SetWindowLongW EndDialog CreateDialogParamW MonitorFromPoint UnregisterClassW SetForegroundWindow GetKeyState ReplyMessage GetScrollInfo CreateWindowExW

advapi32

CryptAcquireContextW RegSetValueExW RegEnumKeyExW RegFlushKey CryptSetKeyParam CryptGetKeyParam CryptReleaseContext CryptImportKey CryptEncrypt CryptGenKey CryptDestroyKey CryptDecrypt CryptGetHashParam CryptCreateHash CryptDestroyHash CryptHashData RegCreateKeyExW RegCloseKey CryptExportKey RegQueryValueExW RegQueryInfoKeyW RegDeleteKeyW RegDeleteValueW RegEnumValueW RegOpenKeyExW

shell32

SHGetFileInfoW SHGetFolderPathW ShellExecuteExW CommandLineToArgvW

uxtheme

SetWindowTheme

gdi32

GetDeviceCaps CreateSolidBrush GetObjectW CreateCompatibleDC SelectObject DeleteObject SetBkMode SetBkColor DeleteDC SetTextColor GetObjectA CreateFontIndirectW

comctl32

InitCommonControlsEx ord413 ord410

shlwapi

StrCmpW StrCmpNW StrCmpIW PathMatchSpecW PathRemoveBackslashW PathAddBackslashW ord12 PathFindFileNameW PathRemoveFileSpecW PathUnquoteSpacesW StrChrW PathQuoteSpacesW

msimg32

AlphaBlend

winhttp

WinHttpConnect WinHttpCloseHandle WinHttpQueryHeaders WinHttpWriteData WinHttpOpenRequest WinHttpReadData WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReceiveResponse WinHttpOpen

gdiplus

GdipAlloc GdipDisposeImage GdipCreateHBITMAPFromBitmap GdipCloneImage GdiplusStartup GdipDeleteBrush GdipCreateBitmapFromStream GdipCreateFontFromLogfontA GdipSetStringFormatLineAlign GdipDeleteFont GdipDeleteGraphics GdipDrawImageRectI GdipSetStringFormatAlign GdipCreateSolidFill GdipDrawString GdipCreateFromHDC GdipSetStringFormatHotkeyPrefix GdipCreateStringFormat GdipDeleteStringFormat GdipCreateFontFromDC GdipGetImageHeight GdipGetImageWidth GdiplusShutdown GdipFree GdipCloneBrush

ole32

CoInitializeEx CoUninitialize CoTaskMemFree StringFromGUID2

crypt32

CryptImportPublicKeyInfo CryptStringToBinaryA CryptDecodeObjectEx