fd58a37bb4ed7ce5a7034abb393ca9c044f90171cd4838f3ae65fe091e098f26

Sharing

Copy URL Twitter E-mail

General

Target
fd58a37bb4ed7ce5a7034abb393ca9c044f90171cd4838f3ae65fe091e098f26
Size 4.1MB
Sample220502-ah8stabhck
SHA256 fd58a37bb4ed7ce5a7034abb393ca9c044f90171cd4838f3ae65fe091e098f26
MD5 a87a354b7939eafbc9bae3a01c9601e6
SHA1 c033d6fd9502ce2e1769e9992c82717582883c25
SHA512 e3319823e085a46705aafc95b2715a6b2200d15d759837235bf1b0b56fa713a391250060b8305ad99ce7508f3d339d0ca3e7afa7ae941dac6b8a128c62092f95
SSDEEP 6144:gm4QP9G+wgVFGOyD+Tl/GJu18SVTtQ/OpoN3f2cfgJOSo/DR3Ni:gmHA+wg9yD+TVnTXQGpg3flfgJs3Ni
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

fd58a37bb4ed7ce5a7034abb393ca9c044f90171cd4838f3ae65fe091e098f26

.exe 4.1MB

fd58a37bb4ed7ce5a7034abb393ca9c044f90171cd4838f3ae65fe091e098f26

IMPHASH 5685e96e5d3d298fc87bd448972c45ef
SHA256 fd58a37bb4ed7ce5a7034abb393ca9c044f90171cd4838f3ae65fe091e098f26
MD5 a87a354b7939eafbc9bae3a01c9601e6
SHA1 c033d6fd9502ce2e1769e9992c82717582883c25
SHA512 e3319823e085a46705aafc95b2715a6b2200d15d759837235bf1b0b56fa713a391250060b8305ad99ce7508f3d339d0ca3e7afa7ae941dac6b8a128c62092f95
SSDEEP 6144:gm4QP9G+wgVFGOyD+Tl/GJu18SVTtQ/OpoN3f2cfgJOSo/DR3Ni:gmHA+wg9yD+TVnTXQGpg3flfgJs3Ni
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

31:51:d7:ee:04:a4:59:90:7c:be:3c:fc:0d:97:c9:e5:b2:fe:0a:91

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

8368

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc LoadLibraryExW GetLastError LoadLibraryA GetProcAddress GetModuleHandleW Sleep WinExec TerminateProcess OutputDebugStringW OpenProcess LoadLibraryW LeaveCriticalSection InitializeCriticalSection GetWindowsDirectoryW GetVersionExW GetTickCount GetTempPathW GetSystemInfo GetSystemDirectoryW GetCurrentProcessId GetCurrentProcess FreeLibrary EnterCriticalSection DeleteCriticalSection CreateMutexW CloseHandle ProcessIdToSessionId CancelDeviceWakeupRequest FreeResource SetHandleInformation CreateEventA FindFirstChangeNotificationA lstrcpyW _llseek GetPrivateProfileSectionW SetFileApisToANSI ReadConsoleOutputAttribute lstrlenW InterlockedExchange GetCPInfoExA IsBadStringPtrW SetErrorMode SetUnhandledExceptionFilter GetEnvironmentVariableA GetDriveTypeW SetInformationJobObject AssignProcessToJobObject _lread ReplaceFileA MoveFileWithProgressA GetEnvironmentStringsA GetTapeStatus CallNamedPipeW SetThreadLocale GetComputerNameA

user32

GetFocus LoadCursorFromFileW LoadCursorA SetForegroundWindow PostMessageW GetForegroundWindow FindWindowW CloseWindow EnableScrollBar SetLayeredWindowAttributes UpdateLayeredWindow wsprintfA LoadAcceleratorsW ClipCursor RealGetWindowClassW CreateAcceleratorTableW CreateMDIWindowW GetWindowWord SetDoubleClickTime InflateRect WINNLSGetEnableStatus CharNextA GetShellWindow GetMenuContextHelpId EnableWindow RemoveMenu DrawTextA BringWindowToTop DrawTextW PostThreadMessageW keybd_event UnregisterClassA GetPriorityClipboardFormat SetMessageQueue RedrawWindow FindWindowA ChildWindowFromPoint LookupIconIdFromDirectory GetKeyboardLayout

gdi32

DeleteEnhMetaFile CreateSolidBrush CreatePatternBrush CloseMetaFile DeleteDC CreateHalftonePalette DeleteColorSpace DeleteMetaFile CreateCompatibleDC STROBJ_bEnum SetFontEnumeration EnumFontFamiliesExW GetColorSpace EngFindResource GdiFlush CreateDCW GetEUDCTimeStamp CreateMetaFileW EngFreeModule GetKerningPairsA STROBJ_vEnumStart CloseFigure GetFontAssocStatus EndPath CreateRectRgn GdiConvertAndCheckDC GetHFONT AnyLinkedFonts GdiEntry8 EngAcquireSemaphore EngCreatePalette

advapi32

RevertToSelf OpenProcessToken LookupAccountSidW ImpersonateLoggedOnUser GetUserNameW GetTokenInformation

shell32

DragFinish SHLoadInProc SHGetSpecialFolderLocation SHChangeNotify DragQueryFileA SHFileOperationA DoEnvironmentSubstW SHGetPathFromIDListW SHGetDesktopFolder SHInvokePrinterCommandW SHLoadNonloadedIconOverlayIdentifiers SHGetFileInfoW SHGetFolderPathW SHIsFileAvailableOffline ShellExecuteExA SHFileOperationW WOWShellExecute ExtractIconEx FindExecutableA SHEmptyRecycleBinA CheckEscapesW SHGetDataFromIDListW FindExecutableW Shell_NotifyIcon

shlwapi

StrRStrIW StrChrW StrRChrA StrCmpNIW