b68af6b56f97ee22ab1fc2da69243e1afdfd00ce615d188fc3465592c01945c8

Sharing

Copy URL Twitter E-mail

General

Target
b68af6b56f97ee22ab1fc2da69243e1afdfd00ce615d188fc3465592c01945c8
Size 4.1MB
Sample220502-aj5sjsfcd7
SHA256 b68af6b56f97ee22ab1fc2da69243e1afdfd00ce615d188fc3465592c01945c8
MD5 dfdad76d4b2735bb0d8b7acc8d891c6f
SHA1 56a9bbbfb2085727fae98e1b1019aebb4b742194
SHA512 d7d3568dd5c4c4d9938638df35ea39e628bb7c659e78d2a50f68b434b1e0f6c5cdc7b3d6deb212c86f4b6a7acd30ecdea3215c662ae53ce37121da2df91c11ad
SSDEEP 6144:1QP9G+wgVFGOyD+Tl/GJu18SVTtQ/OpoN3f2cfgJOSoLDR3k1a:CA+wg9yD+TVnTXQGpg3flfgJ43Aa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b68af6b56f97ee22ab1fc2da69243e1afdfd00ce615d188fc3465592c01945c8

.exe 4.1MB

b68af6b56f97ee22ab1fc2da69243e1afdfd00ce615d188fc3465592c01945c8

IMPHASH 4005a526662acfff443dddece94c9545
SHA256 b68af6b56f97ee22ab1fc2da69243e1afdfd00ce615d188fc3465592c01945c8
MD5 dfdad76d4b2735bb0d8b7acc8d891c6f
SHA1 56a9bbbfb2085727fae98e1b1019aebb4b742194
SHA512 d7d3568dd5c4c4d9938638df35ea39e628bb7c659e78d2a50f68b434b1e0f6c5cdc7b3d6deb212c86f4b6a7acd30ecdea3215c662ae53ce37121da2df91c11ad
SSDEEP 6144:1QP9G+wgVFGOyD+Tl/GJu18SVTtQ/OpoN3f2cfgJOSoLDR3k1a:CA+wg9yD+TVnTXQGpg3flfgJ43Aa
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

84:6b:ba:0b:a7:6c:f5:cd:9c:01:7d:10:84:15:d4:8f:b0:79:a6:33

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

7728

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep GetModuleHandleW LoadLibraryA GetProcAddress LoadLibraryExW VirtualAlloc WinExec TerminateProcess OutputDebugStringW OpenProcess LoadLibraryW LeaveCriticalSection InitializeCriticalSection GetWindowsDirectoryW GetVersionExW GetTickCount GetTempPathW GetSystemInfo GetSystemDirectoryW GetLastError GetCurrentProcessId GetCurrentProcess FreeLibrary EnterCriticalSection DeleteCriticalSection CreateMutexW CloseHandle ProcessIdToSessionId CancelDeviceWakeupRequest FreeResource SetHandleInformation CreateEventA FindFirstChangeNotificationA lstrcpyW _llseek GetPrivateProfileSectionW SetFileApisToANSI ReadConsoleOutputAttribute lstrlenW InterlockedExchange GetCPInfoExA IsBadStringPtrW SetErrorMode SetUnhandledExceptionFilter GetEnvironmentVariableA GetDriveTypeW SetInformationJobObject AssignProcessToJobObject _lread ReplaceFileA MoveFileWithProgressA GetEnvironmentStringsA GetTapeStatus CallNamedPipeW SetThreadLocale GetComputerNameA

user32

LoadCursorA SetForegroundWindow PostMessageW GetForegroundWindow FindWindowW CloseWindow EnableScrollBar SetLayeredWindowAttributes UpdateLayeredWindow wsprintfA LoadAcceleratorsW ClipCursor RealGetWindowClassW CreateAcceleratorTableW CreateMDIWindowW GetWindowWord SetDoubleClickTime InflateRect WINNLSGetEnableStatus CharNextA GetShellWindow GetMenuContextHelpId EnableWindow RemoveMenu DrawTextA BringWindowToTop DrawTextW PostThreadMessageW keybd_event UnregisterClassA GetPriorityClipboardFormat SetMessageQueue RedrawWindow FindWindowA ChildWindowFromPoint LookupIconIdFromDirectory GetKeyboardLayout

gdi32

DeleteEnhMetaFile CreateHalftonePalette CreateSolidBrush DeleteColorSpace DeleteDC CreatePatternBrush CreateCompatibleDC CloseMetaFile DeleteMetaFile GetEnhMetaFileA STROBJ_bEnum SetFontEnumeration EnumFontFamiliesExW GetColorSpace EngFindResource GdiFlush CreateDCW GetEUDCTimeStamp CreateMetaFileW EngFreeModule GetKerningPairsA STROBJ_vEnumStart CloseFigure GetFontAssocStatus EndPath CreateRectRgn GdiConvertAndCheckDC GetHFONT AnyLinkedFonts GdiEntry8 EngAcquireSemaphore EngCreatePalette

advapi32

RegOpenKeyW RegQueryValueExW RevertToSelf OpenProcessToken LookupAccountSidW ImpersonateLoggedOnUser GetUserNameW GetTokenInformation

shell32

ShellExecuteW SHGetSpecialFolderPathW ord680 DragFinish SHLoadInProc SHGetSpecialFolderLocation SHChangeNotify DragQueryFileA SHFileOperationA DoEnvironmentSubstW SHGetPathFromIDListW SHGetDesktopFolder SHInvokePrinterCommandW SHLoadNonloadedIconOverlayIdentifiers SHGetFileInfoW SHGetFolderPathW SHIsFileAvailableOffline ShellExecuteExA SHFileOperationW WOWShellExecute ExtractIconEx FindExecutableA SHEmptyRecycleBinA CheckEscapesW SHGetDataFromIDListW FindExecutableW Shell_NotifyIcon

shlwapi

StrRStrIW StrChrW StrRChrA StrCmpNIW