b8acaf3d2ce22e99d52ae6b797a44e04543d591b6f8f63b0ed74ca3ea32f1939

Sharing

Copy URL Twitter E-mail

General

Target
b8acaf3d2ce22e99d52ae6b797a44e04543d591b6f8f63b0ed74ca3ea32f1939
Size 4.0MB
Sample220508-t4ld7acdd9
SHA256 b8acaf3d2ce22e99d52ae6b797a44e04543d591b6f8f63b0ed74ca3ea32f1939
MD5 e6b8fc83a10718dc1408939be437cb64
SHA1 2de57eb60e28662dafdec56e0f355cb5a506550c
SHA512 f8119a03f65e6e070accd0a56ad64822e9f1920a200efe4a587ede2a60fd0872f8550917bf9d7870be7a17b289f9431eb6691c795ab9819738ba27e8d5e98705
SSDEEP 6144:xQP9G+wgVFGOyD+Tl/GJu18SVTtQ/OpoN3f2cfgJOSogDR31+jT:WA+wg9yD+TVnTXQGpg3flfgJt3YjT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b8acaf3d2ce22e99d52ae6b797a44e04543d591b6f8f63b0ed74ca3ea32f1939

.exe 4.0MB

b8acaf3d2ce22e99d52ae6b797a44e04543d591b6f8f63b0ed74ca3ea32f1939

IMPHASH 0d0979495518a73fe663964c460c20cf
SHA256 b8acaf3d2ce22e99d52ae6b797a44e04543d591b6f8f63b0ed74ca3ea32f1939
MD5 e6b8fc83a10718dc1408939be437cb64
SHA1 2de57eb60e28662dafdec56e0f355cb5a506550c
SHA512 f8119a03f65e6e070accd0a56ad64822e9f1920a200efe4a587ede2a60fd0872f8550917bf9d7870be7a17b289f9431eb6691c795ab9819738ba27e8d5e98705
SSDEEP 6144:xQP9G+wgVFGOyD+Tl/GJu18SVTtQ/OpoN3f2cfgJOSogDR31+jT:WA+wg9yD+TVnTXQGpg3flfgJt3YjT
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

91:52:5d:91:88:29:b2:b3:d1:49:4b:8c:a9:c3:c7:7a:f6:18:17:57

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetProcAddress LoadLibraryExW VirtualAlloc GetModuleHandleW Sleep WinExec TerminateProcess OutputDebugStringW OpenProcess LoadLibraryW LeaveCriticalSection InitializeCriticalSection GetWindowsDirectoryW GetVersionExW GetTickCount GetTempPathW GetSystemInfo GetSystemDirectoryW GetLastError GetCurrentProcessId GetCurrentProcess FreeLibrary EnterCriticalSection DeleteCriticalSection CreateMutexW CloseHandle ProcessIdToSessionId CancelDeviceWakeupRequest FreeResource SetHandleInformation CreateEventA FindFirstChangeNotificationA lstrcpyW _llseek GetPrivateProfileSectionW SetFileApisToANSI ReadConsoleOutputAttribute lstrlenW InterlockedExchange GetCPInfoExA IsBadStringPtrW SetErrorMode SetUnhandledExceptionFilter GetEnvironmentVariableA GetDriveTypeW SetInformationJobObject AssignProcessToJobObject _lread ReplaceFileA MoveFileWithProgressA GetEnvironmentStringsA GetTapeStatus CallNamedPipeW SetThreadLocale GetComputerNameA ExpandEnvironmentStringsW lstrcmpiW GetCommandLineW IsWow64Process QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime UnhandledExceptionFilter GetModuleHandleA LocalFree LocalAlloc GetStartupInfoA GetModuleFileNameA lstrcpynW GetPrivateProfileIntW

user32

LoadCursorA SetForegroundWindow PostMessageW GetForegroundWindow FindWindowW CloseWindow EnableScrollBar SetLayeredWindowAttributes UpdateLayeredWindow wsprintfA LoadAcceleratorsW ClipCursor RealGetWindowClassW CreateAcceleratorTableW CreateMDIWindowW GetWindowWord SetDoubleClickTime InflateRect WINNLSGetEnableStatus CharNextA GetShellWindow GetMenuContextHelpId EnableWindow RemoveMenu DrawTextA BringWindowToTop DrawTextW PostThreadMessageW keybd_event UnregisterClassA GetPriorityClipboardFormat SetMessageQueue RedrawWindow FindWindowA ChildWindowFromPoint LookupIconIdFromDirectory GetKeyboardLayout MessageBoxW LoadStringW

gdi32

GetEnhMetaFileA CreateHalftonePalette CreateSolidBrush DeleteEnhMetaFile CreatePatternBrush CloseMetaFile DeleteColorSpace CreateCompatibleDC DeleteMetaFile DeleteDC STROBJ_bEnum SetFontEnumeration EnumFontFamiliesExW GetColorSpace EngFindResource GdiFlush CreateDCW GetEUDCTimeStamp CreateMetaFileW EngFreeModule GetKerningPairsA STROBJ_vEnumStart CloseFigure GetFontAssocStatus EndPath CreateRectRgn GdiConvertAndCheckDC GetHFONT AnyLinkedFonts GdiEntry8 EngAcquireSemaphore EngCreatePalette

advapi32

RegOpenKeyW RegQueryValueExW RevertToSelf OpenProcessToken LookupAccountSidW ImpersonateLoggedOnUser GetUserNameW GetTokenInformation ChangeServiceConfig2W RegCreateKeyExW ConvertStringSecurityDescriptorToSecurityDescriptorW RegSetKeySecurity RegSetValueExW RegCloseKey OpenSCManagerW OpenServiceW CreateServiceW CloseServiceHandle ChangeServiceConfigW AllocateAndInitializeSid SetFileSecurityW FreeSid GetSidSubAuthorityCount GetSidLengthRequired CopySid GetSidSubAuthority GetSecurityDescriptorSacl GetSecurityDescriptorDacl AddAccessAllowedAceEx AddAccessDeniedAceEx AddAuditAccessAceEx InitializeAcl GetLengthSid AdjustTokenPrivileges LookupPrivilegeValueW SetSecurityDescriptorSacl SetSecurityDescriptorDacl InitializeSecurityDescriptor

shell32

ShellExecuteW SHGetSpecialFolderPathW ord680 DragFinish SHLoadInProc SHGetSpecialFolderLocation SHChangeNotify DragQueryFileA SHFileOperationA DoEnvironmentSubstW SHGetPathFromIDListW SHGetDesktopFolder SHInvokePrinterCommandW SHLoadNonloadedIconOverlayIdentifiers SHGetFileInfoW SHGetFolderPathW SHIsFileAvailableOffline ShellExecuteExA SHFileOperationW WOWShellExecute ExtractIconEx FindExecutableA SHEmptyRecycleBinA CheckEscapesW SHGetDataFromIDListW FindExecutableW Shell_NotifyIcon

shlwapi

StrRStrIW StrChrW StrRChrA StrCmpNIW

msvcrt

_controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs __initenv exit _cexit _XcptFilter _exit _c_exit wcstok _vsnwprintf