29d646642303528c943e7f11747e06a413495d7544ce4e576640c6cb991423f5

Sharing

Copy URL Twitter E-mail

General

Target
29d646642303528c943e7f11747e06a413495d7544ce4e576640c6cb991423f5
Size 760KB
Sample220524-bnrl6abdh3
SHA256 29d646642303528c943e7f11747e06a413495d7544ce4e576640c6cb991423f5
MD5 c94f90f2acf1fb92388a9ffa27b1d05b
SHA1 fa8525c54bbb613fbcc21eb9ec7f7b99360aad31
SHA512 b3f846177732e476913ad49adad331bde90bac46d9eb36801a638c383920d0ac8090bf9b589aaf9363e17eed17e91e2b3f85f42ea68cc8a49d67b0f11e19721e
SSDEEP 3072:96edUX3HEGHEprYfwkx7eBX1WmY11HgOUXZq7KTx:tumBsHgOeKKt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

29d646642303528c943e7f11747e06a413495d7544ce4e576640c6cb991423f5

.exe 760KB

29d646642303528c943e7f11747e06a413495d7544ce4e576640c6cb991423f5

IMPHASH 313a8dfc30d9c27cc775a26e0fda25e4
SHA256 29d646642303528c943e7f11747e06a413495d7544ce4e576640c6cb991423f5
MD5 c94f90f2acf1fb92388a9ffa27b1d05b
SHA1 fa8525c54bbb613fbcc21eb9ec7f7b99360aad31
SHA512 b3f846177732e476913ad49adad331bde90bac46d9eb36801a638c383920d0ac8090bf9b589aaf9363e17eed17e91e2b3f85f42ea68cc8a49d67b0f11e19721e
SSDEEP 3072:96edUX3HEGHEprYfwkx7eBX1WmY11HgOUXZq7KTx:tumBsHgOeKKt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21476

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVersion LoadLibraryA VirtualAlloc VirtualFree VirtualProtect GetProcAddress GetCurrentThread GetCurrentProcess GetCurrentThreadId VerLanguageNameA VerLanguageNameW GetFullPathNameA SetConsoleIcon GenerateConsoleCtrlEvent MulDiv GlobalMemoryStatus CreateThread OpenMutexW GetPrivateProfileStructA GetVersionExW

user32

ShowCursor SetWindowPos GetCaretBlinkTime SetCursor SetFocus ShowWindow GetKeyboardType GetGUIThreadInfo GetCursorPos GetCursorInfo SetDlgItemTextA GetThreadDesktop SetWindowsHookW OpenWindowStationA DdeInitializeA SetClassLongW IsCharAlphaA UnhookWindowsHook DdeAbandonTransaction IsDialogMessage SetWindowsHookA FindWindowW IsMenu CharPrevExA keybd_event GetRegisteredRawInputDevices EqualRect GetWindowLongA PostMessageA GetNextDlgTabItem InsertMenuW GetForegroundWindow BroadcastSystemMessage EnumPropsExA

version

VerInstallFileW VerQueryValueW VerQueryValueA GetFileVersionInfoSizeW VerFindFileW GetFileVersionInfoA GetFileVersionInfoSizeA VerInstallFileA

comctl32

DPA_Sort GetEffectiveClientRect ImageList_DragMove DllGetVersion ImageList_Draw CreateUpDownControl ImageList_ReplaceIcon AddMRUStringW ImageList_GetIconSize EnumMRUListW CreateToolbar DPA_Destroy DPA_SetPtr CreateStatusWindowA UninitializeFlatSB ImageList_GetImageRect FlatSB_GetScrollPos PropertySheet CreateMRUListW DSA_DestroyCallback InitCommonControlsEx ImageList_DragLeave MakeDragList ImageList_GetBkColor DPA_DestroyCallback FlatSB_GetScrollInfo ImageList_GetDragImage CreatePropertySheetPage

oleaut32

VarDecFix VarI1FromUI1 VarCyMul VarCyMulI8 VarFormatCurrency VarUI1FromBool VarR4FromBool VarI2FromDec LPSAFEARRAY_Size VarUI8FromBool VarEqv VarBstrFromI1 VarI2FromI4 VarDecFromI8 VarR4FromUI4 UnRegisterTypeLibForUser VarDateFromI1 VarDecDiv VarCyFromDisp VarI2FromUI1 VarFormatNumber VarMul VarUI8FromStr VarR8FromI1 VarUI4FromUI2 SysStringByteLen VarBstrFromI8 VarCyAdd VarUI4FromBool SysAllocStringLen BSTR_UserSize VarUI4FromI2 DllCanUnloadNow VarUI2FromDate VarDecFromR4 VarParseNumFromStr

imagehlp

GetImageConfigInformation MapFileAndCheckSumW RemovePrivateCvSymbolic ImagehlpApiVersion SymGetLineFromAddr64 ImageDirectoryEntryToData FindExecutableImageEx SymEnumerateModules SymRegisterCallback64 SymGetSymNext64 FindDebugInfoFile SymRegisterFunctionEntryCallback64 ReBaseImage64 SplitSymbols UnDecorateSymbolName SymFunctionTableAccess64 SymFromAddr ImageAddCertificate SymFromName SymEnumerateSymbolsW64 MakeSureDirectoryPathExists SymMatchString ImageLoad SymSetSearchPath SymUnDName TouchFileTimes SymGetSymFromAddr

ole32

OleSetMenuDescriptor OleCreateLinkFromDataEx OleNoteObjectVisible GetHGlobalFromStream ReadStringStream HMETAFILEPICT_UserSize CoGetCurrentLogicalThreadId STGMEDIUM_UserFree CoGetMarshalSizeMax OleConvertOLESTREAMToIStorage CLIPFORMAT_UserMarshal SNB_UserUnmarshal CoDeactivateObject HENHMETAFILE_UserSize CoFreeUnusedLibrariesEx OleCreateFromData CreateStreamOnHGlobal ReadClassStm HMETAFILEPICT_UserUnmarshal CoSuspendClassObjects CoGetCancelObject CoInitialize CoCopyProxy OleCreateMenuDescriptor OleLoadFromStream

winspool.drv

DeletePrinterDataExA DeletePrinterDriverExW DeviceCapabilitiesA QueryColorProfile DeletePrinterDataA DeletePrintProvidorW OpenPrinterA SetPrinterW EnumPrinterDriversW AddFormA DeletePrinterConnectionW EnumPrinterDataW AddPrinterConnectionW ScheduleJob DevQueryPrintEx EnumPortsA SetFormA ReadPrinter PerfCollect SetPrinterDataW DevicePropertySheets GetPrintProcessorDirectoryA DeletePrinter DeletePrinterDataExW ADVANCEDSETUPDIALOG DocumentEvent EnumMonitorsW XcvDataW

Name

.text

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.dimn

Size

664KB

Virtual Size

664KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.jgkp

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE