291a4eb06358eca87fbc1f133ee162b6c532f4ec3e6f39c2646cde5de60e80f9

Sharing

Copy URL Twitter E-mail

General

Target
291a4eb06358eca87fbc1f133ee162b6c532f4ec3e6f39c2646cde5de60e80f9
Size 248KB
Sample220524-dwb8jsdhe6
SHA256 291a4eb06358eca87fbc1f133ee162b6c532f4ec3e6f39c2646cde5de60e80f9
MD5 6ad619702dad7c8fc1cefd3bc7967cf4
SHA1 b9fc56281283878f69513f341a0479d846c4f0ba
SHA512 e9d9a98ab7b25ecb5b7d900728ffd752f3cee705ab772cda079ec48f1fdcd2ac1c6911ad0ac5b6f8e47d9d4a362af875781d444a379ad4abcda5b85ddec21277
SSDEEP 3072:z1OGI1jJ+8WOzZkqZZJjbeORCdUYtDfeRlna1176r0Skrqn4HVOU+:RLX8WA7z0tbslnS7h2n41OU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

291a4eb06358eca87fbc1f133ee162b6c532f4ec3e6f39c2646cde5de60e80f9

.dll 248KB

291a4eb06358eca87fbc1f133ee162b6c532f4ec3e6f39c2646cde5de60e80f9

IMPHASH 19fe2499af089ee526636b0e5063dc97
SHA256 291a4eb06358eca87fbc1f133ee162b6c532f4ec3e6f39c2646cde5de60e80f9
MD5 6ad619702dad7c8fc1cefd3bc7967cf4
SHA1 b9fc56281283878f69513f341a0479d846c4f0ba
SHA512 e9d9a98ab7b25ecb5b7d900728ffd752f3cee705ab772cda079ec48f1fdcd2ac1c6911ad0ac5b6f8e47d9d4a362af875781d444a379ad4abcda5b85ddec21277
SSDEEP 3072:z1OGI1jJ+8WOzZkqZZJjbeORCdUYtDfeRlna1176r0Skrqn4HVOU+:RLX8WA7z0tbslnS7h2n41OU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

114688

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpiA LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle TlsSetValue TlsGetValue lstrcpyW WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx TryEnterCriticalSection SwitchToThread SuspendThread SizeofResource SignalObjectAndWait SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadFile IsDebuggerPresent MulDiv LockResource LoadResource LoadLibraryW GlobalUnlock GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetThreadPriority GetThreadLocale GetLocalTime GetFullPathNameW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfo FreeResource InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange FormatMessageW FindResourceW EnumCalendarInfoW CreateFileW CreateEventW GetFileInformationByHandle SetConsoleMode SetConsoleDisplayMode InitializeCriticalSectionAndSpinCount GetThreadTimes RemoveDirectoryW GetCommMask CallNamedPipeW _hwrite GetThreadPriorityBoost GetStartupInfoW GetComputerNameExW CreateDirectoryExA FreeConsole FindVolumeMountPointClose GetSystemWindowsDirectoryW FileTimeToDosDateTime DnsHostnameToComputerNameA GetCurrencyFormatA GetSystemTimeAsFileTime SetUnhandledExceptionFilter TerminateProcess GetShortPathNameW GetModuleHandleA lstrcatW DeleteFileW CreateSemaphoreW

user32

SetCursorPos ShowScrollBar FindWindowW SetFocus SetForegroundWindow LoadStringW MessageBoxW ExitWindowsEx EndMenu GetThreadDesktop GetClipboardOwner IsCharLowerW CloseClipboard GetDesktopWindow InSendMessage GetDialogBaseUnits CopyIcon LoadCursorFromFileA CloseWindow IsCharAlphaA GetKeyState OemKeyScan VkKeyScanA GetInputState CharLowerW LoadIconA GetWindowContextHelpId LoadCursorW IsWindow LoadCursorFromFileW VkKeyScanW OpenIcon DestroyMenu CharNextA WindowFromDC PaintDesktop DestroyIcon IsCharUpperW IsCharAlphaNumericW GetShellWindow GetWindowTextLengthA ReleaseCapture CharUpperA CharLowerA GetClipboardSequenceNumber GetSysColor GetWindowTextLengthW GetMessageTime ShowCaret IsCharLowerA GetClipboardViewer DestroyWindow GetKeyboardType GetActiveWindow DestroyCursor GetWindowDC IsCharAlphaW GetAsyncKeyState IsGUIThread GetFocus

gdi32

UnrealizeObject StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetEnhMetaFileBits SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline Polygon PolyBezierTo PolyBezier PlayEnhMetaFile Pie PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits FrameRgn ExtTextOutW ExtFloodFill ExcludeClipRect EnumFontsW EnumFontFamiliesExW EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW Chord BitBlt Arc AbortDoc GdiEntry7 GdiResetDCEMF XFORMOBJ_iGetXform ExtCreatePen SetDeviceGammaRamp StartDocA GetGlyphIndicesA GetEUDCTimeStamp SetTextAlign PtInRegion SetDCPenColor EngUnicodeToMultiByteN GdiCreateLocalMetaFilePict GdiReleaseDC GetMiterLimit StrokeAndFillPath CloseMetaFile bInitSystemAndFontsDirectoriesW GetCharWidth32A GdiGetCharDimensions FillRgn GetNearestPaletteIndex CreateFontA TextOutA STROBJ_bGetAdvanceWidths GetBkMode GdiEntry9 OffsetRgn PATHOBJ_bEnum TranslateCharsetInfo EngCreateSemaphore GetEnhMetaFilePixelFormat GetGraphicsMode CancelDC WidenPath CreatePatternBrush GetBkColor StrokePath FillPath PathToRegion GetPixelFormat GdiFlush SwapBuffers GetFontLanguageInfo FlattenPath GetTextCharset DeleteColorSpace GdiGetBatchLimit GetObjectType BeginPath AddFontResourceW GetDCBrushColor GetROP2 EndPath AddFontResourceA

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey ReportEventW RegisterEventSourceW RegUnLoadKeyW RegSetValueExW RegSaveKeyW RegRestoreKeyW RegReplaceKeyW RegQueryInfoKeyW RegLoadKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegConnectRegistryW DeregisterEventSource StartServiceCtrlDispatcherW SetServiceStatus RegisterServiceCtrlHandlerW OpenServiceW OpenSCManagerW DeleteService CreateServiceW CloseServiceHandle LookupPrivilegeValueW AdjustTokenPrivileges RegCreateKeyW RegOpenKeyW OpenProcessToken RegQueryValueExA RegOpenKeyA

shell32

ShellExecuteW SHGetFolderPathW Shell_NotifyIcon DuplicateIcon SHPathPrepareForWriteW SHGetFileInfoW SHGetDataFromIDListA SHEmptyRecycleBinW ExtractAssociatedIconA SHCreateDirectoryExW SHFreeNameMappings SHGetFolderLocation SHGetInstanceExplorer ExtractAssociatedIconExA ShellExecuteExA ExtractIconW SHQueryRecycleBinW SHLoadInProc SHGetIconOverlayIndexW SHQueryRecycleBinA ExtractIconExW SHAddToRecentDocs SHGetSpecialFolderPathA SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetMalloc

ole32

OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc CoCreateInstance IsEqualGUID

shlwapi

StrCmpNIA StrRStrIA StrCmpNIW StrRChrIW StrStrIW

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_GetImageInfo ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Copy ImageList_LoadImageW ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_SetOverlayImage ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create

Name

.pop

Size

105KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

129KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ