09981f1a1ee710b22755868112d23dbc5d39b5f342e373ac745361c521cb8408

Sharing

Copy URL Twitter E-mail

General

Target
09981f1a1ee710b22755868112d23dbc5d39b5f342e373ac745361c521cb8408
Size 707KB
Sample220530-wnxtdsadgr
SHA256 09981f1a1ee710b22755868112d23dbc5d39b5f342e373ac745361c521cb8408
MD5 4ee7dc7527d02ec2297d576f54342c7f
SHA1 2b7b78c9d57514267d994b9bedb3518a5e473506
SHA512 5a80f340f92c880ef6cf1d93a437b8714de8e5592b6df8eaac4d6a1f9718e86ca99a822accd15613cd8d0d743fd37447a365cf0188e6da287962c8a802244568
SSDEEP 12288:VqRX2MgkfrQUJTcCF3I/w5JtTd03NgBmr93dzXndpJA+nmbjjY07MbnXhf39U6OA:IXgY7TNF3IcJz099RXdXmPhAbF39UOXL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

09981f1a1ee710b22755868112d23dbc5d39b5f342e373ac745361c521cb8408

.zip 707KB
Ori.exe

.exe 762KB

09981f1a1ee710b22755868112d23dbc5d39b5f342e373ac745361c521cb8408

SHA256 09981f1a1ee710b22755868112d23dbc5d39b5f342e373ac745361c521cb8408
MD5 4ee7dc7527d02ec2297d576f54342c7f
SHA1 2b7b78c9d57514267d994b9bedb3518a5e473506
SHA512 5a80f340f92c880ef6cf1d93a437b8714de8e5592b6df8eaac4d6a1f9718e86ca99a822accd15613cd8d0d743fd37447a365cf0188e6da287962c8a802244568
SSDEEP 12288:VqRX2MgkfrQUJTcCF3I/w5JtTd03NgBmr93dzXndpJA+nmbjjY07MbnXhf39U6OA:IXgY7TNF3IcJz099RXdXmPhAbF39UOXL
MD5 SHA1 SHA512 SSDEEP

Ori.exe

IMPHASH 3c98c11017e670673be70ad841ea9c37
SHA256 5f47515e5b289f508e50eefb816dfae7697cb1f0519cba4c6369214beab11af5
MD5 01b08c6b7dca5f924c2e5140714d3b4b
SHA1 d2a308971cf50f167b4ce0c870ad5c0cca9f8328
SHA512 48b52e25f5c5e5b14e4dbbe70281dcc84d849cfdeb40f49e840b6b082a93e1f01449800f83984311469df66ace4f6b84a858dc3e2cecdef6a50d41ec8dd7e904
SSDEEP 12288:iK2mhAMJ/cPl6BS+ZqUJTcCFBIVw5JtDd03NgzmrV3klrreJA+LmbdjY07+bn1hK:D2O/GluZ5TNFBImJn09d0wmxhKbH3rUB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44167

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

InitCommonControlsEx

shlwapi

SHAutoComplete

kernel32

DeleteFileW DeleteFileA CreateDirectoryA CreateDirectoryW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW GetVersionExW GetFullPathNameA GetFullPathNameW MultiByteToWideChar GetModuleFileNameW FindResourceW GetModuleHandleW HeapAlloc GetProcessHeap HeapFree HeapReAlloc CompareStringA ExitProcess GetTickCount FreeLibrary GetProcAddress LoadLibraryW GetCurrentProcessId SetFileAttributesW GetNumberFormatW DosDateTimeToFileTime GetDateFormatW GetTimeFormatW FileTimeToSystemTime FileTimeToLocalFileTime ExpandEnvironmentStringsW WaitForSingleObject Sleep GetExitCodeProcess GetTempPathW MoveFileExW UnmapViewOfFile MapViewOfFile GetCommandLineW CreateFileMappingW SetEnvironmentVariableW OpenFileMappingW LocalFileTimeToFileTime SystemTimeToFileTime GetSystemTime WideCharToMultiByte CompareStringW IsDBCSLeadByte GetCPInfo GlobalAlloc SetCurrentDirectoryW SetFileAttributesA GetFileAttributesW GetFileAttributesA WriteFile GetStdHandle ReadFile GetCurrentDirectoryW CreateFileW CreateFileA GetFileType SetEndOfFile SetFilePointer FlushFileBuffers MoveFileW SetFileTime GetCurrentProcess CloseHandle SetLastError GetLastError GetLocaleInfoW

user32

GetClassNameW DialogBoxParamW IsWindowVisible WaitForInputIdle SetForegroundWindow GetSysColor PostMessageW LoadBitmapW LoadIconW CharToOemA OemToCharA IsWindow CopyRect DestroyWindow DefWindowProcW RegisterClassExW LoadCursorW UpdateWindow CreateWindowExW MapWindowPoints GetParent GetDlgItemTextW TranslateMessage DispatchMessageW wvsprintfW wvsprintfA CharUpperA CharToOemBuffA LoadStringW GetWindowRect GetClientRect SetWindowPos GetWindowTextW SetWindowTextW GetSystemMetrics GetWindow GetWindowLongW CharUpperW CharToOemBuffW MessageBoxW ShowWindow GetDlgItem EnableWindow OemToCharBuffA SendDlgItemMessageW DestroyIcon EndDialog SetFocus SetDlgItemTextW SendMessageW GetDC ReleaseDC PeekMessageW FindWindowExW GetMessageW SetWindowLongW

gdi32

GetDeviceCaps GetObjectW CreateCompatibleBitmap SelectObject StretchBlt CreateCompatibleDC DeleteObject DeleteDC

comdlg32

GetOpenFileNameW CommDlgExtendedError GetSaveFileNameW

advapi32

RegOpenKeyExW LookupPrivilegeValueW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey SetFileSecurityW SetFileSecurityA OpenProcessToken AdjustTokenPrivileges

shell32

SHChangeNotify ShellExecuteExW SHFileOperationW SHGetFileInfoW SHGetSpecialFolderLocation SHGetMalloc SHBrowseForFolderW SHGetPathFromIDListW

ole32

CLSIDFromString CreateStreamOnHGlobal OleUninitialize CoCreateInstance OleInitialize

oleaut32

VariantInit