sample

Sharing

Copy URL Twitter E-mail

General

Target
sample
Size 461KB
Sample220601-wpqrgaeebr
SHA256 06f2fef10fedbb774853c71cc9c923cd56d49d6165a6476fa7e5445550b0a6dc
MD5 f816669dd53eee882895fa6ddbfab27b
SHA1 20b15ebc74e482122db2543a97bcbeda65c67730
SHA512 14a06b583b0dc0e139eace351ac34492f1e37c2c35a5ba6f6d9d6fc624bc2ea15adee38aebc4a5abc1a333fa926f0e3d819a07d7bf2f18772c9cb5d062391ed4
SSDEEP 12288:9iPawDsru7y1rOqqINTm/wV7aDLEWCbwO:mEruwNTm4SC8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

sample

.exe 461KB

IMPHASH 901b6ec47af540be4569a8681a18f86a
SHA256 06f2fef10fedbb774853c71cc9c923cd56d49d6165a6476fa7e5445550b0a6dc
MD5 f816669dd53eee882895fa6ddbfab27b
SHA1 20b15ebc74e482122db2543a97bcbeda65c67730
SHA512 14a06b583b0dc0e139eace351ac34492f1e37c2c35a5ba6f6d9d6fc624bc2ea15adee38aebc4a5abc1a333fa926f0e3d819a07d7bf2f18772c9cb5d062391ed4
SSDEEP 12288:9iPawDsru7y1rOqqINTm/wV7aDLEWCbwO:mEruwNTm4SC8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

454656

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

advapi32

InitializeSecurityDescriptor RegCloseKey RegDeleteValueA RegEnumKeyExA RegEnumValueA RegOpenKeyA RegOpenKeyExA RegQueryInfoKeyA RegQueryValueExA RegSetKeySecurity RegSetValueExA

kernel32

CloseHandle CompareStringA CreateEventA CreateFileA CreateThread DeleteCriticalSection DeleteFileA DeleteFileW EnterCriticalSection EnumCalendarInfoA ExitProcess FindFirstFileA FindNextFileA FindResourceA FormatMessageA FreeLibrary FreeResource GetACP GetCPInfo GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetDateFormatA GetDiskFreeSpaceA GetEnvironmentStrings GetFileAttributesA GetFileSize GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetPrivateProfileStringA GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetSystemDirectoryA GetSystemInfo GetThreadLocale GetTickCount GetUserDefaultLCID GetVersion GetVersionExA GetWindowsDirectoryA GlobalAddAtomA GlobalAlloc GlobalDeleteAtom GlobalFree GlobalHandle GlobalLock GlobalReAlloc GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedIncrement IsValidLocale LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadResource LocalAlloc LocalFree LockResource MulDiv MultiByteToWideChar RaiseException ReadFile RtlUnwind SetConsoleCtrlHandler SetEndOfFile SetErrorMode SetEvent SetFileAttributesA SetFilePointer SetHandleCount SetLastError SetThreadLocale SizeofResource Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringA lstrcpyA lstrlenA

comctl32

ImageList_Add ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIconSize ImageList_GetImageCount ImageList_Read ImageList_Remove ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetIconSize ImageList_Write ImageList_DrawEx

gdi32

BitBlt CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateDIBitmap CreateFontIndirectA CreateHalftonePalette CreatePalette CreatePenIndirect CreateRectRgn CreateSolidBrush DeleteDC DeleteObject EnumFontFamiliesExA EnumFontsA ExcludeClipRect GetBitmapBits GetBrushOrgEx GetClipBox GetCurrentPositionEx GetDCOrgEx GetDIBColorTable GetDIBits GetDeviceCaps GetObjectA GetPaletteEntries GetPixel GetStockObject GetSystemPaletteEntries GetTextExtentPointA GetTextMetricsA GetWindowOrgEx IntersectClipRect LineTo MaskBlt MoveToEx PatBlt Polyline RealizePalette RectVisible RestoreDC SaveDC SelectObject SelectPalette SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetPixel SetROP2 SetStretchBltMode SetTextColor SetViewportOrgEx SetWindowOrgEx StretchBlt UnrealizeObject

user32

ActivateKeyboardLayout AdjustWindowRectEx BeginPaint CallNextHookEx CallWindowProcA CharLowerA CheckMenuItem ClientToScreen CreateIcon CreateMenu CreatePopupMenu CreateWindowExA DefFrameProcA DefMDIChildProcA DefWindowProcA DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DrawEdge DrawFrameControl DrawIcon DrawMenuBar DrawTextA EnableMenuItem EnableScrollBar EnableWindow EndPaint EnumThreadWindows EnumWindows EqualRect FillRect FindWindowA FrameRect GetActiveWindow GetCapture GetClassInfoA GetClientRect GetCursor GetCursorPos GetDC GetDCEx GetDesktopWindow GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextA GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardState GetKeyboardType GetLastActivePopup GetMenu GetMenuItemCount GetMenuItemID GetMenuItemInfoA GetMenuState GetMenuStringA GetParent GetPropA GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColor GetSystemMenu GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongA GetWindowPlacement GetWindowRect GetWindowRgn GetWindowTextA GetWindowThreadProcessId InflateRect InsertMenuA InsertMenuItemA IntersectRect InvalidateRect IsChild IsDialogMessageA IsIconic IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapA LoadCursorA LoadIconA LoadStringA MapVirtualKeyA MapWindowPoints MessageBoxA OemToCharA OffsetRect PeekMessageA PostMessageA PostQuitMessage PtInRect RegisterClassA RegisterClipboardFormatA RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollWindow SendMessageA SetActiveWindow SetCapture SetCursor SetFocus SetForegroundWindow SetMenu SetMenuItemInfoA SetPropA SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongA SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextA SetWindowsHookExA ShowCursor ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoA TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnregisterClassA UpdateWindow WaitMessage WinHelpA WindowFromPoint wsprintfA

ole32

IsEqualGUID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen SysStringLen VariantChangeTypeEx VariantClear VariantCopyInd

shlwapi

SHDeleteKeyA

Name

.text

Size

333KB

Virtual Size

336KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

23KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

13KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rmnet

Size

56KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE