SecuriteInfo[.]com[.]Heur[.]Mint[.]Zard[.]52[.]1127[.]12631

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Heur.Mint.Zard.52.1127.12631
Size 2.6MB
Sample220620-t6h2vafadn
SHA256 bd2709e7614b75b2748ddd1ec0f4d6e01ac99e9e3b321246e08a5149ce9027df
MD5 6ffbcef7b5ff3775611da1fe65f81cdc
SHA1 42e74d2a0fc4fa6dfc515d71530e0e103419a454
SHA512 f1a7bd458c527f8c3009b9261d60a16c16e47a501664c13469593a2a7bbda8fe5c5591eae24975b93ced0a9274e61ea31efb32a9e478bf1c2a93dbe7eea4270d
SSDEEP 12288:uV5duit5ECY7D/iiluulX6jA6AMhIqeTbjfsPHOfOZurt512D4pa7+ouscW:EqCYTX+hI9T/fsPH+OkO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Heur.Mint.Zard.52.1127.12631

.exe 2.6MB

SecuriteInfo.com.Heur.Mint.Zard.52.1127.12631

IMPHASH b42827b3745f4c62e3fc4b94910e5835
SHA256 bd2709e7614b75b2748ddd1ec0f4d6e01ac99e9e3b321246e08a5149ce9027df
MD5 6ffbcef7b5ff3775611da1fe65f81cdc
SHA1 42e74d2a0fc4fa6dfc515d71530e0e103419a454
SHA512 f1a7bd458c527f8c3009b9261d60a16c16e47a501664c13469593a2a7bbda8fe5c5591eae24975b93ced0a9274e61ea31efb32a9e478bf1c2a93dbe7eea4270d
SSDEEP 12288:uV5duit5ECY7D/iiluulX6jA6AMhIqeTbjfsPHOfOZurt512D4pa7+ouscW:EqCYTX+hI9T/fsPH+OkO
MD5 SHA1 SHA512 SSDEEP

Minor OS version

Major OS version

Entry point

4276

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetThreadLocale SetThreadLocale Sleep GetCurrentThreadId VirtualAlloc VirtualProtect AcquireSRWLockExclusive GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDefaultLCID GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadPriority GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetUserDefaultLocaleName GetVersion GetVersionExW GetWindowsDirectoryW HeapCreate TryAcquireSRWLockExclusive UnhandledExceptionFilter UnlockFileEx UnmapViewOfFile UnregisterWaitEx VirtualAllocEx VirtualFree VirtualFreeEx VirtualProtectEx VirtualQuery VirtualQueryEx WaitForSingleObject WaitForSingleObjectEx WaitNamedPipeW WakeAllConditionVariable Wow64GetThreadContext WriteConsoleW WriteFile WriteProcessMemory lstrlenW IsDebuggerPresent OutputDebugStringW GetModuleHandleA InterlockedPopEntrySList InterlockedPushEntrySList GetCurrentProcess FlushInstructionCache IsProcessorFeaturePresent LoadLibraryExA ReadConsoleW ReadFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetFileSizeEx SetStdHandle HeapQueryInformation SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW CreateFileW FindFirstFileExW FindClose GetCurrentThread SetConsoleCtrlHandler GetFileType EnumSystemLocalesW IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetDateFormatW HeapValidate ExitProcess GetModuleHandleExW GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection GetProcessHeap GetModuleFileNameW LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InterlockedFlushSList RtlUnwind GetCurrentProcessId QueryPerformanceCounter CreateEventW ResetEvent SetEvent HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy SetLastError GetLastError RaiseException DecodePointer InitializeSListHead EncodePointer SetUnhandledExceptionFilter TerminateProcess CloseHandle InitializeCriticalSectionAndSpinCount

user32

UnregisterClassA CharNextA CharNextW EnableWindow GetDlgItemTextA SetDlgItemTextA GetDlgItem EndDialog SetWindowLongA FillRect ClientToScreen MessageBoxA GetClientRect InvalidateRect EndPaint BeginPaint GetDC TrackPopupMenuEx GetSubMenu DestroyMenu LoadMenuA KillTimer SetTimer GetFocus GetActiveWindow DialogBoxParamA SetWindowPos IsChild IsWindow SendMessageA PeekMessageA ReleaseDC

advapi32

RegCloseKey RegOpenKeyExA RegQueryInfoKeyA AccessCheck RegDeleteKeyA

ole32

StringFromGUID2 CoCreateInstance

shell32

SHGetFolderPathW CommandLineToArgvW SHGetKnownFolderPath

oleaut32

UnRegisterTypeLi RegisterTypeLi LoadTypeLi SysStringLen SysFreeString SysAllocString

gdi32

CreateSolidBrush DeleteObject CreateCompatibleDC BitBlt DeleteDC RealizePalette SelectObject SelectPalette CreatePalette CreateDIBSection

Name

.text

Size

783KB

Virtual Size

782KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

217KB

Virtual Size

216KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

777B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

160KB

Virtual Size

159KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ