New_Price[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
New_Price.exe
Size 1.7MB
Sample220624-ej24wahfan
SHA256 e891346bb78214f5c912f95bd094af33abfed8a2ea163c530d9053e648945eca
MD5 0682c0783d6b4d64edabacaf81b19e17
SHA1 d2a55e9f7388fd34b7927f451a9137e4f54ba07c
SHA512 a8d771c4228a4803a54a39789d31e473aea28a75312b2252b73de01b0d919f01d74ed5896431c1ffb988d534fdf130f526a90936f156d51683b6bcf52f3c9122
SSDEEP 12288:qjsGzWh3XFp785yCpBDJRGSVD4pa7+ouhN:Ud5yChcN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

New_Price.exe

.exe 1.7MB

New_Price.exe

IMPHASH b80a4e29fc7d42c11ce29c1ee84436e6
SHA256 e891346bb78214f5c912f95bd094af33abfed8a2ea163c530d9053e648945eca
MD5 0682c0783d6b4d64edabacaf81b19e17
SHA1 d2a55e9f7388fd34b7927f451a9137e4f54ba07c
SHA512 a8d771c4228a4803a54a39789d31e473aea28a75312b2252b73de01b0d919f01d74ed5896431c1ffb988d534fdf130f526a90936f156d51683b6bcf52f3c9122
SSDEEP 12288:qjsGzWh3XFp785yCpBDJRGSVD4pa7+ouhN:Ud5yChcN
MD5 SHA1 SHA512 SSDEEP

Minor OS version

Major OS version

Entry point

31552

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExW GetConsoleCP GetConsoleMode GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetLocalTime GetLocaleInfoW GetLongPathNameW GetModuleFileNameW GetModuleHandleExW GetNativeSystemInfo GetOEMCP GetProcessHandleCount GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDefaultLCID GetSystemDirectoryW GetVersionExW GetWindowsDirectoryW HeapCreate IsWow64Process K32GetPerformanceInfo K32GetProcessMemoryInfo K32QueryWorkingSetEx LCMapStringW LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree LockFileEx MapViewOfFile MoveFileW OpenProcess OutputDebugStringA OutputDebugStringW PeekNamedPipe PostQueuedCompletionStatus ProcessIdToSessionId QueryDosDeviceW QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime ReadConsoleW ReadFile ReadProcessMemory RegisterWaitForSingleObject ReleaseSRWLockExclusive ReleaseSemaphore FormatMessageA ReplaceFileW TryAcquireSRWLockExclusive UnhandledExceptionFilter UnlockFileEx UnmapViewOfFile UnregisterWaitEx VirtualAlloc VirtualAllocEx VirtualFree VirtualFreeEx VirtualProtect VirtualProtectEx GetCurrentThreadId Sleep IsDebuggerPresent InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent GetConsoleOutputCP SetFilePointerEx SetStdHandle GetEnvironmentStringsW CreateFileW IsValidCodePage HeapQueryInformation WriteConsoleW GetFileType WriteFile HeapValidate VirtualQuery GetSystemInfo TlsFree TlsSetValue TlsGetValue TlsAlloc RtlUnwind GetSystemTimeAsFileTime TerminateProcess SetUnhandledExceptionFilter CreateEventW InitializeCriticalSectionAndSpinCount CloseHandle FreeEnvironmentStringsW FlushViewOfFile FlushFileBuffers FindNextFileW FindFirstFileExW FindClose FileTimeToSystemTime ExpandEnvironmentStringsW ExitProcess EnumSystemLocalesW EnumSystemLocalesEx DuplicateHandle DisconnectNamedPipe DeleteFileW DebugBreak AcquireSRWLockExclusive WideCharToMultiByte GetModuleHandleW GetProcessHeap DeleteCriticalSection GetProcAddress HeapDestroy DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError MultiByteToWideChar HeapSize GetModuleHandleA InitializeCriticalSectionEx LeaveCriticalSection EncodePointer GetThreadLocale EnterCriticalSection SetLastError HeapFree SetThreadLocale RemoveDirectoryW GetModuleFileNameA

user32

UnregisterClassA CharNextW CharNextA EndDialog GetDlgItemTextA SetDlgItemTextA GetDlgItem EnableWindow GetFocus GetDC SetWindowPos FillRect DialogBoxParamA GetActiveWindow IsWindow SetTimer SetWindowLongA ClientToScreen IsChild MessageBoxA DestroyMenu SendMessageA TrackPopupMenuEx GetClientRect PeekMessageA KillTimer InvalidateRect ReleaseDC BeginPaint EndPaint CreateWindowStationW CreateWindowExW CreateDesktopW CloseDesktop AllowSetForegroundWindow CloseWindowStation

advapi32

RegDisablePredefinedCache RegQueryInfoKeyA RegDeleteKeyA RegCloseKey AccessCheck GetSecurityInfo GetSidSubAuthority SystemFunction036 SetTokenInformation SetThreadToken SetSecurityInfo SetKernelObjectSecurity SetEntriesInAclW RevertToSelf RegSetValueExW RegQueryValueExW RegOpenKeyExW RegOpenKeyExA RegDeleteValueW RegCreateKeyExW OpenProcessToken MapGenericMask LookupPrivilegeValueW IsValidSid InitializeSid ImpersonateNamedPipeClient ImpersonateLoggedOnUser GetTokenInformation

ole32

CoCreateInstance StringFromGUID2

shell32

SHGetFolderPathW SHGetKnownFolderPath

oleaut32

RegisterTypeLi SysFreeString LoadTypeLi UnRegisterTypeLi SysAllocString SysStringLen

gdi32

RealizePalette DeleteDC SelectPalette CreatePalette CreateSolidBrush CreateCompatibleDC CreateDIBSection SelectObject BitBlt DeleteObject