84907aec9f99711dfaaa3878de51c5aa7743b525f8e894757369c3ca08e7023c

Sharing

Copy URL Twitter E-mail

General

Target
84907aec9f99711dfaaa3878de51c5aa7743b525f8e894757369c3ca08e7023c
Size 868KB
Sample220625-gg9gaaaef4
SHA256 84907aec9f99711dfaaa3878de51c5aa7743b525f8e894757369c3ca08e7023c
MD5 35394c2d2bddf9f51dcb7bf223a79cf6
SHA1 17eb959c698306cc274d022085f9c88594682050
SHA512 5cf018f291d4ddf15f17ddad65bafb728b4886c25806539e1a7e97b42d08e615bed7432085cffce2984376851b6d4f884b03812500304f1b06269e9f910427cc
SSDEEP 12288:b8TLPUnKCrF56Y6VM5TNY/K1Fl7RJpDse7Wtt+uRhfQTxHII0lKlK3lOtWrtdKc+:oTmapT/i3Dse7eXQTaICVOIrtd0PA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

84907aec9f99711dfaaa3878de51c5aa7743b525f8e894757369c3ca08e7023c

.exe 868KB

84907aec9f99711dfaaa3878de51c5aa7743b525f8e894757369c3ca08e7023c

IMPHASH 0ac7c26d80d62a4aab92c8878a66a758
SHA256 84907aec9f99711dfaaa3878de51c5aa7743b525f8e894757369c3ca08e7023c
MD5 35394c2d2bddf9f51dcb7bf223a79cf6
SHA1 17eb959c698306cc274d022085f9c88594682050
SHA512 5cf018f291d4ddf15f17ddad65bafb728b4886c25806539e1a7e97b42d08e615bed7432085cffce2984376851b6d4f884b03812500304f1b06269e9f910427cc
SSDEEP 12288:b8TLPUnKCrF56Y6VM5TNY/K1Fl7RJpDse7Wtt+uRhfQTxHII0lKlK3lOtWrtdKc+:oTmapT/i3Dse7eXQTaICVOIrtd0PA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

210014

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateEventW ReadFile WriteConsoleW HeapSize ReadConsoleW SetStdHandle GetCommandLineW GetCommandLineA FindFirstFileExW GetProcessHeap SetFilePointerEx GetConsoleMode GetConsoleCP SetEnvironmentVariableW FreeEnvironmentStringsW GetOEMCP GetACP IsValidCodePage EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetFileType GetModuleFileNameW ExitProcess GetModuleHandleExW GetEnvironmentStringsW CreateEventA GetConsoleWindow CloseHandle GlobalAlloc CreateFileA GetLastError MultiByteToWideChar WaitForSingleObject VirtualAlloc FreeLibraryAndExitThread ExitThread CreateThread HeapFree HeapReAlloc HeapAlloc LoadLibraryExW FreeLibrary InterlockedPushEntrySList RtlUnwind RaiseException QueryPerformanceCounter IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead WaitForSingleObjectEx ResetEvent FindNextFileW FindFirstFileW FindClose GetCurrentDirectoryW GetTimeZoneInformation MoveFileExW RemoveDirectoryW GetFileAttributesExW GetFileAttributesW DeleteFileW GetExitCodeThread SetThreadPriority GetCurrentThreadId GetDiskFreeSpaceW WriteFile GetFileSizeEx GetProcessWorkingSetSize GetStartupInfoW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount InterlockedDecrement Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CreateFileW FlushFileBuffers SetFilePointer SetEvent GetStdHandle GetCurrentProcess GetCurrentProcessId TerminateProcess

user32

SetMenu SetWindowTextA TrackMouseEvent MapWindowPoints ExitWindowsEx ScreenToClient LoadIconA CreateWindowExA GetDC LoadCursorA GetMenu GetWindowRect DispatchMessageA CheckMenuRadioItem GetMessageA LoadMenuA GetSystemMenu SendMessageA FillRect GetDlgItem SetRect EnableMenuItem GetMenuItemInfoA GetCursorPos

gdi32

DeleteObject SetStretchBltMode CreateFontA SelectObject CreateDIBSection CreateCompatibleDC FrameRgn GetStockObject GetDeviceCaps OffsetRgn SetTextColor TextOutA SetBkMode SelectClipRgn CreateSolidBrush

comdlg32

GetOpenFileNameA

ole32

CreateStreamOnHGlobal OleSetContainedObject OleCreate CoCreateInstance StgCreateDocfile

oleaut32

SysAllocString SafeArrayDestroy SafeArrayCreate SysAllocStringLen VariantInit

gdiplus

GdipCreateBitmapFromScan0 GdipGetImageWidth GdipBitmapLockBits GdipFree GdipDisposeImage GdipAlloc GdipBitmapUnlockBits GdipCloneImage GdipGetImageHeight GdiplusStartup

winmm

waveInGetNumDevs waveInGetDevCapsA

ws2_32

WSACancelAsyncRequest

shlwapi

StrChrA

uxtheme

GetThemeInt

netapi32

NetLocalGroupGetMembers NetApiBufferFree NetGroupEnum NetGroupGetUsers

wtsapi32

WTSVirtualChannelPurgeInput WTSVirtualChannelPurgeOutput

rpcrt4

UuidToStringA RpcStringFreeA UuidCreate

winhttp

WinHttpConnect

authz

AuthzCachedAccessCheck AuthzFreeAuditEvent AuthzInitializeResourceManager

ntdsapi

DsWriteAccountSpnA

Name

.text

Size

377KB

Virtual Size

377KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

126KB

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

333KB

Virtual Size

332KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ