DB49640072320F33CBBCC3543AE71898214FF0DECD8F2C004E308BF0E79D856C[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
DB49640072320F33CBBCC3543AE71898214FF0DECD8F2C004E308BF0E79D856C.exe
Size 9.3MB
Sample220626-mpdmgacfb2
SHA256 db49640072320f33cbbcc3543ae71898214ff0decd8f2c004e308bf0e79d856c
MD5 597a8f5aa2268c9cfed5fa8901900ff6
SHA1 8a50ab2d0a60e5f0ec3ac0a9ed74a29dcbb70f00
SHA512 68a92367c56a7b8d82edb6ebe62adbd58a7126f76cf8db23bc2e113ba223923cce370279d54df422a6c3e1e5d0215005bde47f72fdeb6a1e24abd2f8cd44a10b
SSDEEP 196608:0h1ScCWlJLTOFxlYvaf32b6oPZ0PkBHxiz6xHrOUGcAO:0CsAYSvW62Z0PkBR+cHrhT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

DB49640072320F33CBBCC3543AE71898214FF0DECD8F2C004E308BF0E79D856C.exe

.exe 9.3MB

DB49640072320F33CBBCC3543AE71898214FF0DECD8F2C004E308BF0E79D856C.exe

IMPHASH 5f9ecf08320eabf2d2cffa3352890656
SHA256 db49640072320f33cbbcc3543ae71898214ff0decd8f2c004e308bf0e79d856c
MD5 597a8f5aa2268c9cfed5fa8901900ff6
SHA1 8a50ab2d0a60e5f0ec3ac0a9ed74a29dcbb70f00
SHA512 68a92367c56a7b8d82edb6ebe62adbd58a7126f76cf8db23bc2e113ba223923cce370279d54df422a6c3e1e5d0215005bde47f72fdeb6a1e24abd2f8cd44a10b
SSDEEP 196608:0h1ScCWlJLTOFxlYvaf32b6oPZ0PkBHxiz6xHrOUGcAO:0CsAYSvW62Z0PkBR+cHrhT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

888720

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

setsockopt gethostbyname htonl ioctlsocket htons ntohl WSAStartup WSACleanup

wininet

HttpQueryInfoA

crypt32

CertFreeCertificateContext CertVerifySubjectCertificateContext CertFindCertificateInStore CertCreateCertificateContext CryptGetMessageCertificates CryptVerifyMessageSignature CertCloseStore

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

winmm

waveInStop waveInAddBuffer waveInStart waveInGetNumDevs waveOutGetNumDevs waveInClose waveOutGetDevCapsA waveOutPrepareHeader waveOutWrite waveOutReset waveOutUnprepareHeader waveInReset waveInUnprepareHeader waveInPrepareHeader waveInOpen waveInGetDevCapsA waveOutClose waveOutOpen timeKillEvent timeSetEvent timeGetDevCaps timeBeginPeriod timeEndPeriod timeGetTime

kernel32

GetUserDefaultLangID GetSystemDefaultLangID GetFileAttributesA GetFileAttributesW GetTimeZoneInformation GetSystemTime SystemTimeToFileTime DeleteFileA DeleteFileW MoveFileA MoveFileW RemoveDirectoryA RemoveDirectoryW CreateDirectoryA CreateDirectoryW GetSystemInfo CreateFileW ReadFile WriteFile GetTempFileNameA GetTempPathA GetTempFileNameW GetTempPathW SetFilePointer GetFileSize GetFileAttributesExA GetFileAttributesExW FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindClose GetSystemDirectoryA GetModuleFileNameA MoveFileExA CreateMutexA ReleaseMutex UnmapViewOfFile MapViewOfFile CreateFileMappingA WaitForSingleObject GlobalFree WideCharToMultiByte ExitThread CreateThread GlobalUnlock GlobalLock GlobalAlloc IsDBCSLeadByteEx lstrlenA SetEndOfFile CopyFileA GetCommandLineW ExitProcess GetModuleHandleA GetCommandLineA GetProcessTimes GetCurrentProcess CreateEventA SetEvent TlsAlloc SetThreadPriority InterlockedIncrement InterlockedDecrement ResetEvent WaitForMultipleObjects VirtualFree VirtualAlloc GetThreadPriority GetCurrentThread VirtualQuery FreeLibrary GetLastError GetStartupInfoA CreateProcessA CloseHandle LCMapStringW LCMapStringA GetTickCount GetCurrentThreadId GetLocaleInfoA SetErrorMode LoadLibraryA GetProcAddress QueryPerformanceCounter QueryPerformanceFrequency IsDBCSLeadByte GetACP GetCPInfo MultiByteToWideChar GetVersionExA InterlockedExchange InterlockedCompareExchange Sleep LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection HeapAlloc GetProcessHeap CreateFileA HeapFree

user32

SetTimer KillTimer GetClientRect ScreenToClient GetCursorPos SetCursor LoadCursorA EndPaint BeginPaint GetMenu DestroyWindow GetFocus WindowFromPoint GetCapture ReleaseCapture SetCapture TrackPopupMenu ClientToScreen DeleteMenu GetMenuItemID IsWindow DefWindowProcA GetWindowLongA CreateWindowExA RegisterClipboardFormatA CloseClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard SetClipboardData EmptyClipboard InsertMenuA RemoveMenu GetWindow UnregisterClassA MoveWindow SetMenu UpdateWindow ShowWindow SetDlgItemTextA EnableWindow GetDlgItemTextA GetWindowTextLengthA PostQuitMessage PostMessageA RegisterClassA DispatchMessageA TranslateAcceleratorA TranslateMessage GetMessageA LoadAcceleratorsA PostThreadMessageA GetQueueStatus PeekMessageA MsgWaitForMultipleObjects RegisterWindowMessageA MessageBoxA SystemParametersInfoA DialogBoxParamW DialogBoxParamA EndDialog SetWindowLongA GetParent GetWindowRect GetDesktopWindow SetWindowPos LoadIconA GetDlgItem SendMessageA SetWindowTextA SetFocus GetMenuItemCount GetMenuItemInfoA GetSystemMetrics InsertMenuItemA DdeInitializeA DdeCreateStringHandleA DdeConnect DdeClientTransaction DdeDisconnect DdeFreeStringHandle DdeUninitialize SendInput GetKeyboardLayout GetDC ReleaseDC GetDoubleClickTime LoadMenuA GetSubMenu DestroyMenu LoadStringA EnableMenuItem CheckMenuItem WaitForInputIdle InvalidateRect MapVirtualKeyA GetKeyState GetMenuStringA FillRect

gdi32

GetTextMetricsA GetClipRgn SetTextColor ExtTextOutW ExtTextOutA CreateRectRgn GetTextAlign GetBkMode GetTextColor EnumFontFamiliesA SetTextCharacterExtra BeginPath EndPage DPtoLP FillPath ExtCreatePen StrokePath EndDoc StartDocA LPtoDP CreateSolidBrush GetClipBox GetSystemPaletteEntries CreatePalette GetTextExtentPoint32A CreatePen GetBkColor SetBkColor GetCurrentObject GetTextExtentPoint32W EndPath SetPolyFillMode MoveToEx LineTo PolyBezierTo SelectClipPath SaveDC RestoreDC GdiFlush DeleteObject SelectObject StretchDIBits SetDIBitsToDevice CreateCompatibleBitmap GetObjectA CreateCompatibleDC DeleteDC CreateDIBSection GetDeviceCaps BitBlt RealizePalette SelectPalette GetStockObject CreateFontIndirectA SetBkMode SetTextAlign IntersectClipRect SelectClipRgn StartPage

comdlg32

GetOpenFileNameA PrintDlgA CommDlgExtendedError GetSaveFileNameA

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA RegQueryValueExW RegOpenKeyExW RegSetValueExA RegCreateKeyA RegSetValueA

shell32

DragQueryFileA DragAcceptFiles SHBrowseForFolderA SHGetSpecialFolderLocation SHGetPathFromIDListA SHAppBarMessage DragQueryFileW

ole32

CoTaskMemAlloc CoFreeUnusedLibraries CoInitialize CoTaskMemFree CoCreateInstance CoUninitialize

oleaut32

SysFreeString