d9b53bf95c3a31ba9f1c9964eb1ba5ad909e9c25ba923b37595f465f304d8382

Sharing

Copy URL Twitter E-mail

General

Target
d9b53bf95c3a31ba9f1c9964eb1ba5ad909e9c25ba923b37595f465f304d8382
Size 186KB
Sample220628-vjmxyscfh2
SHA256 d9b53bf95c3a31ba9f1c9964eb1ba5ad909e9c25ba923b37595f465f304d8382
MD5 c8adfdd0129179f9a0eb7e52f262bf23
SHA1 a80983e9ab55b2691a802aea51002d68f0d74d89
SHA512 c6ff7fdbc3fe32c1e0f5c874e994dd8cb3158b3f608123b36e06ee18de185162b0b5143f4018edffac956afe63b4895cb7f0a57b860c5dc5a8f7527ceb4177ad
SSDEEP 3072:bD6Ujh9j34tviIqa6h2BZCg9RT7FGtXdrEhxt2Bx8NBmm4jR24KpEs0K:b+M0trWh2ttGtBW9mZjXC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d9b53bf95c3a31ba9f1c9964eb1ba5ad909e9c25ba923b37595f465f304d8382

.exe 186KB

d9b53bf95c3a31ba9f1c9964eb1ba5ad909e9c25ba923b37595f465f304d8382

IMPHASH 0fa7f98eff06eb65c4b50fbc58f183e4
SHA256 d9b53bf95c3a31ba9f1c9964eb1ba5ad909e9c25ba923b37595f465f304d8382
MD5 c8adfdd0129179f9a0eb7e52f262bf23
SHA1 a80983e9ab55b2691a802aea51002d68f0d74d89
SHA512 c6ff7fdbc3fe32c1e0f5c874e994dd8cb3158b3f608123b36e06ee18de185162b0b5143f4018edffac956afe63b4895cb7f0a57b860c5dc5a8f7527ceb4177ad
SSDEEP 3072:bD6Ujh9j34tviIqa6h2BZCg9RT7FGtXdrEhxt2Bx8NBmm4jR24KpEs0K:b+M0trWh2ttGtBW9mZjXC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

77828

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle GetLastError OutputDebugStringA GetModuleFileNameA GetFullPathNameA CreateProcessA lstrcpyA SetLastError CreateMutexA lstrlenW FreeLibrary InterlockedDecrement lstrlenA LocalFree AreFileApisANSI MultiByteToWideChar GetStartupInfoA GetProcAddress ExitProcess CancelWaitableTimer GetTickCount ActivateActCtx GlobalFindAtomA GetACP OpenWaitableTimerA OpenWaitableTimerW GetCurrentThreadId lstrcpynA VirtualProtect GetFileAttributesA WideCharToMultiByte LoadLibraryA GetModuleHandleA GetOEMCP

user32

IsWindowUnicode GetDesktopWindow IsWindowVisible EnableWindow PtInRect GetWindowRect GetSystemMenu GetSystemMetrics ReleaseCapture SetCapture SetForegroundWindow SendMessageA GetDlgCtrlID FillRect GetParent DrawTextA EnumChildWindows IsZoomed GetWindowTextA GrayStringA DefWindowProcA SetWindowTextA UpdateWindow wsprintfW IsWindowEnabled GetTopWindow OffsetRect TabbedTextOutA SetRect IsWindow

gdi32

TextOutA LPtoDP PtVisible Polyline CombineRgn SetPixel CreateRectRgn RectVisible BitBlt DPtoLP GetObjectA CreatePalette GetTextColor PtInRegion SetRectRgn CreatePolygonRgn CreateFontIndirectA

advapi32

RegCloseKey CryptDestroyHash RegEnumKeyW RegOpenKeyExW LsaClose EqualSid CryptReleaseContext LsaOpenPolicy RegSetValueExW CryptCreateHash IsTextUnicode RegCreateKeyExA RegOpenCurrentUser FreeSid CryptDestroyKey CryptAcquireContextA RegDeleteValueW CryptEncrypt RegEnumValueA RegQueryValueExA RegSetValueExA CryptDecrypt CryptDeriveKey RegDeleteValueA RegOpenKeyExA CryptHashData LsaFreeMemory RegQueryValueExW RegDeleteKeyW RegCreateKeyExW RegEnumValueW RegOpenKeyA

shell32

ShellExecuteA SHGetDesktopFolder SHGetMalloc SHGetPathFromIDListA

ole32

CoTaskMemFree CoCreateInstance CLSIDFromProgID CoUninitialize StringFromCLSID CoInitialize

comctl32

InitCommonControlsEx _TrackMouseEvent

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

oledlg

OleUIBusyW

msvcrt

__getmainargs _CIcos __p__fmode __set_app_type __setusermatherr __p__commode _splitpath exit _strdup _onexit _initterm _exit _XcptFilter free _setmbcp _controlfp _except_handler3 _CxxThrowException _mbsicmp _acmdln _vsnprintf __CxxFrameHandler ?terminate@@YAXXZ __dllonexit ??1type_info@@UAE@XZ _mbscmp _adjust_fdiv

Name

.text

Size

70KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data2

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ