3dad9b4bab250ac2b613d2976439ba3affc0af117247c152b9fe672ab02b879d

Sharing

Copy URL Twitter E-mail

General

Target
3dad9b4bab250ac2b613d2976439ba3affc0af117247c152b9fe672ab02b879d
Size 327KB
Sample220701-sfy5pshdbl
SHA256 3dad9b4bab250ac2b613d2976439ba3affc0af117247c152b9fe672ab02b879d
MD5 eab510e11134f46561322a4d9aced505
SHA1 1543faad2926152a3f3a43c825795b5bf1f2ecae
SHA512 0a05680363bc97fd7768f081ef49f007e7989a62a21dfa42eb63a60b2dfdc7be64a95bf0ca23f801c606fdbfa06394948c165116a79ba5aa076253f584815a40
SSDEEP 6144:7kyacNPpEWX+RWP0KAZNkU3sVXkER6eWVvgjX4yq/Ii6a4WCKjSFnEWXL:7kOEfRWP0KAZN5ekEYeljw/oWJjSFEM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

3dad9b4bab250ac2b613d2976439ba3affc0af117247c152b9fe672ab02b879d

.exe 327KB

3dad9b4bab250ac2b613d2976439ba3affc0af117247c152b9fe672ab02b879d

IMPHASH 7ed0d71376e55d58ab36dc7d3ffda898
SHA256 3dad9b4bab250ac2b613d2976439ba3affc0af117247c152b9fe672ab02b879d
MD5 eab510e11134f46561322a4d9aced505
SHA1 1543faad2926152a3f3a43c825795b5bf1f2ecae
SHA512 0a05680363bc97fd7768f081ef49f007e7989a62a21dfa42eb63a60b2dfdc7be64a95bf0ca23f801c606fdbfa06394948c165116a79ba5aa076253f584815a40
SSDEEP 6144:7kyacNPpEWX+RWP0KAZNkU3sVXkER6eWVvgjX4yq/Ii6a4WCKjSFnEWXL:7kOEfRWP0KAZN5ekEYeljw/oWJjSFEM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12799

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathW SetFileTime CloseHandle GetShortPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError GetFullPathNameW CreateDirectoryW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW SetFileAttributesW ExpandEnvironmentStringsW LoadLibraryW lstrlenW lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW lstrcpyA lstrcpyW lstrcatW GetSystemDirectoryW GetVersion GetProcAddress LoadLibraryA GetModuleHandleA GetModuleHandleW lstrcmpiW lstrcmpW WaitForSingleObject GlobalFree GlobalAlloc LoadLibraryExW GetExitCodeProcess FreeLibrary WritePrivateProfileStringW SetErrorMode GetCommandLineW GetPrivateProfileStringW FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar WriteFile lstrlenA WideCharToMultiByte

user32

EndDialog ScreenToClient GetWindowRect RegisterClassW EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData wsprintfW CreateWindowExW SystemParametersInfoW AppendMenuW CreatePopupMenu GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage GetDC SetWindowLongW LoadImageW SendMessageTimeoutW FindWindowExW EmptyClipboard OpenClipboard TrackPopupMenu EndPaint ShowWindow GetDlgItem IsWindow SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegCloseKey RegOpenKeyExW RegDeleteKeyW RegDeleteValueW RegEnumValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW