df255af635a2dde04c031db95862f11e1bf44fe5cfc10d3b20bd4678ed818567[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
df255af635a2dde04c031db95862f11e1bf44fe5cfc10d3b20bd4678ed818567.exe
Size 623KB
Sample220703-l2mkgaeedr
SHA256 df255af635a2dde04c031db95862f11e1bf44fe5cfc10d3b20bd4678ed818567
MD5 c24a08bfeb09c9842b8e6578d7b0b721
SHA1 937a77b8ad27217b346922cb5513458542e3d390
SHA512 42717c37604b41fff2bae91a22037f0e2b1d3514a8305d672595930f331a6a998d1a88741585413977ee81cd59ab155faf19ae654d229dc0256e30d71b222799
SSDEEP 6144:Xe1Hsi5y4+31THCZ1L8TtY5d1XECPBe8gtgU/EOS1YnxsWMmxGnNWSjiSJWw2dh+:XL9hrCZ58TCTQ8MXSynHSh9WhxRrt+z
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

df255af635a2dde04c031db95862f11e1bf44fe5cfc10d3b20bd4678ed818567.exe

.exe 623KB

df255af635a2dde04c031db95862f11e1bf44fe5cfc10d3b20bd4678ed818567.exe

IMPHASH a99564d9a11ac02dbb1ea9e9f35fba2e
SHA256 df255af635a2dde04c031db95862f11e1bf44fe5cfc10d3b20bd4678ed818567
MD5 c24a08bfeb09c9842b8e6578d7b0b721
SHA1 937a77b8ad27217b346922cb5513458542e3d390
SHA512 42717c37604b41fff2bae91a22037f0e2b1d3514a8305d672595930f331a6a998d1a88741585413977ee81cd59ab155faf19ae654d229dc0256e30d71b222799
SSDEEP 6144:Xe1Hsi5y4+31THCZ1L8TtY5d1XECPBe8gtgU/EOS1YnxsWMmxGnNWSjiSJWw2dh+:XL9hrCZ58TCTQ8MXSynHSh9WhxRrt+z
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16083

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winspool.drv

OpenPrinterW ClosePrinter DocumentPropertiesW

oleaut32

VariantInit VariantChangeType VariantClear

gdi32

RectVisible DeleteObject GetDeviceCaps SetTextColor SetMapMode TextOutW PtVisible ScaleWindowExtEx SaveDC GetClipBox SelectObject ScaleViewportExtEx GetStockObject DeleteDC SetWindowExtEx SetViewportExtEx ExtTextOutW SetViewportOrgEx RestoreDC OffsetViewportOrgEx Escape SetBkColor CreateBitmap

advapi32

CryptHashData LsaClearAuditLog SystemFunction019 ClearEventLogA

user32

GetMenuItemCount SetPropW ClientToScreen GetWindowRect GrayStringW SetWindowLongW RegisterWindowMessageW CallWindowProcW GetWindowPlacement GetMenuState CopyRect GetPropW GetClassNameW GetMenuCheckMarkDimensions SetWindowsHookExW SystemParametersInfoA PostMessageW UnregisterClassA LoadCursorW ReleaseDC CallNextHookEx IsIconic DrawTextExW GetWindow GetClientRect MessageBoxW SetWindowTextW CheckMenuItem SetMenuItemBitmaps GetWindowLongW DestroyMenu GetClassInfoW GetDlgItem PtInRect GetMessageTime ModifyMenuW GetDlgCtrlID SetForegroundWindow GetKeyState GetDC GetSysColorBrush WinHelpW GetMenu GetCapture UnhookWindowsHookEx LoadIconW SetWindowPos GetTopWindow DrawTextW EnableWindow GetWindowThreadProcessId PostQuitMessage LoadBitmapW IsWindowEnabled GetSystemMetrics DefWindowProcW EnableMenuItem GetLastActivePopup wsprintfW GetParent GetClassLongW ValidateRect GetClassInfoExW GetForegroundWindow GetMenuItemID GetFocus RemovePropW AdjustWindowRectEx SendMessageW GetSysColor MapWindowPoints PeekMessageW GetWindowTextW TabbedTextOutW DispatchMessageW DestroyWindow IsWindow ExitWindowsEx GetMessagePos GetSubMenu RegisterClassW CreateWindowExW

kernel32

GetCurrentThreadId GetModuleFileNameA FreeEnvironmentStringsA SetStdHandle SetUnhandledExceptionFilter GetConsoleMode GetModuleFileNameW LCMapStringW LoadResource GetVersionExA GetLocaleInfoA InitializeCriticalSection GetLastError WriteFile CreateFileA LeaveCriticalSection IsDebuggerPresent TlsGetValue GetEnvironmentStringsW GetModuleHandleW SetFilePointer SetLastError DeleteCriticalSection GetProcessHeap VirtualFree GlobalFlags GetConsoleCP SetHandleCount FreeEnvironmentStringsW SetCurrentDirectoryW GetVersion RaiseException GetCurrentProcess InterlockedIncrement FlushFileBuffers TlsAlloc InterlockedDecrement GetSystemDefaultLangID SizeofResource FreeLibrary GetStartupInfoW LCMapStringA LocalReAlloc GetStdHandle GetCPInfo WriteConsoleA GlobalDeleteAtom GetPrivateProfileStringW WinExec EnterCriticalSection GetCurrentProcessId GetThreadLocale GlobalFindAtomW InterlockedExchange GlobalReAlloc GlobalLock LoadLibraryA GlobalFree lstrcmpW Sleep GlobalAddAtomW TlsFree HeapDestroy GetCommandLineA CloseHandle RtlUnwind HeapCreate GlobalAlloc LockResource GetOEMCP GetConsoleOutputCP HeapAlloc FormatMessageW ExitProcess HeapReAlloc GlobalUnlock FindResourceW HeapFree LoadLibraryW GetEnvironmentStringsA GetProcAddress GetFileType HeapSize GetModuleHandleA WriteConsoleW GetStartupInfoA GetStringTypeW LocalFree LocalAlloc lstrlenW GetACP QueryPerformanceCounter GetVersionExW GetStringTypeA TlsSetValue GlobalHandle SetPriorityClass GetCommandLineW