21a0201874af80436dc0a36e5cbaf7da9b75217b3e39b712f3850729cf47deb6[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
21a0201874af80436dc0a36e5cbaf7da9b75217b3e39b712f3850729cf47deb6.bin
Size 372KB
Sample220708-nrtbdacbck
SHA256 21a0201874af80436dc0a36e5cbaf7da9b75217b3e39b712f3850729cf47deb6
MD5 e3b3e285390c0e2f7d04bd040bec790d
SHA1 dbee71535e9f1fb23b3f01e25989d22d51237e68
SHA512 6156a6b0ff4f41c823cba68a4596676e357ceb5b8c0848c2828a72321dbc2a731d9ae8f1a417fe27aef7de0080001ad3f77b3809b64a93c610ae99f95b35f5be
SSDEEP 6144:C9dswuuW1sVyO6x5x6bQ5PJIgNdsalkFrgikCxEwdrDY2AotYSNlx4:CtuuiswO696bQXIqSa2FjJG0Y2AotYW4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

21a0201874af80436dc0a36e5cbaf7da9b75217b3e39b712f3850729cf47deb6.bin

.exe 372KB

21a0201874af80436dc0a36e5cbaf7da9b75217b3e39b712f3850729cf47deb6.bin

IMPHASH 09079191e32ab271df88d26a787c56c2
SHA256 21a0201874af80436dc0a36e5cbaf7da9b75217b3e39b712f3850729cf47deb6
MD5 e3b3e285390c0e2f7d04bd040bec790d
SHA1 dbee71535e9f1fb23b3f01e25989d22d51237e68
SHA512 6156a6b0ff4f41c823cba68a4596676e357ceb5b8c0848c2828a72321dbc2a731d9ae8f1a417fe27aef7de0080001ad3f77b3809b64a93c610ae99f95b35f5be
SSDEEP 6144:C9dswuuW1sVyO6x5x6bQ5PJIgNdsalkFrgikCxEwdrDY2AotYSNlx4:CtuuiswO696bQXIqSa2FjJG0Y2AotYW4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39718

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareStringW LoadLibraryW WriteConsoleW FlushFileBuffers SetStdHandle GetStringTypeW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID HeapReAlloc HeapSize SetFilePointer IsValidCodePage GetOEMCP GetACP GetCPInfo GetCurrentProcessId GetTickCount QueryPerformanceCounter FreeEnvironmentStringsW GetFileType SetHandleCount CreateFileW ExitProcess GetConsoleCP WriteFile MultiByteToWideChar SetEnvironmentVariableA VirtualQueryEx InitializeCriticalSectionAndSpinCount GetLastError SetLastError GetModuleHandleW InterlockedIncrement TlsFree TlsSetValue TlsGetValue TlsAlloc GetCurrentProcess TerminateProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter IsProcessorFeaturePresent DecodePointer EncodePointer GetStartupInfoW HeapSetInformation GetCommandLineA LeaveCriticalSection EnterCriticalSection GetConsoleMode SetConsoleMode ReadConsoleInputA HeapFree InterlockedDecrement RtlUnwind RaiseException LCMapStringW SetEndOfFile GetProcessHeap ReadProcessMemory FindFirstFileA GetStdHandle GetConsoleScreenBufferInfo SetConsoleCursorPosition FormatMessageA LocalFree Sleep GetCurrentThreadId GlobalAlloc GetEnvironmentStringsW FreeEnvironmentStringsA lstrcpyA GlobalLock lstrlenA GlobalUnlock HeapCreate GetConsoleWindow GetFileInformationByHandle HeapAlloc SearchPathA GetProcAddress OpenProcess ReadFile EnumDateFormatsA FindNextFileA FindClose LocalAlloc WideCharToMultiByte GetModuleFileNameA GetLogicalDrives GetLogicalDriveStringsA GetPrivateProfileIntA GetLocalTime GetUserDefaultLangID GetLocaleInfoW GetDriveTypeA GetSystemTimeAsFileTime CreateFileA GetFileSize CloseHandle GetModuleFileNameW lstrcpyW lstrcmpiA DeleteCriticalSection

user32

GetMenu OpenClipboard GetForegroundWindow PostQuitMessage LoadIconA GetSysColorBrush BeginPaint GetClientRect GetWindowRect DefWindowProcA GetSystemMetrics RegisterClassA GetMenuItemCount EnumClipboardFormats GetClipboardFormatNameA GetClipboardData SetWindowLongA GetParent CloseClipboard MoveWindow GetClipCursor ClipCursor MessageBoxA GetWindowLongA CreateWindowExA SetScrollPos SetTimer EndDialog KillTimer UpdateWindow SetKeyboardState ActivateKeyboardLayout LoadKeyboardLayoutA GetKeyboardLayoutList GetWindowThreadProcessId AttachThreadInput GetFocus GetClassNameA SetWindowTextA InsertMenuItemA wsprintfA GetDC FindWindowA ChildWindowFromPoint SetCursorPos GetDesktopWindow GetWindow GetWindowTextA EnableWindow CheckDlgButton OffsetRect GetIconInfo SetRect IsClipboardFormatAvailable InvalidateRect MapWindowPoints SetWindowPos EndPaint GetCursorPos CreatePopupMenu ReleaseDC IsWindow AdjustWindowRectEx IsWindowVisible RegisterClassExA GetSystemMenu EnumWindows GetWindowPlacement SetWindowPlacement GetScrollInfo LoadAcceleratorsA LoadCursorA CreateWindowExW SendMessageW SetDlgItemTextA RegisterHotKey GetDlgItem SendMessageA ShowWindow

gdi32

SelectObject CreateSolidBrush CreateEllipticRgn CreateDCA CreateCompatibleDC CreateCompatibleBitmap SetPixel DeleteObject DeleteDC SetBrushOrgEx ExcludeClipRect Rectangle FillRgn GetDeviceCaps CreateRectRgnIndirect CombineRgn CreatePen

winspool.drv

ord201

comdlg32

CommDlgExtendedError GetOpenFileNameA ChooseColorA

advapi32

RegCreateKeyA RegCloseKey GetLengthSid InitializeAcl InitializeSecurityDescriptor GetTokenInformation AddAccessAllowedAce GetAce SetSecurityDescriptorDacl GetSecurityDescriptorLength MakeSelfRelativeSD IsValidSecurityDescriptor AllocateAndInitializeSid GetNamedSecurityInfoA SetEntriesInAclA SetNamedSecurityInfoA FreeSid RegQueryValueExA

shell32

SHEmptyRecycleBinA SHQueryRecycleBinA

ole32

CoCreateInstance StgCreateDocfile CreateStreamOnHGlobal CoInitializeEx RegisterDragDrop CoInitialize

oleaut32

SysAllocStringLen

odbc32

ord61 ord62

netapi32

NetShareGetInfo

psapi

GetModuleInformation GetProcessMemoryInfo

avicap32

capGetDriverDescriptionA

winmm

midiInGetID midiInMessage

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

shlwapi

PathFindExtensionW PathFindFileNameA PathFindFileNameW

comctl32

InitCommonControlsEx ord412

gdiplus

GdiplusStartup

imm32

ImmReleaseContext ImmGetContext ImmIsIME ImmSetCompositionWindow

setupapi

SetupDiDestroyDeviceInfoList SetupDiGetClassDevsW

wtsapi32

WTSEnumerateProcessesA

snmpapi

SnmpUtilAsnAnyCpy