5a390785c5c5147423e09a52ddaff3c95a20ceb872906e355d9a4a60651c3d49

Sharing

Copy URL Twitter E-mail

General

Target
5a390785c5c5147423e09a52ddaff3c95a20ceb872906e355d9a4a60651c3d49
Size 485KB
Sample220802-ex4jvsbggk
SHA256 5a390785c5c5147423e09a52ddaff3c95a20ceb872906e355d9a4a60651c3d49
MD5 f95f6ce7275eedcd29308e7d5ee7a2d9
SHA1 b202cf0cbb77a284f7be16c367b5cdd4b3ebcc75
SHA512 4c072c3cc993610c1f4bc76018348c90a8f99a6cee5c0231e82c206cd1c4f2f680117ff2371d1b5dddef0e724ffeebb01460df3e76a41235340a63bf853a04d3
SSDEEP 12288:mD9UDevpMtdoe83GWLh6iVMGPKtYLwqYZy4e:hiq/H8hh6O9KtqHYZS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5a390785c5c5147423e09a52ddaff3c95a20ceb872906e355d9a4a60651c3d49

.exe 485KB

5a390785c5c5147423e09a52ddaff3c95a20ceb872906e355d9a4a60651c3d49

IMPHASH 3d0d968829e97a969e3897cb10291d3d
SHA256 5a390785c5c5147423e09a52ddaff3c95a20ceb872906e355d9a4a60651c3d49
MD5 f95f6ce7275eedcd29308e7d5ee7a2d9
SHA1 b202cf0cbb77a284f7be16c367b5cdd4b3ebcc75
SHA512 4c072c3cc993610c1f4bc76018348c90a8f99a6cee5c0231e82c206cd1c4f2f680117ff2371d1b5dddef0e724ffeebb01460df3e76a41235340a63bf853a04d3
SSDEEP 12288:mD9UDevpMtdoe83GWLh6iVMGPKtYLwqYZy4e:hiq/H8hh6O9KtqHYZS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

6039

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindNextFileA IsValidCodePage GetOEMCP FindFirstFileExA GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA GetStringTypeW GetProcessHeap WriteConsoleW HeapSize HeapReAlloc DecodePointer FlushFileBuffers LocalFree CreateThread GetSystemDirectoryA Sleep LocalAlloc GetEnvironmentVariableA GetCPInfo FindClose UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetLastError GetModuleFileNameW RaiseException InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceFrequency CreateFileW GetFileType CloseHandle GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CompareStringW LCMapStringW GetConsoleCP GetConsoleMode SetStdHandle SetEndOfFile ReadFile ReadConsoleW SetFilePointerEx GetFileAttributesExW SetFileAttributesW GetTimeZoneInformation VirtualProtect

user32

GetCursorPos RegisterClassExA GetWindowTextLengthA SetScrollInfo GetFocus InflateRect GetScrollInfo IsWindow GetClassInfoExA SetMenuItemInfoA SetWindowLongA CallWindowProcA ExitWindowsEx CreateWindowExA IntersectRect SetFocus SetParent EndDeferWindowPos LoadIconA AppendMenuA

gdi32

ScaleWindowExtEx SelectClipRgn ScaleViewportExtEx CreateRectRgn CreateFontA SetViewportExtEx OffsetViewportOrgEx CreateCompatibleDC GetPixel

comctl32

ImageList_LoadImageA ord6 CreatePropertySheetPageA PropertySheetA

advapi32

SystemFunction036 SetSecurityDescriptorDacl SetEntriesInAclA CreateServiceW RegCloseKey StartServiceCtrlDispatcherA QueryServiceStatus RegDeleteKeyA RegQueryValueExA AllocateAndInitializeSid LookupPrivilegeValueA SetServiceStatus RegisterServiceCtrlHandlerA OpenSCManagerA RegCreateKeyExA ControlService OpenProcessToken FreeSid InitializeSecurityDescriptor RegOpenKeyExA OpenThreadToken OpenServiceA

wintrust

WTHelperProvDataFromStateData WTHelperGetProvSignerFromChain WinVerifyTrust