D2F9DC8E7278A2EC0AA634536AC8D23DB209ABA8CA0E1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
D2F9DC8E7278A2EC0AA634536AC8D23DB209ABA8CA0E1.exe
Size 2.1MB
Sample220819-c3k9csaba3
SHA256 d2f9dc8e7278a2ec0aa634536ac8d23db209aba8ca0e109ce80469c27517ab33
MD5 e24d2cdf95e080f2b6a1db32352d8a3c
SHA1 780ac662ba88d28882c2821d1c5fdc9894b1fcb9
SHA512 b623c6991acd2b437e88d5de6fb61aaa0a28ec79f3586b5e1eb1d749af374eb8f3d1b23e6138f00168d77518d3c2c5793ecdb32f94ec67df1e45687f13addbb1
SSDEEP 49152:XMHaSOxCBcuLX54FiFdrAskBlVgEKEZv5zauP+Tx77KZbYj57O7Tfle:XM6FMBcuEEdrAstEnv53P+xhOfM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

D2F9DC8E7278A2EC0AA634536AC8D23DB209ABA8CA0E1.exe

.exe 2.1MB

D2F9DC8E7278A2EC0AA634536AC8D23DB209ABA8CA0E1.exe

IMPHASH dbb1eb5c3476069287a73206929932fd
SHA256 d2f9dc8e7278a2ec0aa634536ac8d23db209aba8ca0e109ce80469c27517ab33
MD5 e24d2cdf95e080f2b6a1db32352d8a3c
SHA1 780ac662ba88d28882c2821d1c5fdc9894b1fcb9
SHA512 b623c6991acd2b437e88d5de6fb61aaa0a28ec79f3586b5e1eb1d749af374eb8f3d1b23e6138f00168d77518d3c2c5793ecdb32f94ec67df1e45687f13addbb1
SSDEEP 49152:XMHaSOxCBcuLX54FiFdrAskBlVgEKEZv5zauP+Tx77KZbYj57O7Tfle:XM6FMBcuEEdrAstEnv53P+xhOfM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

46261

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

InitCommonControlsEx ord17

shlwapi

SHAutoComplete

kernel32

DeleteFileW DeleteFileA CreateDirectoryA CreateDirectoryW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW GetTickCount WideCharToMultiByte GlobalAlloc GetVersionExW GetFullPathNameA GetFullPathNameW GetModuleFileNameW FindResourceW GetModuleHandleW HeapAlloc GetProcessHeap HeapFree HeapReAlloc CompareStringA ExitProcess GetLocaleInfoW GetNumberFormatW SetFileAttributesW GetDateFormatW GetTimeFormatW FileTimeToSystemTime FileTimeToLocalFileTime ExpandEnvironmentStringsW WaitForSingleObject Sleep GetTempPathW MoveFileExW UnmapViewOfFile GetCommandLineW MapViewOfFile CreateFileMappingW OpenFileMappingW SetEnvironmentVariableW GetProcAddress LocalFileTimeToFileTime SystemTimeToFileTime GetSystemTime MultiByteToWideChar CompareStringW IsDBCSLeadByte GetCPInfo SetCurrentDirectoryW LoadLibraryW FreeLibrary SetFileAttributesA GetFileAttributesW GetFileAttributesA WriteFile GetStdHandle ReadFile GetCurrentDirectoryW CreateFileW CreateFileA GetFileType SetEndOfFile SetFilePointer MoveFileW SetFileTime GetCurrentProcess CloseHandle SetLastError GetLastError DosDateTimeToFileTime

user32

wvsprintfW ReleaseDC GetDC SendMessageW SetDlgItemTextW SetFocus EndDialog DestroyIcon SendDlgItemMessageW GetDlgItemTextW GetClassNameW DialogBoxParamW IsWindowVisible WaitForInputIdle SetForegroundWindow GetSysColor PostMessageW LoadBitmapW LoadIconW CharToOemA OemToCharA FindWindowExW wvsprintfA GetParent MapWindowPoints CreateWindowExW UpdateWindow SetWindowTextW LoadCursorW RegisterClassExW SetWindowLongW GetWindowLongW DefWindowProcW PeekMessageW GetMessageW TranslateMessage DispatchMessageW DestroyWindow GetClientRect IsWindow CharToOemBuffW MessageBoxW ShowWindow GetDlgItem EnableWindow OemToCharBuffA CharUpperA CharToOemBuffA LoadStringW SetWindowPos GetWindowTextW GetSystemMetrics GetWindow CharUpperW GetWindowRect CopyRect

gdi32

GetDeviceCaps GetObjectW CreateCompatibleBitmap SelectObject StretchBlt CreateCompatibleDC DeleteObject DeleteDC

comdlg32

GetOpenFileNameW CommDlgExtendedError GetSaveFileNameW

advapi32

RegOpenKeyExW LookupPrivilegeValueW OpenProcessToken RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey SetFileSecurityW SetFileSecurityA AdjustTokenPrivileges

shell32

SHChangeNotify ShellExecuteExW SHFileOperationW SHGetFileInfoW SHGetSpecialFolderLocation SHGetMalloc SHBrowseForFolderW SHGetPathFromIDListW

ole32

CreateStreamOnHGlobal OleInitialize CoCreateInstance OleUninitialize CLSIDFromString

oleaut32

VariantInit