b1e1c337e15331a2d60665ff4140171830d234c78d54a4f406ca13c98247ece1

Sharing

Copy URL Twitter E-mail

General

Target
b1e1c337e15331a2d60665ff4140171830d234c78d54a4f406ca13c98247ece1
Size 427KB
Sample220919-j7qszafhd8
SHA256 b1e1c337e15331a2d60665ff4140171830d234c78d54a4f406ca13c98247ece1
MD5 623e4899f60b1a2077800b92e22ec4c9
SHA1 1088a949b942e3fd0e4a639d2313374fa0f49153
SHA512 feed9839a37e8d7ac0dc87fba5c886759972d268d98d7bd883243d02b0d861fe2bfe84bbc88255bf2ef8aef49af7ec78ae0a9b5431bf338acab364078ea90168
SSDEEP 6144:SCNbLqcVTpwikcpFaTINluqmO5MpODEmthwTZe+U:S2LzVTpwr23uqmO5MpODEmrwTZe+U
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b1e1c337e15331a2d60665ff4140171830d234c78d54a4f406ca13c98247ece1

.exe 427KB

b1e1c337e15331a2d60665ff4140171830d234c78d54a4f406ca13c98247ece1

IMPHASH c9563dea574f58f47d86577e5a7f024c
SHA256 b1e1c337e15331a2d60665ff4140171830d234c78d54a4f406ca13c98247ece1
MD5 623e4899f60b1a2077800b92e22ec4c9
SHA1 1088a949b942e3fd0e4a639d2313374fa0f49153
SHA512 feed9839a37e8d7ac0dc87fba5c886759972d268d98d7bd883243d02b0d861fe2bfe84bbc88255bf2ef8aef49af7ec78ae0a9b5431bf338acab364078ea90168
SSDEEP 6144:SCNbLqcVTpwikcpFaTINluqmO5MpODEmthwTZe+U:S2LzVTpwr23uqmO5MpODEmrwTZe+U
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

425984

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegSetValueExW RegQueryValueExW RegOpenKeyExW RegOpenKeyExA RegEnumValueW RegEnumValueA RegEnumKeyExW RegEnumKeyExA RegDeleteValueW RegDeleteValueA RegCreateKeyExW GetUserNameW RegSetValueExA RegQueryValueExA RegCreateKeyExA GetUserNameA

kernel32

FlushFileBuffers ExitProcess SetStdHandle GetLocaleInfoA GetStringTypeW GetStringTypeA SetFilePointer InterlockedExchange RtlUnwind IsBadWritePtr HeapReAlloc VirtualAlloc InitializeCriticalSection GetCPInfo GetOEMCP LoadLibraryA EnterCriticalSection LeaveCriticalSection VirtualQuery GetSystemInfo VirtualProtect LCMapStringW LCMapStringA HeapAlloc HeapFree VirtualFree HeapCreate HeapDestroy TlsAlloc TlsGetValue TlsSetValue TlsFree DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA lstrcpynA GetVersionExW GetModuleFileNameA GetStdHandle GetCommandLineA SetUnhandledExceptionFilter UnhandledExceptionFilter GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter GetCommandLineW ReadFile WriteFile WideCharToMultiByte SetLastError GetACP CreateThread SetEvent LocalAlloc lstrlenA LoadResource LockResource LocalFree CloseHandle GetLastError InterlockedDecrement FreeLibrary InterlockedIncrement GetStartupInfoA DebugBreak GetCurrentProcess TerminateProcess MultiByteToWideChar GetProcAddress GetVersionExA GetModuleHandleA GetComputerNameA GetDiskFreeSpaceA GlobalMemoryStatus GetLocalTime GetModuleHandleW lstrlenW GetProcessHeap WaitForSingleObject CreateDirectoryA CreateDirectoryW CreateEventA CreateEventW CreateFileA CreateFileW FindResourceA FindResourceW FormatMessageA FormatMessageW GetCurrentDirectoryA GetCurrentDirectoryW GetFileAttributesA GetFileAttributesW ExpandEnvironmentStringsA ExpandEnvironmentStringsW LoadLibraryW

gdi32

CreateFontIndirectA CreateFontIndirectW GetObjectA GetObjectW GetDIBColorTable UpdateColors StretchBlt CreatePalette CreateCompatibleBitmap CreateSolidBrush SetTextColor SetBkMode SetMapMode SelectPalette RealizePalette TranslateCharsetInfo CreateCompatibleDC SelectObject BitBlt DeleteDC GetDeviceCaps GetStockObject CreateRectRgn CreateRectRgnIndirect DeleteObject SetRectRgn GetDCOrgEx GetClipBox CombineRgn EqualRgn

user32

TranslateMessage GetWindowDC MapDialogRect GetWindow FillRect CheckDlgButton IsDlgButtonChecked BeginPaint DrawIcon EndPaint EndDialog MapWindowPoints GetDesktopWindow GetDC ReleaseDC GetDlgItem EnableWindow SetRect LockWindowUpdate SetFocus SetWindowPlacement SetWindowPos GetClientRect MoveWindow EqualRect CopyRect IsWindowVisible InvalidateRect UpdateWindow EnableMenuItem ShowWindow SetForegroundWindow AdjustWindowRect IsZoomed SetCursor GetSystemMenu CreateMenu IsWindow PostQuitMessage OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetMessageTime GetCursorPos CreateDialogIndirectParamA CreateDialogIndirectParamW CreateDialogParamA CreateDialogParamW CreateWindowExA CreateWindowExW DefWindowProcA DefWindowProcW DialogBoxParamA DialogBoxParamW DispatchMessageA DispatchMessageW DrawTextA DrawTextW GetDlgItemTextA GetDlgItemTextW GetMessageA GetMessageW MessageBoxA MessageBoxW GetWindowLongA GetWindowLongW InsertMenuA InsertMenuW IsDialogMessageA IsDialogMessageW LoadAcceleratorsA LoadAcceleratorsW LoadCursorA LoadCursorW LoadIconA LoadIconW LoadImageA LoadImageW LoadStringW ModifyMenuA ModifyMenuW PostMessageA PostMessageW SendMessageA SendMessageW SetDlgItemTextA SetDlgItemTextW SetWindowLongA SetWindowLongW SetWindowTextA SetWindowTextW TranslateAcceleratorA TranslateAcceleratorW RegisterClassExA RegisterClassExW SendDlgItemMessageW DestroyIcon SetTimer KillTimer DestroyWindow GetSystemMetrics GetWindowRect

shell32

SHGetDesktopFolder SHGetMalloc SHGetPathFromIDListA ExtractIconW ExtractIconA SHGetSpecialFolderLocation

ole32

CoTaskMemAlloc CoCreateInstance CoInitialize CoUninitialize CoTaskMemFree

oleaut32

SysAllocString SysFreeString

comctl32

ImageList_Create InitCommonControlsEx ImageList_GetImageCount ImageList_ReplaceIcon

wsock32

inet_addr gethostbyaddr gethostbyname

comdlg32

GetFileTitleW GetSaveFileNameW GetOpenFileNameA GetSaveFileNameA GetFileTitleA GetOpenFileNameW