ab2c44c072abe8bd4706f266faefca4df6d8644b8c180b9f1ae0604cb3dbb394

Sharing

Copy URL Twitter E-mail

General

Target
ab2c44c072abe8bd4706f266faefca4df6d8644b8c180b9f1ae0604cb3dbb394
Size 31KB
Sample221004-jrc7yaabf5
SHA256 ab2c44c072abe8bd4706f266faefca4df6d8644b8c180b9f1ae0604cb3dbb394
MD5 4f690c3bd41489eebcd4e56bc828ade0
SHA1 7043103e0f9dc6774cbcc0dec15a645833b5319a
SHA512 90c2de3024581eef7c03eb5ae72507257e083f458054e16b9027bfe075c9ac7071b100578bf0cb6b1712ed217315daf6100ea7bde134eed78bbab01238eb949f
SSDEEP 768:f5xQOLlGMJZuQN0r7qHOjGzhqDwR5xuOZ:fXQIGguQg7qH2SksR5ks
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ab2c44c072abe8bd4706f266faefca4df6d8644b8c180b9f1ae0604cb3dbb394

.dll 31KB

ab2c44c072abe8bd4706f266faefca4df6d8644b8c180b9f1ae0604cb3dbb394

IMPHASH 67b184596ec542d3c4213dea5ea4eaf4
SHA256 ab2c44c072abe8bd4706f266faefca4df6d8644b8c180b9f1ae0604cb3dbb394
MD5 4f690c3bd41489eebcd4e56bc828ade0
SHA1 7043103e0f9dc6774cbcc0dec15a645833b5319a
SHA512 90c2de3024581eef7c03eb5ae72507257e083f458054e16b9027bfe075c9ac7071b100578bf0cb6b1712ed217315daf6100ea7bde134eed78bbab01238eb949f
SSDEEP 768:f5xQOLlGMJZuQN0r7qHOjGzhqDwR5xuOZ:fXQIGguQg7qH2SksR5ks
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23048

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile GetFileSize SetFilePointer GetLastError CreateEventA GetModuleFileNameA GetTempPathA GetWindowsDirectoryA WaitForSingleObject SetFileAttributesA GetCommandLineA CreateThread Sleep GetSystemDirectoryA MultiByteToWideChar DeleteFileA GlobalLock CreateFileA WriteFile GlobalUnlock GlobalFree CloseHandle LoadLibraryA GetProcAddress GlobalAlloc VirtualProtect ExitProcess

user32

GetClassNameA SetWindowLongA RegisterShellHookWindow RegisterWindowMessageA CallWindowProcA wsprintfA GetDesktopWindow GetDC GetWindowRect ReleaseDC GetParent GetWindowThreadProcessId EnumWindows GetWindowTextA GetClientRect

gdi32

CreateDCA GetDeviceCaps DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetDIBits RealizePalette SelectPalette GetStockObject GetObjectA DeleteDC

gdiplus

GdiplusShutdown GdipDisposeImage GdipLoadImageFromFile GdipGetImageEncoders GdipGetImageEncodersSize GdipFree GdipAlloc GdipCloneImage GdipSaveImageToFile GdiplusStartup

msvcp60

??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ

ws2_32

connect htons gethostbyname socket recv inet_ntoa send WSAStartup WSACleanup inet_addr closesocket

wininet

InternetReadFile InternetOpenUrlA InternetOpenA InternetCloseHandle

msvcrt

strrchr _access strcat memset strchr strncpy abs malloc free __dllonexit _onexit _initterm _adjust_fdiv _getpid _stricmp _strlwr _strrev wcscmp ??2@YAPAXI@Z memcpy __CxxFrameHandler strcmp strstr atoi sprintf strlen strcpy

netapi32

Netbios