499e6e02a40abc049b3bcb7c6871cb530b5f0fc7bd96c47f583ee9120834a37f

Sharing

Copy URL Twitter E-mail

General

Target
499e6e02a40abc049b3bcb7c6871cb530b5f0fc7bd96c47f583ee9120834a37f
Size 128KB
Sample221011-w23a2aheel
SHA256 499e6e02a40abc049b3bcb7c6871cb530b5f0fc7bd96c47f583ee9120834a37f
MD5 1880c82feefa371999ff4ab391c79d80
SHA1 74911294307e791af2197df6a24ba6690b4c3879
SHA512 cef5636ef047e352661f82edc6a3c7835048e3e94bd0760008abe0be68a68313c241be864efcd1ecf0adde97dad0f4c2a70cedaf756f8db449b2917394bde218
SSDEEP 1536:GUgJ+bOg2rWyvmULwsQqdnITBNQIZnCLzsRA6:GrrWyv7wc8iItCLzsRH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

499e6e02a40abc049b3bcb7c6871cb530b5f0fc7bd96c47f583ee9120834a37f

.dll 128KB

499e6e02a40abc049b3bcb7c6871cb530b5f0fc7bd96c47f583ee9120834a37f

IMPHASH 7d55b793dde65f740dd8ed4c3cf497c2
SHA256 499e6e02a40abc049b3bcb7c6871cb530b5f0fc7bd96c47f583ee9120834a37f
MD5 1880c82feefa371999ff4ab391c79d80
SHA1 74911294307e791af2197df6a24ba6690b4c3879
SHA512 cef5636ef047e352661f82edc6a3c7835048e3e94bd0760008abe0be68a68313c241be864efcd1ecf0adde97dad0f4c2a70cedaf756f8db449b2917394bde218
SSDEEP 1536:GUgJ+bOg2rWyvmULwsQqdnITBNQIZnCLzsRA6:GrrWyv7wc8iItCLzsRH
MD5 SHA1 SHA512 SSDEEP

Minor OS version

Major OS version

Entry point

52745

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW FreeLibrary MultiByteToWideChar lstrlenA SizeofResource LoadResource FindResourceW GetLastError LoadLibraryExW GetShortPathNameW lstrcpynW HeapDestroy GetProcAddress LoadLibraryW lstrcpyW lstrcatW WideCharToMultiByte lstrlenW InterlockedDecrement EnterCriticalSection InterlockedIncrement LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection GetModuleFileNameW lstrcmpiW DisableThreadLibraryCalls GetStringTypeW GetStringTypeA LoadLibraryA GetOEMCP GetACP GetCPInfo WriteFile GetEnvironmentStringsW HeapFree HeapAlloc HeapReAlloc GetCommandLineA GetVersion LCMapStringA LCMapStringW ExitProcess GetModuleHandleA GetModuleFileNameA GetEnvironmentVariableA GetVersionExA HeapCreate VirtualFree VirtualAlloc RtlUnwind TerminateProcess GetCurrentProcess HeapSize GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings

user32

CharNextW

advapi32

RegQueryInfoKeyW RegSetValueExW RegEnumKeyExW RegOpenKeyExW RegCloseKey RegDeleteValueW RegCreateKeyExW RegDeleteKeyW RegEnumValueW

ole32

CoTaskMemFree CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance

oleaut32

SysAllocStringLen VariantCopy VariantChangeType VariantClear SysStringLen LoadRegTypeLi RegisterTypeLi LoadTypeLi SysAllocString SysFreeString VarUI4FromStr