9426a96f9b4422623f3e50a657ed388b844fe4501627c32c98434a8e01fb183e

Sharing

Copy URL Twitter E-mail

General

Target
9426a96f9b4422623f3e50a657ed388b844fe4501627c32c98434a8e01fb183e
Size 420KB
Sample221014-cehtbscahp
SHA256 9426a96f9b4422623f3e50a657ed388b844fe4501627c32c98434a8e01fb183e
MD5 5334d63f86e8f9b4e438a50c872d6aa8
SHA1 45449153cbc650c66638f2f927e022651e8920c8
SHA512 8898cfc715f6ab930a4aa4879d7ccd2fdeb5a113a99aa6ae71a26528092752985c40c2cb2b9e6c8ea2b19bca27fcd2a944b005b6de37bcf551df986d53d07057
SSDEEP 12288:8kWAehJuqTViAR6kU6ckEY8odNw0bERUQZ:8kWAAuqh36kUtt0bEyG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9426a96f9b4422623f3e50a657ed388b844fe4501627c32c98434a8e01fb183e

.exe 420KB

9426a96f9b4422623f3e50a657ed388b844fe4501627c32c98434a8e01fb183e

IMPHASH dbb1eb5c3476069287a73206929932fd
SHA256 9426a96f9b4422623f3e50a657ed388b844fe4501627c32c98434a8e01fb183e
MD5 5334d63f86e8f9b4e438a50c872d6aa8
SHA1 45449153cbc650c66638f2f927e022651e8920c8
SHA512 8898cfc715f6ab930a4aa4879d7ccd2fdeb5a113a99aa6ae71a26528092752985c40c2cb2b9e6c8ea2b19bca27fcd2a944b005b6de37bcf551df986d53d07057
SSDEEP 12288:8kWAehJuqTViAR6kU6ckEY8odNw0bERUQZ:8kWAAuqh36kUtt0bEyG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

46208

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

InitCommonControlsEx ord17

shlwapi

SHAutoComplete

kernel32

DeleteFileW DeleteFileA CreateDirectoryA CreateDirectoryW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW GetTickCount WideCharToMultiByte GlobalAlloc GetVersionExW GetFullPathNameA GetFullPathNameW GetModuleFileNameW FindResourceW GetModuleHandleW HeapAlloc GetProcessHeap HeapFree HeapReAlloc CompareStringA ExitProcess GetLocaleInfoW GetNumberFormatW SetFileAttributesW GetDateFormatW GetTimeFormatW FileTimeToSystemTime FileTimeToLocalFileTime ExpandEnvironmentStringsW WaitForSingleObject Sleep GetTempPathW MoveFileExW UnmapViewOfFile GetCommandLineW MapViewOfFile CreateFileMappingW OpenFileMappingW SetEnvironmentVariableW GetProcAddress LocalFileTimeToFileTime SystemTimeToFileTime GetSystemTime MultiByteToWideChar CompareStringW IsDBCSLeadByte GetCPInfo SetCurrentDirectoryW LoadLibraryW FreeLibrary SetFileAttributesA GetFileAttributesW GetFileAttributesA WriteFile GetStdHandle ReadFile GetCurrentDirectoryW CreateFileW CreateFileA GetFileType SetEndOfFile SetFilePointer MoveFileW SetFileTime GetCurrentProcess CloseHandle SetLastError GetLastError DosDateTimeToFileTime

user32

wvsprintfW ReleaseDC GetDC SendMessageW SetDlgItemTextW SetFocus EndDialog DestroyIcon SendDlgItemMessageW GetDlgItemTextW GetClassNameW DialogBoxParamW IsWindowVisible WaitForInputIdle SetForegroundWindow GetSysColor PostMessageW LoadBitmapW LoadIconW CharToOemA OemToCharA FindWindowExW wvsprintfA GetParent MapWindowPoints CreateWindowExW UpdateWindow SetWindowTextW LoadCursorW RegisterClassExW SetWindowLongW GetWindowLongW DefWindowProcW PeekMessageW GetMessageW TranslateMessage DispatchMessageW DestroyWindow GetClientRect IsWindow CharToOemBuffW MessageBoxW ShowWindow GetDlgItem EnableWindow OemToCharBuffA CharUpperA CharToOemBuffA LoadStringW SetWindowPos GetWindowTextW GetSystemMetrics GetWindow CharUpperW GetWindowRect CopyRect

gdi32

GetDeviceCaps GetObjectW CreateCompatibleBitmap SelectObject StretchBlt CreateCompatibleDC DeleteObject DeleteDC

comdlg32

GetOpenFileNameW CommDlgExtendedError GetSaveFileNameW

advapi32

RegOpenKeyExW LookupPrivilegeValueW OpenProcessToken RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey SetFileSecurityW SetFileSecurityA AdjustTokenPrivileges

shell32

SHChangeNotify ShellExecuteExW SHFileOperationW SHGetFileInfoW SHGetSpecialFolderLocation SHGetMalloc SHBrowseForFolderW SHGetPathFromIDListW

ole32

CreateStreamOnHGlobal OleInitialize CoCreateInstance OleUninitialize CLSIDFromString

oleaut32

VariantInit