969bfe42819e30e35ca601df443471d677e04c988928b63fccb25bf0531ea2cc[.]bin[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
969bfe42819e30e35ca601df443471d677e04c988928b63fccb25bf0531ea2cc.bin.exe
Size 225KB
Sample221016-y3acraabe2
SHA256 969bfe42819e30e35ca601df443471d677e04c988928b63fccb25bf0531ea2cc
MD5 7ae6806d0fbcc762a5a58a6e60e2ff9e
SHA1 1cb7e2ab7012990bd5051120c3ef8a438035aa88
SHA512 7baaf507843e94b74adc11b9c9647e96074345e774a179bf8150d03202ce575185e183dde940ca91fef4ae7a3eab6c66e4347dc48c972e04b2973257620413a7
SSDEEP 6144:ExJmXaQwAhgEkJ8kNV50DErsMxgTw7ozFD254W:EXeaQwAE89DEGcopfW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

969bfe42819e30e35ca601df443471d677e04c988928b63fccb25bf0531ea2cc.bin.exe

.exe 225KB

969bfe42819e30e35ca601df443471d677e04c988928b63fccb25bf0531ea2cc.bin.exe

IMPHASH bb2600e94092da119ee6acbbd047be43
SHA256 969bfe42819e30e35ca601df443471d677e04c988928b63fccb25bf0531ea2cc
MD5 7ae6806d0fbcc762a5a58a6e60e2ff9e
SHA1 1cb7e2ab7012990bd5051120c3ef8a438035aa88
SHA512 7baaf507843e94b74adc11b9c9647e96074345e774a179bf8150d03202ce575185e183dde940ca91fef4ae7a3eab6c66e4347dc48c972e04b2973257620413a7
SSDEEP 6144:ExJmXaQwAhgEkJ8kNV50DErsMxgTw7ozFD254W:EXeaQwAE89DEGcopfW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22912

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

crypt32

CryptStringToBinaryA

comctl32

ord17 InitCommonControlsEx

mpr

WNetOpenEnumW WNetEnumResourceW WNetCloseEnum

kernel32

Process32FirstW GetSystemInfo GetVersionExW GetModuleHandleA lstrcpyA GetProcAddress ExitProcess GetModuleHandleW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetVolumeInformationW GetVolumePathNameW MulDiv GetCommandLineW FindFirstVolumeW FindNextVolumeW FindVolumeClose GetFileSize QueryDosDeviceW ReadFile GetTempPathW CreateMutexW CreateProcessA lstrcatA IsWow64Process GetModuleFileNameA GetModuleFileNameW SetVolumeMountPointW Process32NextW ResumeThread WaitForMultipleObjects GetComputerNameExW lstrcmpiW GetSystemTime GetWindowsDirectoryW lstrcatW GetLastError Sleep GetCurrentThreadId CreateFileW lstrlenA WriteFile lstrlenW lstrcpyW CreateThread GetLogicalDriveStringsW GetDriveTypeW GetDiskFreeSpaceW lstrcmpW GetProcessHeap CloseHandle HeapReAlloc OpenProcess Wow64DisableWow64FsRedirection WaitForSingleObject GetCurrentProcess VirtualAlloc

user32

DefWindowProcW GetWindowRect GetDC SetWindowPos MessageBoxW CreateWindowExW SendMessageW EndDialog GetSystemMetrics RegisterClassExW wsprintfA DispatchMessageW SetTimer RegisterHotKey TranslateMessage LoadCursorW GetClientRect GetDlgItem PostQuitMessage wsprintfW DrawTextW GetMessageW ReleaseDC SystemParametersInfoW ShowWindow LoadImageW

gdi32

CreateCompatibleBitmap BitBlt CreateFontW DeleteDC GetDeviceCaps SetBkMode SetTextColor DeleteObject GetTextExtentPoint32W SelectObject CreateCompatibleDC CreateDIBSection SetBkColor

advapi32

RegOpenKeyExW RegSetValueExW RegCreateKeyExW SystemFunction036 RegQueryValueExW RegQueryValueExA RegCloseKey AllocateAndInitializeSid

shell32

SHGetPathFromIDListW CommandLineToArgvW ShellExecuteExW SHBrowseForFolderW SHEmptyRecycleBinW

ws2_32

ntohl inet_ntoa setsockopt socket gethostbyname WSAStartup inet_addr htons bind WSACleanup sendto

iphlpapi

SendARP GetAdaptersAddresses

netapi32

NetApiBufferFree NetShareEnum