7a126c05d172da9a72734477f760e5f3e425d783a856ffc290c393e6ebf43587

Sharing

Copy URL Twitter E-mail

General

Target
7a126c05d172da9a72734477f760e5f3e425d783a856ffc290c393e6ebf43587
Size 62KB
Sample221020-3ex65abafl
SHA256 7a126c05d172da9a72734477f760e5f3e425d783a856ffc290c393e6ebf43587
MD5 174f4002eb327e8c4349e8d022741dfe
SHA1 86642191a9ebcf4546f9b8759a803a959eefb5eb
SHA512 21bb1588874546badd54ad85e05606a56807c6df9deb933e742b57901b1a0c89289a16faa59a9f0984e2996c60a3fc127907777465ae16449f9d97ffb6bd977f
SSDEEP 1536:mI4WkaAb5anFjMMW7MMs0+2vIiXDqFiA8n7:mIZwlanlMMYMMsVQI4n7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

7a126c05d172da9a72734477f760e5f3e425d783a856ffc290c393e6ebf43587

.exe 62KB

7a126c05d172da9a72734477f760e5f3e425d783a856ffc290c393e6ebf43587

IMPHASH 5de0cabe853d959c3319b51c8ec562e6
SHA256 7a126c05d172da9a72734477f760e5f3e425d783a856ffc290c393e6ebf43587
MD5 174f4002eb327e8c4349e8d022741dfe
SHA1 86642191a9ebcf4546f9b8759a803a959eefb5eb
SHA512 21bb1588874546badd54ad85e05606a56807c6df9deb933e742b57901b1a0c89289a16faa59a9f0984e2996c60a3fc127907777465ae16449f9d97ffb6bd977f
SSDEEP 1536:mI4WkaAb5anFjMMW7MMs0+2vIiXDqFiA8n7:mIZwlanlMMYMMsVQI4n7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

73729

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

CheckTokenMembership SetServiceStatus ReportEventW RegisterEventSourceW DeregisterEventSource RegisterServiceCtrlHandlerW StartServiceCtrlDispatcherW RevertToSelf CreateProcessAsUserW ImpersonateLoggedOnUser

kernel32

CloseHandle UnmapViewOfFile DuplicateHandle GetCurrentProcess MapViewOfFile CreateFileMappingW GetProcessHeap HeapFree lstrcmpW K32GetModuleBaseNameW K32GetModuleInformation GetLastError K32EnumProcessModules CompareStringW lstrlenW CompareFileTime GetSystemTimeAsFileTime K32GetModuleFileNameExW OpenProcess GetCurrentProcessId SetLastError GetTickCount HeapSetInformation GetCurrentThreadId LocalFree FormatMessageW GetModuleHandleW CreateEventW DelayLoadFailureHook GetProcAddress FreeLibrary InterlockedCompareExchange LoadLibraryExA Sleep HeapAlloc TerminateProcess QueryPerformanceCounter GetModuleHandleA SetUnhandledExceptionFilter GetStartupInfoA InterlockedExchange UnhandledExceptionFilter

gdi32

CreateSolidBrush

user32

EnumWindows RegisterShellHookWindow SetWindowLongW RegisterWindowMessageW PostQuitMessage IsWindow DestroyWindow DefWindowProcW SetTimer GetLastInputInfo MoveWindow GetSystemMetrics KillTimer SetShellWindow SystemParametersInfoW ShowWindow GetWindowTextW RegisterClassW GetWindow UnregisterClassW DispatchMessageW GetMessageW GetUserObjectInformationW GetThreadDesktop GetProcessWindowStation LoadStringW FlashWindowEx DestroyIcon LoadIconW GetWindowRect FindWindowW SendMessageW GetWindowLongW GetClassLongW PostMessageW GetWindowThreadProcessId GetWindowInfo GetClassNameW LoadCursorW GetWindowTextLengthW SetTaskmanWindow CreateWindowExW

msvcrt

memset _vsnwprintf wcsrchr _atoi64 __getmainargs _exit _XcptFilter _ismbblead exit ?terminate@@YAXXZ _acmdln _controlfp _except_handler4_common __set_app_type __p__fmode __p__commode _initterm _cexit _amsg_exit __setusermatherr

ntdll

WinSqmIsOptedIn WinSqmSetDWORD WinSqmEndSession WinSqmStartSession WinSqmSetString WinSqmAddToAverageDWORD WinSqmAddToStream WinSqmIncrementDWORD RtlAllocateAndInitializeSid RtlFreeSid

wtsapi32

WTSUnRegisterSessionNotification WTSRegisterSessionNotification WTSDisconnectSession WTSQueryUserToken

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

winsta

WinStationGetSessionIds WinStationRevertFromServicesSession WinStationSwitchToServicesSession

shell32

SHGetFolderPathW

shlwapi

ord354