b63578e3d83e41e96b7c2b898c3ab2c57668297d272d571adaa572589267ae68

Sharing

Copy URL Twitter E-mail

General

Target
b63578e3d83e41e96b7c2b898c3ab2c57668297d272d571adaa572589267ae68
Size 869KB
Sample221020-dcvwjsbbf2
SHA256 b63578e3d83e41e96b7c2b898c3ab2c57668297d272d571adaa572589267ae68
MD5 55d52a083eeddf1de1d09f9d41680950
SHA1 a5b9f8820d65c4150cf9e74753e8c4bffe948781
SHA512 01abeea3e25fc553d7125dbd31236b24bd07af75319f171b30638c7fc057bf7e10d2a55a107c5cb1e3945dcacb3abd7c401df87a0c33352ff7b9d14bdb6f5696
SSDEEP 24576:y42qomAJxOKA/SUE4wVcZYV3+0egjLHgZpJEcDS3Eb:yfqoRzUE4wVciVAgjLHkJEcGM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b63578e3d83e41e96b7c2b898c3ab2c57668297d272d571adaa572589267ae68

.exe 869KB

b63578e3d83e41e96b7c2b898c3ab2c57668297d272d571adaa572589267ae68

IMPHASH 7c262ec6779b60815b18e40601d797ec
SHA256 b63578e3d83e41e96b7c2b898c3ab2c57668297d272d571adaa572589267ae68
MD5 55d52a083eeddf1de1d09f9d41680950
SHA1 a5b9f8820d65c4150cf9e74753e8c4bffe948781
SHA512 01abeea3e25fc553d7125dbd31236b24bd07af75319f171b30638c7fc057bf7e10d2a55a107c5cb1e3945dcacb3abd7c401df87a0c33352ff7b9d14bdb6f5696
SSDEEP 24576:y42qomAJxOKA/SUE4wVcZYV3+0egjLHgZpJEcDS3Eb:yfqoRzUE4wVciVAgjLHkJEcGM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

434033

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

version

VerQueryValueW GetFileVersionInfoSizeW VerQueryValueA GetFileVersionInfoW

secur32

GetUserNameExW

msvcr80

?_type_info_dtor_internal_method@type_info@@QAEXXZ ?terminate@@YAXXZ _controlfp_s _invoke_watson _crt_debugger_hook _decode_pointer _onexit _lock __dllonexit _unlock _vsnprintf_s _except_handler4_common __set_app_type _encode_pointer __p__fmode __p__commode _adjust_fdiv __setusermatherr _configthreadlocale _initterm_e _initterm _acmdln exit _ismbblead _XcptFilter _exit _cexit __getmainargs _amsg_exit fopen_s fwprintf_s fclose vsprintf_s wcscpy_s vswprintf_s wcsrchr _wtoi _CxxThrowException _vsnprintf __CxxFrameHandler3 _CIsqrt memmove _wcsnicmp tolower strncmp ceil strchr strncpy_s _strnicmp wcsncmp _stricmp wcstok_s swprintf_s _wcsicmp memset memcpy wcschr _time32

advapi32

GetSecurityDescriptorDacl RegQueryInfoKeyW ReportEventW RegisterEventSourceW ReportEventA DeregisterEventSource GetUserNameA RegQueryInfoKeyA RegEnumValueA RegEnumKeyExA RegDeleteValueA SetNamedSecurityInfoW ConvertSidToStringSidA ConvertStringSecurityDescriptorToSecurityDescriptorA RegCreateKeyExA RegDeleteValueW RegSetValueExW RegQueryValueExW RegOpenKeyExA RegQueryValueExA RegCloseKey RegSetValueExA RegOpenKeyExW RegCreateKeyExW RegEnumKeyW RegEnumValueW GetLengthSid AddAccessAllowedAce AddAccessDeniedAce InitializeAcl AllocateAndInitializeSid CopySid OpenThreadToken IsValidSid CheckTokenMembership ConvertStringSecurityDescriptorToSecurityDescriptorW InitializeSecurityDescriptor SetSecurityDescriptorDacl FreeSid OpenProcessToken GetTokenInformation

comctl32

ImageList_ReplaceIcon ImageList_Create ImageList_Destroy ord17

gdi32

DeleteDC RestoreDC DeleteObject GetTextFaceA SelectObject CreateFontA GetDeviceCaps SetMapMode SaveDC CreateFontIndirectW GetObjectW GetTextExtentPoint32W SetTextAlign GetTextMetricsA GetObjectA ExtTextOutW SetBkMode SetTextColor GetTextFaceW GetOutlineTextMetricsA CreateDCA CreateSolidBrush TranslateCharsetInfo CreateFontIndirectA

kernel32

OpenSemaphoreA CreateEventA OpenEventA GetShortPathNameA LoadLibraryW OutputDebugStringA LoadLibraryExW LocalAlloc GlobalFree GetCurrentThreadId CreateProcessA GlobalAlloc DuplicateHandle GetSystemDirectoryW GetTimeZoneInformation GetDiskFreeSpaceExW GetUserDefaultLCID IsValidLocale GetStringTypeExW IsValidCodePage CompareStringW GetShortPathNameW GetLongPathNameW CreateFileA GetCurrentThread GlobalMemoryStatus ReleaseSemaphore IsProcessorFeaturePresent EnumUILanguagesW EnumSystemLocalesW GetCalendarInfoW GetUserDefaultUILanguage VirtualProtect QueryPerformanceCounter GetTempFileNameA GetTempPathA InterlockedExchange InterlockedCompareExchange GetStartupInfoA UnhandledExceptionFilter IsDebuggerPresent lstrcmpiW GetThreadContext GetThreadTimes GetPriorityClass HeapDestroy HeapCreate TerminateThread GetThreadSelectorEntry GetLastError GetLocalTime LeaveCriticalSection EnterCriticalSection GetCommandLineW ReleaseMutex WaitForSingleObject WaitForMultipleObjects SetProcessWorkingSetSize GetCurrentProcess Sleep TerminateProcess DeleteFileW CreateThread CloseHandle GetCurrentProcessId SetUnhandledExceptionFilter GetProcAddress GetModuleHandleA MapViewOfFile GetVersionExW GetVersionExA GetModuleFileNameW FreeLibrary InitializeCriticalSection GetProcessHeap DeleteCriticalSection MultiByteToWideChar GetSystemTimeAsFileTime GetTimeFormatW GetDateFormatW GetTickCount SetLastError LocalFree WriteFile FindNextFileW FindClose FindFirstFileW GetSystemWindowsDirectoryW MoveFileW SetFilePointer GetComputerNameA SetPriorityClass UnmapViewOfFile GetFileSize CreateFileMappingA SuspendThread ExitThread MulDiv GetModuleFileNameA LoadLibraryA GetSystemDefaultLangID GetSystemDefaultUILanguage GetUserDefaultLangID GetACP GetSystemDefaultLCID SetEvent CreateProcessW ExpandEnvironmentStringsW WideCharToMultiByte GetTempPathW GetFileAttributesW SetEndOfFile IsDBCSLeadByte GetSystemDirectoryA SetThreadPriority CreateRemoteThread OpenProcess LoadLibraryExA SetEnvironmentVariableA CreateDirectoryW ReadProcessMemory VirtualQueryEx GetSystemInfo HeapFree HeapSize HeapValidate HeapAlloc HeapReAlloc VirtualAlloc RaiseException TlsSetValue SetFileAttributesW CreateSemaphoreA FlushFileBuffers ResumeThread InitializeCriticalSectionAndSpinCount TlsAlloc VirtualFree TlsGetValue TlsFree GetModuleHandleW GetVersion GetFileType CreateFileW GetLocaleInfoW GetProcessTimes CreateMutexA OpenMutexA GetThreadPriority

ole32

StringFromIID CoTaskMemFree CoUninitialize CoInitializeEx CoCreateInstance

oleacc

CreateStdAccessibleObject LresultFromObject

oleaut32

SysFreeString SystemTimeToVariantTime VariantTimeToDosDateTime SysAllocString SysStringLen

rpcrt4

UuidCreate

shell32

ExtractIconExA SHGetSpecialFolderPathW ShellExecuteExA

shlwapi

AssocQueryStringW UrlGetPartA wnsprintfA

urlmon

CreateURLMoniker

user32

GetDlgCtrlID IsWindow CreateDialogIndirectParamA DrawTextA DrawTextW MapDialogRect CallWindowProcA MoveWindow GetKeyboardLayout GetMenuCheckMarkDimensions LoadBitmapA GetMonitorInfoA CallWindowProcW SetRectEmpty IsWindowVisible PostMessageA SendMessageA DefWindowProcA SetTimer KillTimer PostQuitMessage DispatchMessageA TranslateMessage IsDialogMessageA GetMessageA CreateWindowExA RegisterClassExA DialogBoxParamA SystemParametersInfoA DestroyIcon LoadStringW DestroyWindow SetWindowPos GetWindowRect GetWindowLongA SetForegroundWindow GetSystemMetrics LoadIconA SetWindowLongA ReleaseDC FillRect GetSysColorBrush MapWindowPoints GetDC SetWindowTextA CreateDialogParamW DialogBoxParamW EnumDisplayMonitors GetDlgItem DrawIconEx ShowWindow LoadCursorA GetClientRect SetCursor DrawFocusRect SetWindowTextW GetWindow InvalidateRect EnableWindow GetSysColor SendDlgItemMessageA EndDialog CheckDlgButton SetFocus LoadStringA IsDlgButtonChecked SetDlgItemTextA GetScrollInfo SetScrollInfo GetFocus FlashWindowEx GetForegroundWindow GetWindowPlacement IsIconic GetWindowThreadProcessId EnumWindows SendMessageTimeoutA GetParent UpdateWindow IsWindowUnicode GetClassNameA SendMessageW GetWindowLongW

wininet

InternetGetConnectedState InternetCloseHandle HttpQueryInfoA InternetReadFileExA HttpEndRequestA InternetWriteFile HttpSendRequestExA InternetCanonicalizeUrlA HttpOpenRequestA InternetConnectA InternetOpenA InternetSetStatusCallback InternetCrackUrlA