55f1eef55a04446c688f1f5a31e8673b051de8a46383ae28028daaeb2c02ae1c

Sharing

Copy URL Twitter E-mail

General

Target
55f1eef55a04446c688f1f5a31e8673b051de8a46383ae28028daaeb2c02ae1c
Size 984KB
Sample221020-vtbyfaehem
SHA256 55f1eef55a04446c688f1f5a31e8673b051de8a46383ae28028daaeb2c02ae1c
MD5 817513f74bd27880272b44d2ef6cb5c5
SHA1 75ea2ea4fa19f98400d91f90792137690d2c5634
SHA512 b59b890906aa5a105900eb64eac9e0408e2a19b5be3a064ed89a578f75c9e48a8483001eba5ea0a421dba496dd9c206cc60089df68037cbc27ccdf36499bf84b
SSDEEP 24576:ex4Mi4+EaWyZDAbKh6tBoJU0DuF4jovaVGMwhJE/Clpzwun:OcEaWjrjiA4jova8Mz/Clpzwun
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

55f1eef55a04446c688f1f5a31e8673b051de8a46383ae28028daaeb2c02ae1c

.exe 984KB

55f1eef55a04446c688f1f5a31e8673b051de8a46383ae28028daaeb2c02ae1c

IMPHASH 71080a4e1097d4bd7cf79cecf3cc2886
SHA256 55f1eef55a04446c688f1f5a31e8673b051de8a46383ae28028daaeb2c02ae1c
MD5 817513f74bd27880272b44d2ef6cb5c5
SHA1 75ea2ea4fa19f98400d91f90792137690d2c5634
SHA512 b59b890906aa5a105900eb64eac9e0408e2a19b5be3a064ed89a578f75c9e48a8483001eba5ea0a421dba496dd9c206cc60089df68037cbc27ccdf36499bf84b
SSDEEP 24576:ex4Mi4+EaWyZDAbKh6tBoJU0DuF4jovaVGMwhJE/Clpzwun:OcEaWjrjiA4jova8Mz/Clpzwun
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

571650

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

secur32

InitializeSecurityContextA FreeContextBuffer QuerySecurityPackageInfoA AcquireCredentialsHandleA

kernel32

DeleteCriticalSection TlsFree lstrcmpA GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GetCurrentThread FileTimeToSystemTime FileTimeToLocalFileTime GetFileAttributesA GetFileTime GlobalFlags GetCPInfo GetOEMCP HeapFree GetSystemTimeAsFileTime HeapAlloc GetTimeFormatA GetDateFormatA HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetCommandLineA GetProcessHeap GetStartupInfoA LocalReAlloc RaiseException ExitThread CreateThread ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage LCMapStringA LCMapStringW HeapDestroy HeapCreate VirtualFree GetStringTypeA GetStringTypeW GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount QueryPerformanceCounter GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection SetThreadPriority GetCurrentProcessId GetFullPathNameA FindFirstFileA FindClose GetThreadLocale MoveFileA InterlockedIncrement ReleaseSemaphore CreateSemaphoreA InterlockedDecrement GetModuleFileNameW GetPrivateProfileIntA FormatMessageA MulDiv GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GlobalFree GetCurrentThreadId GetTimeZoneInformation LocalFree LocalAlloc CreateProcessA WritePrivateProfileStringA GetShortPathNameA MoveFileExA SetFileAttributesA CreateDirectoryA WaitForSingleObject GlobalUnlock GlobalLock GlobalAlloc GetVersionExA SetEvent CompareStringW InterlockedExchange GetVersion lstrlenW CompareStringA lstrlenA FreeResource GetProfileIntA GetEnvironmentVariableA GetWindowsDirectoryA GetComputerNameA GetTempPathA GlobalMemoryStatus SetUnhandledExceptionFilter CopyFileA GetModuleFileNameA CreateMutexA SetErrorMode ResetEvent CreateEventA DeviceIoControl GetVolumeInformationA GetPrivateProfileStringA ResumeThread SuspendThread GetModuleHandleA DeleteFileA GetDiskFreeSpaceA WinExec FreeLibrary GetProcAddress LoadLibraryA CreateFileA GetFileType UnlockFile LockFile DuplicateHandle GetCurrentProcess FlushFileBuffers GetFileSize SetEndOfFile SetFilePointer ReadFile WriteFile CloseHandle MultiByteToWideChar Sleep SetLastError FindResourceA GetLastError LoadResource LockResource SizeofResource WideCharToMultiByte GetTickCount RtlUnwind

user32

MessageBeep RegisterClipboardFormatA CharNextA UnregisterClassA PostThreadMessageA GetNextDlgGroupItem PostQuitMessage SetWindowContextHelpId MapDialogRect DestroyMenu WindowFromPoint EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA TabbedTextOutA GetMessageA TranslateMessage ValidateRect SetCapture InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA WaitMessage ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetLastActivePopup GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints TrackPopupMenu GetKeyState IsWindowVisible UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect GetDlgCtrlID DefWindowProcA SetWindowPos IntersectRect GetWindowPlacement GetActiveWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog GetWindowTextLengthA GetWindowTextA SetFocus SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus ModifyMenuA GetMenuState EnableMenuItem GetWindow GetDesktopWindow AttachThreadInput GetWindowThreadProcessId PeekMessageA MsgWaitForMultipleObjects SystemParametersInfoA SetWindowRgn FillRect DrawTextA GetAsyncKeyState BringWindowToTop DispatchMessageA CloseClipboard SetClipboardData EmptyClipboard OpenClipboard DestroyIcon ScreenToClient LoadImageA CharUpperA DestroyAcceleratorTable CreateAcceleratorTableA DrawFrameControl InflateRect FrameRect GetSysColorBrush DrawIconEx ReleaseCapture LoadIconA CopyRect DrawFocusRect OffsetRect GetParent MessageBoxA LoadCursorA SetCursor CheckMenuItem AppendMenuA CreatePopupMenu SetForegroundWindow IsIconic GetForegroundWindow KillTimer InvalidateRect GetSysColor SetTimer ReleaseDC GetDC GetClientRect GetWindowRect LoadAcceleratorsA InsertMenuA GetSystemMenu SetWindowLongA TranslateAcceleratorA PtInRect GetWindowLongA GetCursorPos GetSystemMetrics ClientToScreen SendMessageA PostMessageA IsWindow EnableWindow CallWindowProcA

gdi32

SetWindowExtEx GetBkColor GetTextColor ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape ExtSelectClipRgn SelectObject CreateFontIndirectA GetStockObject GetObjectA ExtTextOutA TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject RestoreDC SaveDC GetRgnBox CreateRectRgnIndirect SetBkColor GetClipBox CreateBitmap GetDeviceCaps CreateICA DeleteDC GetMapMode SetMapMode SetTextColor SetBkMode CombineRgn CreateSolidBrush CreateCompatibleDC GetPixel CreateCompatibleBitmap CreateRectRgn ScaleWindowExtEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegDeleteKeyA RegQueryValueA RegEnumKeyA RegOpenKeyA RegSetValueA RegOpenKeyExA RegEnumValueA RegEnumKeyExA RegSetValueExA RegDeleteValueA RegCreateKeyExA RegQueryValueExA RegCloseKey

shell32

SHFileOperationA SHGetDesktopFolder SHBrowseForFolderA SHGetPathFromIDListA ShellExecuteA SHGetFileInfoA ExtractIconA SHGetSpecialFolderLocation SHGetMalloc

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCA PathFindExtensionA PathFindFileNameA PathStripToRootA

oledlg

ord8

ole32

CoTaskMemAlloc CoCreateInstance StgOpenStorageOnILockBytes CoTaskMemFree StringFromCLSID CoGetClassObject StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CLSIDFromProgID CLSIDFromString CoRegisterClassObject CoRevokeClassObject OleUninitialize CoFreeUnusedLibraries OleInitialize OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

OleCreateFontIndirect VariantInit VariantClear SysAllocStringLen SysFreeString SysStringByteLen SysAllocStringByteLen VariantChangeType SysStringLen VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy

ws2_32

accept socket select bind getsockname connect sendto recvfrom WSAAsyncSelect inet_addr WSASetLastError recv closesocket htonl listen WSAAsyncGetHostByName shutdown WSACancelAsyncRequest WSAGetLastError ioctlsocket inet_ntoa htons gethostbyname setsockopt WSACleanup WSAStartup ntohs send