90d6b7d82e68d99ae39d229e8cc47f8ce6ba5f4e0ecc61452d85c078b0716ceb

Sharing

Copy URL Twitter E-mail

General

Target
90d6b7d82e68d99ae39d229e8cc47f8ce6ba5f4e0ecc61452d85c078b0716ceb
Size 51KB
Sample221023-lwe87shfc7
SHA256 90d6b7d82e68d99ae39d229e8cc47f8ce6ba5f4e0ecc61452d85c078b0716ceb
MD5 25aa7fe6b3898af3557c51af93a14ad3
SHA1 8f1c34f1d972b22834a713356a9922dead963cda
SHA512 b385b88403deeaefc96cf5a26058501eecf7e628894c02da3ca81a31c9b659bc778d9d4c0f6d3355b254d3908c314c29fa8c1fe7b1dc8d969c153d89de7d061e
SSDEEP 768:iLwfjxYDQEnNX9SdFWv1rtVAVDYjgVH3y0+CZRR/iCHBZPR9JC:YVNtTqJyE/JiCHBZ59JC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

90d6b7d82e68d99ae39d229e8cc47f8ce6ba5f4e0ecc61452d85c078b0716ceb

.exe 51KB

90d6b7d82e68d99ae39d229e8cc47f8ce6ba5f4e0ecc61452d85c078b0716ceb

IMPHASH a0c97e54c7cc84aa5e0a7c186f29e1d9
SHA256 90d6b7d82e68d99ae39d229e8cc47f8ce6ba5f4e0ecc61452d85c078b0716ceb
MD5 25aa7fe6b3898af3557c51af93a14ad3
SHA1 8f1c34f1d972b22834a713356a9922dead963cda
SHA512 b385b88403deeaefc96cf5a26058501eecf7e628894c02da3ca81a31c9b659bc778d9d4c0f6d3355b254d3908c314c29fa8c1fe7b1dc8d969c153d89de7d061e
SSDEEP 768:iLwfjxYDQEnNX9SdFWv1rtVAVDYjgVH3y0+CZRR/iCHBZPR9JC:YVNtTqJyE/JiCHBZ59JC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23792

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

FreeConsole GetCalendarInfoW CompareStringA CopyFileW CopyFileW

user32

EnumDisplaySettingsExW CheckDlgButton DestroyMenu GetAncestor SetParent GetCursorInfo GetPropA SetUserObjectInformationW GetDC AppendMenuW SetWindowLongW AppendMenuA ChangeDisplaySettingsA UnionRect DrawTextExA GetUpdateRect CreateDialogIndirectParamW GetWindowLongW ExcludeUpdateRgn CallMsgFilterA GetDlgItem CascadeWindows GetSubMenu GetClassWord GetUserObjectSecurity GetParent DlgDirListW PeekMessageA CreateMDIWindowA RemoveMenu LoadKeyboardLayoutW AttachThreadInput SetWindowTextW LoadKeyboardLayoutA CharLowerBuffA GetLastActivePopup

ws2_32

accept WSAWaitForMultipleEvents inet_ntoa WSASetServiceW WSAInstallServiceClassA setsockopt WSAEnumProtocolsW WSAHtons WSASendTo WSAEnumProtocolsA WSAEnumNameSpaceProvidersW WSAEnumNameSpaceProvidersA WSARecvDisconnect getprotobyname getprotobynumber getservbyname WSAGetServiceClassNameByClassIdA gethostbyaddr gethostbyname WSAGetQOSByName gethostname WSAGetServiceClassInfoA WSASocketW WSAUnhookBlockingHook getpeername WSAHtonl WSAEventSelect WSAGetLastError WSACancelBlockingCall

rtm

RtmUpdateAndUnlockRoute RtmRegisterForChangeNotification RtmCreateDestEnum RtmGetNextHopInfo RtmLockRoute RtmCreateRouteList RtmReleaseChangedDests RtmGetChangedDests RtmGetExactMatchDestination RtmReleaseEntities RtmGetEntityInfo RtmReleaseNextHopInfo RtmReleaseRoutes RtmGetRouteInfo RtmIgnoreChangedDests RtmReleaseRouteInfo RtmGetRoutePointer RtmCreateNextHopEnum RtmLockDestination RtmGetEnumRoutes RtmGetEntityMethods RtmFindNextHop RtmInvokeMethod RtmDeleteEnumHandle RtmIsBestRoute

secur32

EnumerateSecurityPackagesW AcquireCredentialsHandleW FreeCredentialsHandle EnumerateSecurityPackagesA RevertSecurityContext ApplyControlToken ImpersonateSecurityContext

Name

.text

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.8NzKTbM

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tXh

Size

512B

Virtual Size

170B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

54B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ