b2ff89dfeda6fd9c2661621fd2198bb28e5081a0ef7bd2d929d5ab9e031398a8

Sharing

Copy URL Twitter E-mail

General

Target
b2ff89dfeda6fd9c2661621fd2198bb28e5081a0ef7bd2d929d5ab9e031398a8
Size 88KB
Sample221023-xclgnabhen
SHA256 b2ff89dfeda6fd9c2661621fd2198bb28e5081a0ef7bd2d929d5ab9e031398a8
MD5 ba6cdcd00309cbb7a225af830fdc1bbf
SHA1 e87389d57a689f224875735e61f3eda94d0be9b1
SHA512 c93e2a868f8ef945311873b0780b7db148b0026924ee6b25f50671b93a81061dab3473f753fb142513c920958cad8eda7e8d1a2e9eda3f1a44433b967ccb1086
SSDEEP 1536:lPx+riFFG1gZg3aOWm3wEeQqjh+rmKVsN:rYJKhFE2jwqWsN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b2ff89dfeda6fd9c2661621fd2198bb28e5081a0ef7bd2d929d5ab9e031398a8

.exe 88KB

b2ff89dfeda6fd9c2661621fd2198bb28e5081a0ef7bd2d929d5ab9e031398a8

IMPHASH 20eb16f945a72bd14fd365c7146405fe
SHA256 b2ff89dfeda6fd9c2661621fd2198bb28e5081a0ef7bd2d929d5ab9e031398a8
MD5 ba6cdcd00309cbb7a225af830fdc1bbf
SHA1 e87389d57a689f224875735e61f3eda94d0be9b1
SHA512 c93e2a868f8ef945311873b0780b7db148b0026924ee6b25f50671b93a81061dab3473f753fb142513c920958cad8eda7e8d1a2e9eda3f1a44433b967ccb1086
SSDEEP 1536:lPx+riFFG1gZg3aOWm3wEeQqjh+rmKVsN:rYJKhFE2jwqWsN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23664

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SuspendThread FreeConsole GetCalendarInfoW CompareStringA CopyFileW IsProcessorFeaturePresent CreateEventA OpenFileMappingW LocalHandle HeapSize MulDiv WriteFile GetTempFileNameW SetLocaleInfoW DosDateTimeToFileTime EnumLanguageGroupLocalesW CreatePipe GetPrivateProfileSectionNamesA SetConsoleTitleA CancelDeviceWakeupRequest GetVolumePathNameA GetProfileIntA SetComputerNameExA DebugBreak SuspendThread SetCommMask EnumUILanguagesW MoveFileWithProgressA BackupRead GetNumberOfConsoleInputEvents GetLongPathNameA FreeLibrary GetFileAttributesW EnumDateFormatsA QueryDosDeviceA UpdateResourceW WritePrivateProfileStructA lstrcpynA GetExitCodeProcess GlobalAddAtomW GetShortPathNameW UnlockFileEx

user32

CharLowerBuffA

ole32

OleCreateFromData HWND_UserMarshal CreateAntiMoniker CoInitialize CoSetProxyBlanket CoDisconnectObject ReleaseStgMedium HGLOBAL_UserSize PropStgNameToFmtId

msvcrt

iswprint _wgetenv srand strtok iswupper tolower fputs _swab wcsncpy _fputchar iswctype _strupr bsearch _strnicmp memcmp _wspawnl _abnormal_termination _rotl _flsbuf isdigit memmove _isctype isalpha isgraph _wspawnvpe _wexecve _wcslwr _wcsrev fputwc _fcvt _ultoa tmpnam _wcreat

winmm

timeSetEvent waveOutOpen midiConnect midiOutSetVolume mmioOpenA mmioWrite DrvGetModuleHandle mciGetDeviceIDFromElementIDW waveOutGetErrorTextW joyGetPosEx mixerSetControlDetails joySetThreshold mmioRead waveOutGetDevCapsA DefDriverProc mmioDescend mixerGetLineInfoA mciSendStringA midiOutClose midiInGetDevCapsW midiStreamOut mmioSetBuffer midiInClose waveOutReset midiOutPrepareHeader waveInGetPosition GetDriverModuleHandle mmioGetInfo midiInMessage mciGetCreatorTask auxGetVolume joyGetDevCapsW waveInGetErrorTextA mixerGetLineControlsW

mscms

GetColorProfileElement UninstallColorProfileA AssociateColorProfileWithDeviceA EnumColorProfilesW GetStandardColorSpaceProfileW DisassociateColorProfileFromDeviceW GetStandardColorSpaceProfileA SetStandardColorSpaceProfileW DeleteColorTransform GetPS2ColorRenderingIntent SetColorProfileHeader TranslateBitmapBits CreateColorTransformA ConvertIndexToColorName CreateProfileFromLogColorSpaceW RegisterCMMW GetColorProfileElementTag GetColorProfileFromHandle UninstallColorProfileW CreateMultiProfileTransform GetCountColorProfileElements InstallColorProfileA CreateColorTransformW CheckColors SetColorProfileElementReference