4f3220da017e7be3e0b168a958134aae6dc96458cb12118e849465e2af752629_unpacked

Sharing

Copy URL Twitter E-mail

General

Target
4f3220da017e7be3e0b168a958134aae6dc96458cb12118e849465e2af752629_unpacked
Size 360KB
Sample221026-2dy7cshecr
SHA256 6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c
MD5 354f7ec15741db7fcdfe7b158c14dfaa
SHA1 1265f62cb1bf781baaf5161e8b2fcd40a4026747
SHA512 c8425a333a0aa7cb916406b825baaba2e462a81dcfc64b725dceadd81163f8928463603f70e6d5c354dd0ad59e4ed74572bcd780957d947bfa9d97ae89477227
SSDEEP 6144:7Y56KnPgfagNgMhdAp/WgTO3x5N22vWvLRKKAX5l++SyVI4H:qdgfpNDAxT85I2vCMX5l+Zn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4f3220da017e7be3e0b168a958134aae6dc96458cb12118e849465e2af752629_unpacked

.exe 360KB

4f3220da017e7be3e0b168a958134aae6dc96458cb12118e849465e2af752629_unpacked

IMPHASH 9db8aac8f782fbf21ee0c6bb61f33270
SHA256 6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c
MD5 354f7ec15741db7fcdfe7b158c14dfaa
SHA1 1265f62cb1bf781baaf5161e8b2fcd40a4026747
SHA512 c8425a333a0aa7cb916406b825baaba2e462a81dcfc64b725dceadd81163f8928463603f70e6d5c354dd0ad59e4ed74572bcd780957d947bfa9d97ae89477227
SSDEEP 6144:7Y56KnPgfagNgMhdAp/WgTO3x5N22vWvLRKKAX5l++SyVI4H:qdgfpNDAxT85I2vCMX5l+Zn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

9184

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_except_handler3 memmove _vsnprintf _vsnwprintf memcpy _purecall memset

kernel32

FindFirstFileW FindClose FindNextFileW DeviceIoControl GetVolumeNameForVolumeMountPointW LoadLibraryW FreeLibrary GetProcAddress MultiByteToWideChar lstrcmpA GlobalLock GlobalAlloc GlobalUnlock GlobalFree CreateMutexW ReleaseMutex FindResourceExW LoadResource SizeofResource LockResource CreateProcessW DeleteCriticalSection CreateThread ResumeThread SystemTimeToFileTime FileTimeToSystemTime FileTimeToLocalFileTime GetSystemTime GetNativeSystemInfo GetVersionExW GetCurrentThreadId CreateActCtxW ActivateActCtx DeactivateActCtx ReleaseActCtx HeapReAlloc HeapAlloc HeapFree GetProcessHeap GetEnvironmentVariableW CopyFileExW FormatMessageW GetUserDefaultUILanguage EnterCriticalSection LeaveCriticalSection DeleteFileW GetFileTime SetLastError GetFileSizeEx FlushFileBuffers ReadFile WriteFile SetFileTime SetFilePointerEx WideCharToMultiByte InitializeCriticalSection QueryPerformanceCounter SetFileAttributesW CreateFileW GetFileAttributesW Sleep MoveFileExW ExpandEnvironmentStringsW GetVolumeInformationW GetDiskFreeSpaceExW WaitForMultipleObjects ResetEvent GetTempPathW GetTickCount GetLogicalDrives GetDriveTypeW LocalFree CloseHandle CreateEventW GetLastError GetHandleInformation SetThreadPriority GetModuleFileNameW GetTimeFormatW GetCurrentThread GetModuleHandleW SetEvent GetComputerNameW WaitForSingleObject SetErrorMode GetDateFormatW GetCommandLineW ExitProcess

user32

InSendMessage ClientToScreen GetWindowLongW GetClassNameW GetCaretPos TrackPopupMenu AppendMenuW GetCursorPos CreatePopupMenu SetMenuDefaultItem DestroyMenu LoadIconW CloseClipboard EmptyClipboard OpenClipboard SetClipboardData GetScrollInfo SystemParametersInfoW ScrollWindowEx UpdateWindow SetScrollInfo MessageBoxIndirectW EndPaint ScreenToClient GetWindowRect DrawTextW GetParent GetClientRect MessageBoxW IsDialogMessageW DestroyWindow GetWindowTextLengthW BeginPaint DrawFocusRect IntersectRect GetDlgItem SendMessageW GetDlgCtrlID SetWindowTextW MoveWindow GetDC ReleaseDC CharLowerW PostQuitMessage MsgWaitForMultipleObjects TranslateMessage PeekMessageW DispatchMessageW SetTimer PostMessageW KillTimer SetFocus GetForegroundWindow FlashWindowEx InvalidateRect GetWindowTextW MonitorFromWindow SetWindowPos ShowWindow CreateWindowExW AdjustWindowRectEx IsWindowVisible GetMonitorInfoW DefWindowProcW DialogBoxParamW SetWindowLongW EndDialog CreateDialogParamW MonitorFromPoint UnregisterClassW SetForegroundWindow GetKeyState ReplyMessage GetSystemMetrics RegisterClassExW

advapi32

CryptAcquireContextW RegSetValueExW RegEnumKeyExW RegFlushKey CryptSetKeyParam CryptGetKeyParam CryptReleaseContext CryptImportKey CryptEncrypt CryptGenKey CryptDestroyKey CryptDecrypt CryptGetHashParam CryptCreateHash CryptDestroyHash CryptHashData RegCreateKeyExW RegCloseKey RegQueryValueExW CryptExportKey RegQueryInfoKeyW RegDeleteKeyW RegDeleteValueW RegEnumValueW RegOpenKeyExW

shell32

SHGetFileInfoW SHGetFolderPathW ShellExecuteExW CommandLineToArgvW

uxtheme

SetWindowTheme

gdi32

GetDeviceCaps CreateSolidBrush GetObjectW CreateCompatibleDC SelectObject DeleteObject SetBkMode SetBkColor DeleteDC SetTextColor GetObjectA CreateFontIndirectW

comctl32

InitCommonControlsEx ord413 ord410

shlwapi

StrCmpNW StrCmpW StrCmpIW PathMatchSpecW PathRemoveBackslashW PathAddBackslashW ord12 PathFindFileNameW PathRemoveFileSpecW PathUnquoteSpacesW PathQuoteSpacesW StrChrW PathAddExtensionW

msimg32

AlphaBlend

wininet

InternetReadFile InternetWriteFile HttpOpenRequestA HttpEndRequestA HttpAddRequestHeadersA InternetOpenA InternetCloseHandle InternetConnectA HttpQueryInfoA HttpSendRequestExA

gdiplus

GdipAlloc GdipGetImageEncodersSize GdipDisposeImage GdipGetImageEncoders GdipCreateHBITMAPFromBitmap GdipCloneImage GdiplusStartup GdipDeleteBrush GdipCloneBrush GdipCreateFontFromLogfontA GdipCreateBitmapFromStream GdipDeleteFont GdipDeleteGraphics GdipDrawImageRectI GdipSetStringFormatAlign GdipCreateSolidFill GdipDrawString GdipCreateFromHDC GdipSetStringFormatHotkeyPrefix GdipCreateStringFormat GdipDeleteStringFormat GdipCreateFontFromDC GdipCloneBitmapAreaI GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCreateLineBrushFromRectI GdipCreateBitmapFromHICON GdipSetTextRenderingHint GdipCreateBitmapFromScan0 GdipGetImageGraphicsContext GdipSetSmoothingMode GdipFlush GdipDeleteFontFamily GdipCreateFont GdipGetGenericFontFamilySansSerif GdipCreateFontFamilyFromName GdipFillRectangleI GdiplusShutdown GdipSaveImageToStream GdipFree GdipSetStringFormatLineAlign

ole32

CoUninitialize CreateStreamOnHGlobal CoTaskMemFree CoInitializeEx

crypt32

CryptImportPublicKeyInfo CryptStringToBinaryA CryptDecodeObjectEx