6b1dfd6f4db9657803cc7c3a5229eb44[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
6b1dfd6f4db9657803cc7c3a5229eb44.exe
Size 660KB
Sample221102-kpajpsbcfq
SHA256 482806bd1cd06f1199163a0520ac7726cae04077bd9ec0046a7bce071d4d5acc
MD5 6b1dfd6f4db9657803cc7c3a5229eb44
SHA1 c12e077ff95b02a87734f9cf383772f6d684ed4f
SHA512 d4d6ecfdb5e1dd91288f2caa2a90860901a009e718e48eb8bc3262b522ecc05c950d721c81d44e9a6e84b2ffd636b6f7d6943e96c5c9258d47a73a4f3ef21ee7
SSDEEP 12288:H6NFi+qz19gtAgY2tiZl4+/aukg78I8v4lSRi4gu2CTRD:aNY19gigZtiZyRukmQAlQEG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6b1dfd6f4db9657803cc7c3a5229eb44.exe

.dll 660KB

6b1dfd6f4db9657803cc7c3a5229eb44.exe

IMPHASH 6e8babed9b0b941a34aa7c12e96745c0
SHA256 482806bd1cd06f1199163a0520ac7726cae04077bd9ec0046a7bce071d4d5acc
MD5 6b1dfd6f4db9657803cc7c3a5229eb44
SHA1 c12e077ff95b02a87734f9cf383772f6d684ed4f
SHA512 d4d6ecfdb5e1dd91288f2caa2a90860901a009e718e48eb8bc3262b522ecc05c950d721c81d44e9a6e84b2ffd636b6f7d6943e96c5c9258d47a73a4f3ef21ee7
SSDEEP 12288:H6NFi+qz19gtAgY2tiZl4+/aukg78I8v4lSRi4gu2CTRD:aNY19gigZtiZyRukmQAlQEG
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

149040

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetDriveTypeA RaiseException RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx ExitThread CreateThread HeapAlloc HeapFree HeapReAlloc FlsSetValue GetCommandLineA GetProcessHeap SetStdHandle GetFileType ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext GetACP FlsGetValue FlsFree FlsAlloc Sleep RtlVirtualUnwind HeapSetInformation HeapCreate HeapDestroy SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetTimeZoneInformation LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoW SetEnvironmentVariableA GetOEMCP GetCPInfo GlobalFlags GetCurrentDirectoryA WritePrivateProfileStringA GetFileTime GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile FileTimeToSystemTime GetThreadLocale TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA ResumeThread CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeLibrary GlobalDeleteAtom GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree FindResourceA LoadResource LockResource SizeofResource MulDiv lstrlenA CompareStringW CompareStringA GetVersion WideCharToMultiByte MultiByteToWideChar GetLastError SetLastError GetProcAddress GetModuleHandleA LoadLibraryA GetModuleFileNameA VirtualAlloc GetStdHandle WaitForSingleObject

user32

UnregisterClassA DestroyMenu RegisterWindowMessageA SendDlgItemMessageA WinHelpA GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA RemovePropA GetForegroundWindow GetTopWindow GetWindowLongPtrA SetWindowLongPtrA GetMessageTime MapWindowPoints SetForegroundWindow UpdateWindow GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowPos SystemParametersInfoA GetWindowPlacement GetWindowRect EndPaint BeginPaint ClientToScreen GrayStringA DrawTextExA DrawTextA GetWindowTextA GetWindow SetFocus UnhookWindowsHookEx ReleaseDC GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage GetMenuState GetMenuItemID LoadCursorA GetSysColorBrush ShowWindow GetMenuItemCount GetSubMenu SetWindowTextA IsDialogMessageA CharUpperA GetSysColor GetMessagePos DestroyIcon InvalidateRect GetDC ScreenToClient DrawFocusRect OffsetRect SetRect CopyRect DrawStateA EnableWindow GetSystemMetrics LoadIconA GetClientRect IsIconic SendMessageA DrawIcon MsgWaitForMultipleObjects IsWindowUnicode GetMessageW GetMessageA TranslateMessage DispatchMessageW DispatchMessageA PeekMessageA TabbedTextOutA

gdi32

ScaleWindowExtEx DeleteDC GetStockObject SetWindowExtEx GetObjectA ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetDeviceCaps DeleteObject GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegEnumKeyA RegSetValueExA RegCreateKeyExA RegQueryValueA RegCloseKey RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ole32

CoLoadLibrary

oleaut32

VariantClear VariantChangeType VariantInit

urlmon

URLDownloadToFileA