f1a9f72fd1a3829a447123e2bf8aff3e[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
f1a9f72fd1a3829a447123e2bf8aff3e.exe
Size 664KB
Sample221102-ng5lnabdg5
SHA256 7b7417841ab28e8117641e4865d6e10b2e467545fb56065841ce83ff34b1c3f4
MD5 f1a9f72fd1a3829a447123e2bf8aff3e
SHA1 7f7edca225771644319bd61f8244b9629d9806e9
SHA512 7d4b5916d89c4bc3a3e4aacae54b4642284b0504679424dccbd9412c8ba1a38fa871be2ae07931fbdac03d96a02455cdd20abe080f1620240642b1e48efbc4b5
SSDEEP 12288:v9D2/XRIK1chzV2rBt5APJlGIC4cDVi8HY1lW+lJk1XY61IU:lD2vRA2rv5APJfC4jiY18+lJkt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f1a9f72fd1a3829a447123e2bf8aff3e.exe

.dll 664KB

f1a9f72fd1a3829a447123e2bf8aff3e.exe

IMPHASH 6e8babed9b0b941a34aa7c12e96745c0
SHA256 7b7417841ab28e8117641e4865d6e10b2e467545fb56065841ce83ff34b1c3f4
MD5 f1a9f72fd1a3829a447123e2bf8aff3e
SHA1 7f7edca225771644319bd61f8244b9629d9806e9
SHA512 7d4b5916d89c4bc3a3e4aacae54b4642284b0504679424dccbd9412c8ba1a38fa871be2ae07931fbdac03d96a02455cdd20abe080f1620240642b1e48efbc4b5
SSDEEP 12288:v9D2/XRIK1chzV2rBt5APJlGIC4cDVi8HY1lW+lJk1XY61IU:lD2vRA2rv5APJfC4jiY18+lJkt
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

149040

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetDriveTypeA RaiseException RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx ExitThread CreateThread HeapAlloc HeapFree HeapReAlloc FlsSetValue GetCommandLineA GetProcessHeap SetStdHandle GetFileType ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext GetACP FlsGetValue FlsFree FlsAlloc Sleep RtlVirtualUnwind HeapSetInformation HeapCreate HeapDestroy SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetTimeZoneInformation LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoW SetEnvironmentVariableA GetOEMCP GetCPInfo GlobalFlags GetCurrentDirectoryA WritePrivateProfileStringA GetFileTime GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile FileTimeToSystemTime GetThreadLocale TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA ResumeThread CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeLibrary GlobalDeleteAtom GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree FindResourceA LoadResource LockResource SizeofResource MulDiv lstrlenA CompareStringW CompareStringA GetVersion WideCharToMultiByte MultiByteToWideChar GetLastError SetLastError GetProcAddress GetModuleHandleA LoadLibraryA GetModuleFileNameA VirtualAlloc GetStdHandle WaitForSingleObject

user32

UnregisterClassA DestroyMenu RegisterWindowMessageA SendDlgItemMessageA WinHelpA GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA RemovePropA GetForegroundWindow GetTopWindow GetWindowLongPtrA SetWindowLongPtrA GetMessageTime MapWindowPoints SetForegroundWindow UpdateWindow GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowPos SystemParametersInfoA GetWindowPlacement GetWindowRect EndPaint BeginPaint ClientToScreen GrayStringA DrawTextExA DrawTextA GetWindowTextA GetWindow SetFocus UnhookWindowsHookEx ReleaseDC GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage GetMenuState GetMenuItemID LoadCursorA GetSysColorBrush ShowWindow GetMenuItemCount GetSubMenu SetWindowTextA IsDialogMessageA CharUpperA GetSysColor GetMessagePos DestroyIcon InvalidateRect GetDC ScreenToClient DrawFocusRect OffsetRect SetRect CopyRect DrawStateA EnableWindow GetSystemMetrics LoadIconA GetClientRect IsIconic SendMessageA DrawIcon MsgWaitForMultipleObjects IsWindowUnicode GetMessageW GetMessageA TranslateMessage DispatchMessageW DispatchMessageA PeekMessageA TabbedTextOutA

gdi32

ScaleWindowExtEx DeleteDC GetStockObject SetWindowExtEx GetObjectA ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetDeviceCaps DeleteObject GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegEnumKeyA RegSetValueExA RegCreateKeyExA RegQueryValueA RegCloseKey RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ole32

CoLoadLibrary

oleaut32

VariantClear VariantChangeType VariantInit

urlmon

URLDownloadToFileA