825b5c870c8d4d962c9248579622a461[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
825b5c870c8d4d962c9248579622a461.exe
Size 818KB
Sample221103-ll2pfsbbdn
SHA256 bcc449302e5861d47cd9987a52c1c6b8e1ef4d45d5ffa40735bc2dcedf69a59e
MD5 825b5c870c8d4d962c9248579622a461
SHA1 8fcb141e2bc85eb55dd7ac8fb2ff9501e384c009
SHA512 d82634ce5126e9f9c5f75b1ceb0176935d4d53a17d65c3600d5e3539209ec7f8e076ceff093f83db2ba2291bb4363549b38d038b51cbfa798fe2806806c71d5a
SSDEEP 12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rSx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rEwC2Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

825b5c870c8d4d962c9248579622a461.exe

.dll 818KB

825b5c870c8d4d962c9248579622a461.exe

IMPHASH 82eb2cf476173bf58ddb7f134197373d
SHA256 bcc449302e5861d47cd9987a52c1c6b8e1ef4d45d5ffa40735bc2dcedf69a59e
MD5 825b5c870c8d4d962c9248579622a461
SHA1 8fcb141e2bc85eb55dd7ac8fb2ff9501e384c009
SHA512 d82634ce5126e9f9c5f75b1ceb0176935d4d53a17d65c3600d5e3539209ec7f8e076ceff093f83db2ba2291bb4363549b38d038b51cbfa798fe2806806c71d5a
SSDEEP 12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rSx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rEwC2Y
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

329684

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FlsSetValue GetCommandLineA HeapAlloc HeapFree Sleep ExitProcess ExitThread CreateThread VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc HeapQueryInformation HeapSize EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA RtlPcToFileHeader FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetACP IsValidCodePage GetStringTypeA GetStringTypeW GetTimeZoneInformation GetLocaleInfoW GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA RaiseException RtlUnwindEx RtlLookupFunctionEntry GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetModuleHandleW CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags WritePrivateProfileStringA GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GetLastError SetLastError GlobalAddAtomA CreateEventA SuspendThread SetEvent ResumeThread GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA CompareStringA GlobalLock lstrcmpA GlobalAlloc FreeLibrary GetModuleHandleA GetProcAddress WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource CreateMutexA WaitForSingleObject ReleaseMutex GetEnvironmentStrings CloseHandle

user32

RegisterClipboardFormatA PostThreadMessageA GetSysColorBrush ReleaseCapture LoadCursorA SetCapture EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA SetFocus GetWindowTextLengthA GetWindowTextA GetTopWindow GetWindowLongPtrA SetWindowLongPtrA GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA OffsetRect IntersectRect GetWindowPlacement GetWindowRect GetSysColor SystemParametersInfoA DestroyMenu CopyRect UnhookWindowsHookEx DrawIcon AppendMenuA SendMessageA GetSystemMenu GetMenuItemID GetMenuItemCount GetSubMenu GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableA CharNextA GetForegroundWindow CharUpperA IsIconic GetClientRect LoadIconA EnableWindow GetSystemMetrics PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA SetCursor MessageBoxA IsWindowEnabled GetLastActivePopup GetWindowLongA GetWindowThreadProcessId EndDialog GetNextDlgTabItem GetDlgItem IsWindow RemovePropA

gdi32

ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode SetWindowExtEx ScaleWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible CreateBitmap GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox ExtTextOutA GetObjectA GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes OleIsCurrentClipboard CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID CoLoadLibrary OleFlushClipboard CoRegisterMessageFilter CoGetClassObject

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString