b8bcf700b2682964a45300394d791fb8[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b8bcf700b2682964a45300394d791fb8.exe
Size 818KB
Sample221103-qtkhcsdaaj
SHA256 36686a91f79f1440a759169a1bb7b499b61cfb7d7b6375f802fbca2d625e39d3
MD5 b8bcf700b2682964a45300394d791fb8
SHA1 2e2c16ff79ee1bcd5f1394e7b812a0085d902369
SHA512 f64cad5586ab463d1aeea511f92c4250cc059fd4945f98aa86456e52bc64755baa53bc24e6a762d7847b6feef303532dd730a15d6a6df34a58687943ef925b8a
SSDEEP 12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rzx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7r5wC2Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b8bcf700b2682964a45300394d791fb8.exe

.dll 818KB

b8bcf700b2682964a45300394d791fb8.exe

IMPHASH 82eb2cf476173bf58ddb7f134197373d
SHA256 36686a91f79f1440a759169a1bb7b499b61cfb7d7b6375f802fbca2d625e39d3
MD5 b8bcf700b2682964a45300394d791fb8
SHA1 2e2c16ff79ee1bcd5f1394e7b812a0085d902369
SHA512 f64cad5586ab463d1aeea511f92c4250cc059fd4945f98aa86456e52bc64755baa53bc24e6a762d7847b6feef303532dd730a15d6a6df34a58687943ef925b8a
SSDEEP 12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rzx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7r5wC2Y
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

329684

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FlsSetValue GetCommandLineA HeapAlloc HeapFree Sleep ExitProcess ExitThread CreateThread VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc HeapQueryInformation HeapSize EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA RtlPcToFileHeader FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetACP IsValidCodePage GetStringTypeA GetStringTypeW GetTimeZoneInformation GetLocaleInfoW GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA RaiseException RtlUnwindEx RtlLookupFunctionEntry GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetModuleHandleW CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags WritePrivateProfileStringA GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GetLastError SetLastError GlobalAddAtomA CreateEventA SuspendThread SetEvent ResumeThread GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA CompareStringA GlobalLock lstrcmpA GlobalAlloc FreeLibrary GetModuleHandleA GetProcAddress WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource CreateMutexA WaitForSingleObject ReleaseMutex GetEnvironmentStrings CloseHandle

user32

RegisterClipboardFormatA PostThreadMessageA GetSysColorBrush ReleaseCapture LoadCursorA SetCapture EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA SetFocus GetWindowTextLengthA GetWindowTextA GetTopWindow GetWindowLongPtrA SetWindowLongPtrA GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA OffsetRect IntersectRect GetWindowPlacement GetWindowRect GetSysColor SystemParametersInfoA DestroyMenu CopyRect UnhookWindowsHookEx DrawIcon AppendMenuA SendMessageA GetSystemMenu GetMenuItemID GetMenuItemCount GetSubMenu GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableA CharNextA GetForegroundWindow CharUpperA IsIconic GetClientRect LoadIconA EnableWindow GetSystemMetrics PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA SetCursor MessageBoxA IsWindowEnabled GetLastActivePopup GetWindowLongA GetWindowThreadProcessId EndDialog GetNextDlgTabItem GetDlgItem IsWindow RemovePropA

gdi32

ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode SetWindowExtEx ScaleWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible CreateBitmap GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox ExtTextOutA GetObjectA GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes OleIsCurrentClipboard CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID CoLoadLibrary OleFlushClipboard CoRegisterMessageFilter CoGetClassObject

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString