f593c8d64056db9c9f3eba823fff3b6f[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
f593c8d64056db9c9f3eba823fff3b6f.exe
Size 629KB
Sample221104-lesszagaal
SHA256 4881e5e0e6528bdcc50fd3f1f106d6877f5b5e5bbde58e347a036d7bb37c8bb1
MD5 f593c8d64056db9c9f3eba823fff3b6f
SHA1 752dcbf410495e92e6a09a7eeb74a41976ab4dd9
SHA512 df5b4bc12a2b1f650296a51c14d2b026c76459c5644c5e686d1fcd7fac8f9edf7e5a6b5d62382599d4c3f4822ce11a841da881930701e4545b6bc45dad7c2b1e
SSDEEP 12288:6tGis7p49VmD3OjG7QbBtL35WhNye5JHKVu6cig1Doa:6tGis1T3OjueLghd5NKAD3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f593c8d64056db9c9f3eba823fff3b6f.exe

.dll 629KB

f593c8d64056db9c9f3eba823fff3b6f.exe

IMPHASH 600977113aed842192f68fb1457a6d66
SHA256 4881e5e0e6528bdcc50fd3f1f106d6877f5b5e5bbde58e347a036d7bb37c8bb1
MD5 f593c8d64056db9c9f3eba823fff3b6f
SHA1 752dcbf410495e92e6a09a7eeb74a41976ab4dd9
SHA512 df5b4bc12a2b1f650296a51c14d2b026c76459c5644c5e686d1fcd7fac8f9edf7e5a6b5d62382599d4c3f4822ce11a841da881930701e4545b6bc45dad7c2b1e
SSDEEP 12288:6tGis7p49VmD3OjG7QbBtL35WhNye5JHKVu6cig1Doa:6tGis1T3OjueLghd5NKAD3
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

158772

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CreateThread FlsSetValue GetCommandLineA HeapAlloc HeapFree HeapReAlloc SetStdHandle GetFileType Sleep ExitProcess HeapQueryInformation HeapSize EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetACP IsValidCodePage SetHandleCount GetStdHandle GetStartupInfoA ExitThread GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetTimeZoneInformation LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoW GetProcessHeap CompareStringW SetEnvironmentVariableA GetDriveTypeA RtlPcToFileHeader RaiseException RtlUnwindEx RtlLookupFunctionEntry GetOEMCP GetCPInfo GlobalFlags GetCurrentDirectoryA WritePrivateProfileStringA GetModuleHandleW DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile FileTimeToSystemTime GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA ResumeThread CloseHandle GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA CompareStringA lstrcmpA FreeLibrary GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv lstrlenA MultiByteToWideChar WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetModuleHandleA LoadLibraryA GetProcAddress GetLastError SetLastError WaitForSingleObject GetModuleFileNameA FreeEnvironmentStringsA VirtualAlloc

user32

EndPaint BeginPaint ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA ShowWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA RemovePropA SetFocus GetWindowTextA GetForegroundWindow GetTopWindow GetWindowLongPtrA SetWindowLongPtrA GetMessageTime MapWindowPoints DestroyMenu SetMenu SetForegroundWindow UpdateWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowPos SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow UnhookWindowsHookEx ReleaseDC GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA EnableMenuItem CheckMenuItem LoadCursorA GetSysColorBrush CharUpperA PostMessageA PostQuitMessage GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu InvalidateRect GetMessagePos ScreenToClient DrawStateA DestroyIcon GetSysColor CopyRect SetRect OffsetRect DrawFocusRect GetDC EnableWindow IsIconic GetSystemMetrics GetClientRect DrawIcon SendMessageA LoadIconA MsgWaitForMultipleObjects PeekMessageA IsWindowUnicode GetMessageW GetMessageA TranslateMessage DispatchMessageW DispatchMessageA

gdi32

DeleteDC GetStockObject ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible GetDeviceCaps DeleteObject SetMapMode SetBkMode RestoreDC SaveDC GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap PtVisible

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegOpenKeyA RegSetValueExA RegCreateKeyExA RegQueryValueA RegCloseKey RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

ole32

CoLoadLibrary

oleaut32

VariantClear VariantChangeType VariantInit

urlmon

URLDownloadToFileA