946888fdc85777fdfc105f1a5c4a141d[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
946888fdc85777fdfc105f1a5c4a141d.exe
Size 818KB
Sample221104-meszeaecc6
SHA256 5c620be737e6340bfb3aace334be7c78fe68697dda13dbc8fc99a6cfbf122d0d
MD5 946888fdc85777fdfc105f1a5c4a141d
SHA1 d7a68434c3f095e309ed7fc922dfe8f818837b82
SHA512 4bbc08f835f867c8d55900490b20dea8c07451249a23b4f70fe271af0739338e8474ef4dac0ac5c74fdddafc58e6308995311ba47a3958d5b00eeee05a300f6e
SSDEEP 12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rDx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rJwC2Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

946888fdc85777fdfc105f1a5c4a141d.exe

.dll 818KB

946888fdc85777fdfc105f1a5c4a141d.exe

IMPHASH 82eb2cf476173bf58ddb7f134197373d
SHA256 5c620be737e6340bfb3aace334be7c78fe68697dda13dbc8fc99a6cfbf122d0d
MD5 946888fdc85777fdfc105f1a5c4a141d
SHA1 d7a68434c3f095e309ed7fc922dfe8f818837b82
SHA512 4bbc08f835f867c8d55900490b20dea8c07451249a23b4f70fe271af0739338e8474ef4dac0ac5c74fdddafc58e6308995311ba47a3958d5b00eeee05a300f6e
SSDEEP 12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rDx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rJwC2Y
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

329684

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FlsSetValue GetCommandLineA HeapAlloc HeapFree Sleep ExitProcess ExitThread CreateThread VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc HeapQueryInformation HeapSize EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA RtlPcToFileHeader FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetACP IsValidCodePage GetStringTypeA GetStringTypeW GetTimeZoneInformation GetLocaleInfoW GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA RaiseException RtlUnwindEx RtlLookupFunctionEntry GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetModuleHandleW CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags WritePrivateProfileStringA GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GetLastError SetLastError GlobalAddAtomA CreateEventA SuspendThread SetEvent ResumeThread GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA CompareStringA GlobalLock lstrcmpA GlobalAlloc FreeLibrary GetModuleHandleA GetProcAddress WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource CreateMutexA WaitForSingleObject ReleaseMutex GetEnvironmentStrings CloseHandle

user32

RegisterClipboardFormatA PostThreadMessageA GetSysColorBrush ReleaseCapture LoadCursorA SetCapture EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA SetFocus GetWindowTextLengthA GetWindowTextA GetTopWindow GetWindowLongPtrA SetWindowLongPtrA GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA OffsetRect IntersectRect GetWindowPlacement GetWindowRect GetSysColor SystemParametersInfoA DestroyMenu CopyRect UnhookWindowsHookEx DrawIcon AppendMenuA SendMessageA GetSystemMenu GetMenuItemID GetMenuItemCount GetSubMenu GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableA CharNextA GetForegroundWindow CharUpperA IsIconic GetClientRect LoadIconA EnableWindow GetSystemMetrics PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA SetCursor MessageBoxA IsWindowEnabled GetLastActivePopup GetWindowLongA GetWindowThreadProcessId EndDialog GetNextDlgTabItem GetDlgItem IsWindow RemovePropA

gdi32

ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode SetWindowExtEx ScaleWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible CreateBitmap GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox ExtTextOutA GetObjectA GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes OleIsCurrentClipboard CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID CoLoadLibrary OleFlushClipboard CoRegisterMessageFilter CoGetClassObject

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString