4f103e3485b347325652ba8a2b98749b189906168baef567c6ba44253f1d41b7

Sharing

Copy URL Twitter E-mail

General

Target
4f103e3485b347325652ba8a2b98749b189906168baef567c6ba44253f1d41b7
Size 72KB
Sample221107-1mg4rsdcbj
SHA256 4f103e3485b347325652ba8a2b98749b189906168baef567c6ba44253f1d41b7
MD5 0dff65eaa13400ac3b3cf1d75d17d8b0
SHA1 54d4b6bf728805e3dd7c9eb64bfe8c0150ab0a53
SHA512 c7b0c0cb4cde2664bd2fc4f015fa21da18d20fe01ba3096236378ced4bb25ed960a57db4da8779759073eb4ac5365022d460ec8a318def2c7178cb8e5c807317
SSDEEP 1536:nLfvv1H5CYBc7B/DZZqB/7+4ou/ky7iFJhJIt9EqLmy:LfvvV5RK7B/DzqB/9/R7Eu2qqy
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4f103e3485b347325652ba8a2b98749b189906168baef567c6ba44253f1d41b7

.exe 72KB

4f103e3485b347325652ba8a2b98749b189906168baef567c6ba44253f1d41b7

IMPHASH 081fa98fe610ece9cc0b15849b57e52d
SHA256 4f103e3485b347325652ba8a2b98749b189906168baef567c6ba44253f1d41b7
MD5 0dff65eaa13400ac3b3cf1d75d17d8b0
SHA1 54d4b6bf728805e3dd7c9eb64bfe8c0150ab0a53
SHA512 c7b0c0cb4cde2664bd2fc4f015fa21da18d20fe01ba3096236378ced4bb25ed960a57db4da8779759073eb4ac5365022d460ec8a318def2c7178cb8e5c807317
SSDEEP 1536:nLfvv1H5CYBc7B/DZZqB/7+4ou/ky7iFJhJIt9EqLmy:LfvvV5RK7B/DzqB/9/R7Eu2qqy
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

86016

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

__winitenv __wgetmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type ??1type_info@@UAE@XZ _controlfp __CxxFrameHandler _except_handler3 ?terminate@@YAXXZ wcscpy _wcsicmp _wcsdup calloc _iob wcschr ??2@YAPAXI@Z ??3@YAXPAX@Z free exit _cexit _XcptFilter _exit _c_exit _CxxThrowException wcstod wcstol wcsstr wcsncmp _wcsnicmp realloc fflush fprintf strtok _wtoi64 wcstok wcslen

advapi32

EnumServicesStatusExW CloseServiceHandle LookupAccountSidW RegConnectRegistryW RegCloseKey RegQueryValueExW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges OpenSCManagerW

kernel32

VerifyVersionInfoW VerSetConditionMask GetModuleHandleA LocalFree lstrcatW FormatMessageW LocalAlloc InterlockedIncrement WideCharToMultiByte GetLastError SetConsoleCursorPosition WriteConsoleW HeapAlloc HeapReAlloc InterlockedDecrement OpenProcess GetNumberFormatW lstrcmpiW lstrlenW lstrcpynW MultiByteToWideChar ReadConsoleW ReadFile SetConsoleMode GetConsoleMode lstrcmpW GetComputerNameExW FileTimeToSystemTime GetCurrentThreadId GetTimeFormatW CloseHandle GetCurrentProcess FreeLibrary HeapFree GetProcessHeap GetConsoleScreenBufferInfo GetStdHandle GetProcAddress LoadLibraryW lstrcpyW GetLocaleInfoW SetLastError

ntdll

RtlTimeToElapsedTimeFields RtlLargeIntegerToChar

user32

GetWindow GetWindowLongW GetWindowThreadProcessId CloseDesktop EnumWindows SetThreadDesktop OpenDesktopW GetThreadDesktop GetWindowTextW EnumDesktopsW SetProcessWindowStation OpenWindowStationW GetProcessWindowStation EnumWindowStationsW wsprintfW CharUpperW LoadStringW CloseWindowStation FindWindowExW

mpr

WNetCancelConnection2W WNetGetLastErrorW WNetAddConnection2W

ole32

CoCreateInstance CoInitializeEx CoTaskMemFree CoUninitialize CoTaskMemAlloc CoInitializeSecurity

oleaut32

SysAllocStringByteLen VariantInit SysFreeString VariantChangeType VariantCopy VariantClear SysAllocString SysStringLen

secur32

GetUserNameExW

ws2_32

WSAGetLastError inet_addr gethostbyaddr WSACleanup WSAStartup

framedyn

??H@YG?AVCHString@@ABV0@PBG@Z ??4CHString@@QAEABV0@ABV0@@Z ?Left@CHString@@QBE?AV1@H@Z ?GetBuffer@CHString@@QAEPAGH@Z ??4CHString@@QAEABV0@PBD@Z ??4CHString@@QAEABV0@PBG@Z ??YCHString@@QAEABV0@ABV0@@Z ?TrimLeft@CHString@@QAEXXZ ?TrimRight@CHString@@QAEXXZ ?Find@CHString@@QBEHG@Z ?Compare@CHString@@QBEHPBG@Z ?Format@CHString@@QAAXPBGZZ ?Empty@CHString@@QAEXXZ ?GetBufferSetLength@CHString@@QAEPAGH@Z ?Mid@CHString@@QBE?AV1@HH@Z ?ReleaseBuffer@CHString@@QAEXH@Z ?GetData@CHString@@IBEPAUCHStringData@@XZ ??0CHString@@QAE@XZ ??1CHString@@QAE@XZ ?FindOneOf@CHString@@QBEHPBG@Z ??YCHString@@QAEABV0@PBG@Z ??0CHString@@QAE@PBG@Z ?Find@CHString@@QBEHPBG@Z ?Mid@CHString@@QBE?AV1@H@Z

netapi32

NetApiBufferFree NetServerGetInfo

dbghelp

EnumerateLoadedModules