92a3f6911635438f39de4bae33cc6fa2[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
92a3f6911635438f39de4bae33cc6fa2.exe
Size 621KB
Sample221110-mss7bshbc8
SHA256 e9a6ea8caed6cf87ba761f830065fbd710ac0a1cc5ca6551e8901e490e3eca00
MD5 92a3f6911635438f39de4bae33cc6fa2
SHA1 a1d0c269e83f262bd665fadabd9521372c9d86e7
SHA512 b79b9b05c72aeb2868a2581eff03beeca4b277eb1ffe9784f873a2426cf39dcd9070e37daef9722b39f53e95fa86bc28ab302252f9b95801c6cf828253120a04
SSDEEP 6144:S6/ptuaN+qWUILr1HRf/9Mu1vHLI7U9XWitgQ30/bP/09Xls9HV6MExbnyDAzlsH:S6/ptu/qerXtU7U9XYZWYobyDAzl+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

92a3f6911635438f39de4bae33cc6fa2.exe

.dll 621KB

92a3f6911635438f39de4bae33cc6fa2.exe

IMPHASH bf309f28e2e75a572eb2f2244be62b26
SHA256 e9a6ea8caed6cf87ba761f830065fbd710ac0a1cc5ca6551e8901e490e3eca00
MD5 92a3f6911635438f39de4bae33cc6fa2
SHA1 a1d0c269e83f262bd665fadabd9521372c9d86e7
SHA512 b79b9b05c72aeb2868a2581eff03beeca4b277eb1ffe9784f873a2426cf39dcd9070e37daef9722b39f53e95fa86bc28ab302252f9b95801c6cf828253120a04
SSDEEP 6144:S6/ptuaN+qWUILr1HRf/9Mu1vHLI7U9XWitgQ30/bP/09Xls9HV6MExbnyDAzlsH:S6/ptu/qerXtU7U9XYZWYobyDAzl+
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

11860

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

MessageBoxA InvalidateRect GetMessageW DefWindowProcW DestroyWindow CreateWindowExW RegisterClassExW LoadStringW ShowWindow DispatchMessageW SetGestureConfig GetGestureInfo TranslateAcceleratorW TranslateMessage LoadCursorW PostQuitMessage UpdateWindow BeginPaint EndPaint CloseGestureInfoHandle ScreenToClient

gdi32

Polyline LineTo CreatePen MoveToEx DeleteObject SelectObject

ole32

CoLoadLibrary

crypt32

CryptStringToBinaryA

kernel32

GetConsoleMode GetConsoleCP WriteFile FlushFileBuffers SetStdHandle HeapReAlloc GetFileSizeEx WriteConsoleW SetConsoleCtrlHandler GetFileType GetStdHandle GetProcessHeap EnumSystemLocalesW SetFilePointerEx ReadFile ReadConsoleW OutputDebugStringW CreateFileW HeapSize CloseHandle GetUserDefaultLCID IsValidLocale GetStringTypeW DeleteCriticalSection RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetCurrentThread HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW

ACeujVZMknFDjv AHuDGMflBfPryOEYjuTfbzJdEM ATjQPkInxPUGuUu AmbryhtjKWGeCnsRXR AukYzjkZpQjlyb BEHGKvjtYm BRUFxz BUZBRSzPLxRhY BZCzGXtURmWdIZoaE BZqjzJIejob BmZYhYQxzCQQ BubGPfVJvMw CBkyPEXjXbRUHKXJo CEsNfdgPgd CVPqxJEtookkvK CaJBhuFKGDiSQoojdQF CcKlmw CfrkXlNpYveSkH CtcUKaNM CtmIxtaSEWrJoeKFHYsQVRF DCcTBPjgUmKACiowmtURUFfgN DRpUgpG DYDsOtWxMUufQk DacmPRKwn DdBIgVVvJpDDYojhSveGWyVC DllRegisterServer EDkUTFetsWTlyEplV EZveIcVQbxXQvHAc EetKwkljiiO EiwSmYwuw EjKZnNkyirwOPcLJfvNShOHV ElumsVBNoiVQFecpcx FVCmCSsewcOgpmVCPhNN FeniiccJDJZQOquCQEDZFbp GhuZhUSaPqDNPQyLmKmMs GidoxoYzkYTZBUKjTczrNz GmOuZYJiGNspxqOxoBCu GoueteXAa HZyUwOgdhWiacaSFvYDsgUbdhh HtmqUvH HvKfMTiGc HwiGZdXrkhPSBdQhcNF IOKBBQdlpeQCrqGhE IftUczqAOEEpksLc IujIKjACwijLXf JPOlfklrHwimOYpdWU JldHyQJYHPfgwSota KHRcAfeWiWXczrzetcsf KSBSWsMPLKrvLpLuQEVBQaA KXPHHrx KqKYPtMNYPZwVVbFgnJskTDgXZ KrLeibTbke KtNQbfYVcdlRzCxJLbItSH KtZFnRWCN KyUDQzimOqrGaUdqnpHCadI LNVXKJhSBOeqiQPpxZuBrf LbOnTCPkjmOOEdhEeyEy LlFIOHcteRaL MAmiSwkyFlQMDaCByXR MHyRvOCLFO MbZnllsXkfnyOmtthLrL MbsuSbHtpeltWArBKaXuf MltZiwCXSxF NFzpzSbcGrv NXasCwwz NfwIIEvnLCKXIrpxWtDCbXx NgkonMKeLNPfNxT NlplQAUkkIZ OQruapyPUnukiDhEvANkgElZqh ORBMTIE OdtvuFxrrpfsY OoZePWcMAAdh PbgMOKpkqAeEgOBtpecKal PhHcvOzcWKVEzqGUAuH PqcNviu PxhniQgzegWvoSCaIPorRhqOEt PzcLCLdBlIdqBxBTbNiI RFSoSJnzzPHjPzvZCOvWT RSrAlLsSbnJmicoYtpKsPYkwFn ReujwDwTrVxLhVwaWvQS RqzpZDiLuFMWsJ SUemGjmeVuPs ScnrskpiicPdg SeCKWgTgmmtDUvFC SjnxUxHKGlth StNIEkqRHMtB StepECvENJONrwlynYAOx SyluAQQc SyvpWCmyZbMrEFnfTmyrBRH TLTUEROtrtYd TdNJCbJiInjtCOpp TndRvx TpEywJZSeYXzmbHgod TrziFVlHgMVVONOLNIfRem TzKueUFolaHBJPFhx UClTVsmfYtgzIL URuQMqrUPMSAGVyWQTqN UbLvGEZfkFcvnnw VXfdoDKAoHiAA VeRxloJdVvetDztDxLQT VkIbTCoknzceJuPcnCXzzPj VqNxpzS WPumZrRRafooNh WQIBBQj WUVuwTliAyCBAOHuSOD WsADtJekvYjSfChaZ XBRWcmDQWuUdmmFxx XDLVzSefOKneeAsytcH XDecZDvu XNmJlnrJjgZEjPQQeoOIT XWdPewUOSEaHKCHnynymDhLttF XmEMSisfXGvwdcnUI XxYbsglQgKXTYWUmlX YOqqPZdimbNEuvMaM YXgNyXKelZfQK YrlEvikMuwUvtjDbAASCV YrpQLSvKN YtyiKWITImQlOTP ZMAtbEQuVEpze ZOTjVFL ZXigMFrErZGCgnGQdpTo ZcqfXQvmSIhHXuDEPmA ZmNbZwqyJPRHpqmUZOmpJexK aOxloUcrMaTBrKRkXkvrKaAy aXDBQtKlOSCf azZsnWvbQULjBuaCVG bCHMpZKuNDwxXrs bFyNFHBUflbBAfRZV bGaVPXQawxz bVRtqQ bWXHfJrBjrdcVRLbuT blakCcJabYayatiII bsEGIgCVUNZeSRsr btMHyPMu bteqpXpGuaIzWJWPXQj buvNCuoglefZoipISdUp bvumZozkETqFchaDGgv cKgbFcy chPwzpRWTYf cliUpMkAyvnx cpEBzofbApJInexgeY cpNZFVzZSKe cpmbLfWGBjxaaZNR csebqY czlJGyv dOrUqBBEUz disvxAJjTCcpofcItH djhGwwWdNkNOGnSMVhO drTNkYg elaOoLpqFiyIbnyvaU fAKHjGkpTjHcAAfMvshh fBFgQesCsDDEqolwHzSbbSIs fDZRRfyfwlYoeFo fLcYUVhVDDHHRUryudAO fWkhxqQSpEMsqhItVIr fZQaoqMpByybzlfgG fadaIHaPgvjpA fodVsUcqiRZtLe fwWFiWowsdju gQiEYElmfk gexCIfMSOkWBVEs gnKyXNiVXhIQQVNkxutn hHoSVYFgUoRXoGwPBdTY hKiUTWNKTCBHARIejKtitX hTcXrfT hdpzQLMeXdHLAXI hqmMcxlMowrqdmwCD huwZDnzyRrUuSv hwwioGqcSiONSnnoqSgGGlYG hwxiWyDPZ iIMUBUcxlPgIoCou iXVpeLZjxHYfZy ickoyirauzuqSYooWRxIBKP ixEhmcgYbORYTvwI jXSCkxhrXSnIiziUsUkSa jhMrQlkZnbNzE jnmtHhyvcXOtUsFySuhzSRFwZ jqfPKICr kFVNBreOaZSGgseVYXfZAQSt kLMzjQJrPZFPf kONtiEAEi kUNUwtZ lIEZQCqZKko lZiHnzEuXoXZIzRd larnkUFYFI lfFBdv mJFTxuzjmKwZE mJPUafqK mRinbRZ miGqUGeEk muHYTksHDRccMJtbMIVY nEWvJUznqPuIORIkmbdcWjKd nXCjDafayJLQ nfPVFCecEC ntSsSyvUegFeD nttFqgw nuflNZYxVuFptSebTKUXxH oFyUMrjmgKtGCEsn oJhfaaiLZFHiBCXJlPO oPpitKCbVriCZu oTMlKNA pOQozXdpf pqXsDgFAKqxqyeZwyCjZ qhBjRUFjPgGnZCYf qnqswBvEbONoReovLIKnVYuSA qpggbjTvfN rGJIMlvpqBhxViL rUmobKc rfqEeKHAx rsgxCEvQpI rstbQmhTSxcrhUlcaxRFhGIXK rxpoWUmUrHlSIHeznkyrivE rzgTPjoxRh sFmMISJDeOoy sGzvLqVdsbQ sRyuPhAwDlOgUlGVpIfduYySp sTHzpfVYU sUKvQIa sVMFsGCCfvDfoTh sfAGqCcFJlYOMkqZahTjTiAX stMogsRXrfH tBAtJGzOlooKPbZ tTdsornziSGMnYRGtlv taVJVqMCMlkFIDWVCcDLV twRKUF uTtYPS ujLBGDEExK ujfIFiuxQFuoWpBYlfPja unVwakRZhbHEVJWGGZDyCZP utlgNYXohozxx uvBxDGCDNqLbDaufFb vycQUvI vzdSRyxeERBiXlOkqVUB wAHuFSGPWcgVtPzRzoUTnbwo wiIXJqSWsUXvPbq wjeHVSTrDxCzMVNUFEQoz xPjfyQjUovqeohLapv xeyyJZUMQlYiCHikxXoEko xmDlQKqSmhiJfARRXzslVED xzJluXH yAYxFjbdwTSooJJzoq yBpkXiNAKugdWlxIPQKL yIApLlDSJNmmOc yMokeHArDgIyDvmsuwd yVLTygbNjHTxXaOuZBkHmpajxq yhCymcBLApUWyPqapsEDJtfjMV yjGXMXnz yprPVXLUkdnzWv yzkENTmBV zQnFkEsglvSmYtKlkFDTme zdMhYw

Name

.text

Size

296KB

Virtual Size

296KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

301KB

Virtual Size

301KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

616B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ