1459e736251451535cd9d9c3b394eab4ea5247a8a7bd240975f43d0b42a2d4c0

Sharing

Copy URL Twitter E-mail

General

Target
1459e736251451535cd9d9c3b394eab4ea5247a8a7bd240975f43d0b42a2d4c0
Size 182KB
Sample221121-jvcetaeb4y
SHA256 1459e736251451535cd9d9c3b394eab4ea5247a8a7bd240975f43d0b42a2d4c0
MD5 1d89f760213af564a505616880bbab90
SHA1 e592a36a3204296cd890e2678e86251a9f6b9af3
SHA512 90230d1123b6feb53ed053c58841904b22fb45b731e5af6fb188637818077bee0385e65a42c381729247dd9a23a28c6d48fa0c7e77550b709028d41a331a950d
SSDEEP 3072:MXmfcwlVCoCAqagxSavqOYDW0UEjHL/F9BRqKY5nTSm9fM+G0uxCNI:WmUw71CD+aveDlUEjHL/F9B0KY5n2mOf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1459e736251451535cd9d9c3b394eab4ea5247a8a7bd240975f43d0b42a2d4c0

.exe 182KB

1459e736251451535cd9d9c3b394eab4ea5247a8a7bd240975f43d0b42a2d4c0

IMPHASH c7b970e94adc98925b1b7437286dfe12
SHA256 1459e736251451535cd9d9c3b394eab4ea5247a8a7bd240975f43d0b42a2d4c0
MD5 1d89f760213af564a505616880bbab90
SHA1 e592a36a3204296cd890e2678e86251a9f6b9af3
SHA512 90230d1123b6feb53ed053c58841904b22fb45b731e5af6fb188637818077bee0385e65a42c381729247dd9a23a28c6d48fa0c7e77550b709028d41a331a950d
SSDEEP 3072:MXmfcwlVCoCAqagxSavqOYDW0UEjHL/F9BRqKY5nTSm9fM+G0uxCNI:WmUw71CD+aveDlUEjHL/F9B0KY5n2mOf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

88936

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 __dllonexit _onexit ??1type_info@@UAE@XZ _controlfp ?terminate@@YAXXZ memmove exit _c_exit _wcsicmp wcslen wcschr _CxxThrowException malloc free _vsnwprintf __CxxFrameHandler ??2@YAPAXI@Z _vsnprintf _wtoi _wsplitpath _ftol wcstoul _cexit _exit _XcptFilter ??3@YAXPAX@Z

kernel32

InterlockedIncrement InterlockedDecrement WaitForMultipleObjects CreateThread TryEnterCriticalSection Sleep CompareStringW GetTimeFormatW GetProcAddress GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter LocalFree GetModuleHandleA GetStartupInfoA GetSystemDirectoryW CreateProcessW GetSystemDefaultLangID lstrlenW GetLocalTime SystemTimeToFileTime ExitProcess GetTickCount GetCurrentThreadId EnterCriticalSection LeaveCriticalSection CreateMutexW OpenEventW RegisterWaitForSingleObject SetEvent WaitForSingleObject QueryPerformanceCounter ReleaseMutex CreateEventW FormatMessageW SetFilePointer SetEndOfFile CreateFileMappingW MapViewOfFile UnmapViewOfFile CompareStringA WriteFile CompareFileTime GetCurrentThread SetFileTime GlobalFree GlobalAlloc InterlockedCompareExchange HeapReAlloc WideCharToMultiByte GetDateFormatW FileTimeToSystemTime MoveFileW GetFileTime CopyFileW lstrcpynW LoadLibraryExW GetVersionExW GetModuleHandleW InitializeCriticalSection CreateFileW GetFileSize ReadFile lstrlenA MultiByteToWideChar SetLastError FindFirstFileW FindNextFileW RemoveDirectoryW FindClose DeleteFileW CreateDirectoryW SetFileAttributesW GetSystemTime GetProcessHeap HeapAlloc HeapFree lstrcmpiW GetFileAttributesW GetPrivateProfileStringW VerSetConditionMask VerifyVersionInfoW GetCommandLineW LoadLibraryA CloseHandle ProcessIdToSessionId GetCurrentProcessId GetLastError DeleteCriticalSection FreeLibrary UnregisterWaitEx

gdi32

TextOutW CreateSolidBrush GetTextExtentPoint32W BitBlt SetBkColor CreateCompatibleDC SetStretchBltMode StretchBlt DeleteDC SetBkMode SetTextColor SelectObject DeleteObject GetStockObject CreateFontIndirectW GetObjectW GetCurrentObject

user32

PostMessageW EndDialog LoadCursorW LoadAcceleratorsW CharLowerA CharUpperA RegisterClassExW SetWindowLongW GetWindowTextLengthW GetWindowTextW GetPropW SetPropW CheckDlgButton LoadStringW CheckRadioButton IsDlgButtonChecked UpdateWindow GetKeyState DrawEdge EqualRect RemovePropW OffsetRect CopyRect GetDesktopWindow IsWindow SetWindowTextW SendMessageW CreateDialogParamW BeginPaint EndPaint SetWindowPos GetSystemMenu EnableMenuItem TranslateAcceleratorW CallNextHookEx GetDlgCtrlID GetSysColor GetSysColorBrush MessageBoxW GetWindowRect MapWindowPoints ReleaseDC GetDlgItem EnableWindow GetDC DrawFocusRect GetWindowLongW DrawTextW GetFocus GetCapture ReleaseCapture GetParent GetClientRect FillRect SetCursor ScreenToClient PtInRect CallWindowProcW CreateCursor InvalidateRect DestroyCursor SetRectEmpty DestroyMenu CreatePopupMenu AppendMenuW CreateWindowExW ShowWindow SetTimer PeekMessageW MsgWaitForMultipleObjectsEx TranslateMessage DispatchMessageW DestroyWindow PostQuitMessage SetWindowsHookExW DefWindowProcW GetCursorPos SetForegroundWindow TrackPopupMenu SetActiveWindow SetFocus DialogBoxParamW KillTimer LoadImageW GetSystemMetrics CharNextW SetCapture

shell32

Shell_NotifyIconW ShellExecuteW SHGetFolderPathW

ole32

CoCreateInstance CoInitializeEx CoUninitialize

oleaut32

SafeArrayDestroy SysReAllocString SysFreeString SysStringLen SysStringByteLen SysAllocStringByteLen SafeArrayCreate SafeArrayAccessData SysAllocString SafeArrayUnaccessData VariantClear SafeArrayGetUBound VariantInit SafeArrayGetElement

urlmon

CreateURLMoniker

comctl32

InitCommonControlsEx

wtsapi32

WTSFreeMemory WTSQuerySessionInformationW

advapi32

LookupPrivilegeValueW RegQueryValueExA RegOpenKeyExA ConvertStringSecurityDescriptorToSecurityDescriptorW GetSecurityDescriptorOwner GetSecurityDescriptorDacl SetNamedSecurityInfoW OpenProcessToken QueryServiceStatus AdjustTokenPrivileges RegOpenKeyW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegOpenKeyExW OpenSCManagerW OpenServiceW CloseServiceHandle RegCloseKey

shlwapi

StrStrW StrChrW StrRChrW PathIsRootW PathIsUNCW PathStripToRootW PathIsRelativeW StrToIntW PathFindFileNameW

advpack

ExtractFiles

wintrust

WTHelperGetProvCertFromChain WTHelperGetProvSignerFromChain WTHelperProvDataFromStateData WinVerifyTrust

crypt32

CryptHashPublicKeyInfo CertGetCertificateContextProperty