5cd9f9e3744daa7ecd4479f483124cc269e827c8acc96271e1f1ea2023afa520

Sharing

Copy URL Twitter E-mail

General

Target
5cd9f9e3744daa7ecd4479f483124cc269e827c8acc96271e1f1ea2023afa520
Size 2.3MB
Sample221122-xe42sagg9z
SHA256 5cd9f9e3744daa7ecd4479f483124cc269e827c8acc96271e1f1ea2023afa520
MD5 f9a70b66ff579dc6e00109eb5d48055e
SHA1 4337646a6b0d12f8732e5b20003cc999852e3f62
SHA512 782086b98f6c3c296716fa4178170302c56a2fff512e34e9efc724d1eb1108fa7e58e7c1e30425de91aae718c966819e5aa716e4cedad4778d5bf2d6dffec306
SSDEEP 49152:RLfmMc8EjGCbKeaoK94jmPBLeL7gBfi/4gXkc/hbHorCUm0fV:RLfm382GCbKeWyjUBLL2dT/xoWUf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5cd9f9e3744daa7ecd4479f483124cc269e827c8acc96271e1f1ea2023afa520

.exe 2.3MB

5cd9f9e3744daa7ecd4479f483124cc269e827c8acc96271e1f1ea2023afa520

IMPHASH c769210c368165fcb9c03d3f832f55eb
SHA256 5cd9f9e3744daa7ecd4479f483124cc269e827c8acc96271e1f1ea2023afa520
MD5 f9a70b66ff579dc6e00109eb5d48055e
SHA1 4337646a6b0d12f8732e5b20003cc999852e3f62
SHA512 782086b98f6c3c296716fa4178170302c56a2fff512e34e9efc724d1eb1108fa7e58e7c1e30425de91aae718c966819e5aa716e4cedad4778d5bf2d6dffec306
SSDEEP 49152:RLfmMc8EjGCbKeaoK94jmPBLeL7gBfi/4gXkc/hbHorCUm0fV:RLfm382GCbKeWyjUBLL2dT/xoWUf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

74191

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

shell32

SHGetSpecialFolderPathW ShellExecuteExW SHGetMalloc SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW

gdi32

CreateFontIndirectW DeleteObject GetDeviceCaps GetObjectW CreateCompatibleDC SelectObject CreateCompatibleBitmap SetStretchBltMode DeleteDC GetCurrentObject StretchBlt

user32

GetWindowRect ScreenToClient CreateWindowExW GetWindowTextW GetMessageW GetParent KillTimer DestroyWindow CharUpperW EndDialog SendMessageW wsprintfW CopyImage ReleaseDC GetWindowDC SetWindowPos GetMenu GetWindowLongW DispatchMessageW GetWindowTextLengthW GetSysColor SetWindowTextW MessageBoxA wsprintfA GetKeyState GetDlgItem GetClientRect GetSystemMetrics SetWindowLongW SetFocus SystemParametersInfoW ShowWindow DrawTextW GetDC ClientToScreen GetWindow DialogBoxIndirectParamW DrawIconEx CallWindowProcW DefWindowProcW IsWindow wvsprintfW LoadImageW LoadIconW MessageBeep EnableWindow EnableMenuItem GetSystemMenu GetClassNameA SetTimer

ole32

CreateStreamOnHGlobal CoCreateInstance CoInitialize

oleaut32

SysAllocString VariantClear OleLoadPicture

kernel32

SetEndOfFile EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects DeleteCriticalSection GetModuleHandleA SetFileTime ReadFile SetFilePointer GetFileSize GetSystemDirectoryW FormatMessageW lstrcpyW LocalFree IsBadReadPtr SuspendThread ResumeThread TerminateThread InitializeCriticalSection ResetEvent SetEvent CreateEventW GetVersionExW GetCommandLineW GetModuleFileNameW SetCurrentDirectoryW GetDriveTypeW CreateFileW CloseHandle SetEnvironmentVariableW GetTempPathW lstrlenW GetSystemTimeAsFileTime CompareFileTime SetThreadLocale FindFirstFileW DeleteFileW FindNextFileW FindClose RemoveDirectoryW ExpandEnvironmentStringsW WideCharToMultiByte VirtualAlloc GlobalMemoryStatusEx lstrcmpW GetEnvironmentVariableW lstrcmpiW lstrlenA GetLocaleInfoW MultiByteToWideChar GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemDefaultLCID lstrcmpiA GlobalAlloc GlobalFree MulDiv FindResourceExA SizeofResource LoadResource LockResource LoadLibraryA GetProcAddress GetModuleHandleW VirtualFree GetStdHandle ExitProcess lstrcatW GetDiskFreeSpaceExW SetFileAttributesW SetLastError Sleep GetExitCodeThread WaitForSingleObject CreateThread GetLastError SystemTimeToFileTime GetLocalTime GetFileAttributesW CreateDirectoryW WriteFile GetStartupInfoA

msvcrt

??2@YAPAXI@Z _purecall memcmp free memcpy _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ _onexit __dllonexit _CxxThrowException _beginthreadex _EH_prolog ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z memset _wcsnicmp strncmp malloc memmove _wtol ??3@YAXPAX@Z