3b3b1ffce2f886c58c7a30568dc7be34a0249c0d53d2426d723324cb389963c3

General

Target
3b3b1ffce2f886c58c7a30568dc7be34a0249c0d53d2426d723324cb389963c3
Size 134KB
Sample221124-ed34zsfd32
SHA256 3b3b1ffce2f886c58c7a30568dc7be34a0249c0d53d2426d723324cb389963c3
MD5 f5783d89d0f67e410bb376eca2da04f3
SHA1 1628b954d1038e0864a48ae0b86c95c3f1c08738
SHA512 01b88caea492b405e40dcce6dfc9a16ae5e8c1a01467ba18f93f07e34d42c18be50b9d2faff292979cc2f02dab12337487b99af81748bf9936a3c974c2e583bf
SSDEEP 3072:mG8ouV2qjrOpIAFjGylI9sMJF99JEro9qcbi5h4:CV7Pzq1lI9sMJFj4oLbSh4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

3b3b1ffce2f886c58c7a30568dc7be34a0249c0d53d2426d723324cb389963c3

.zip 134KB
RG928200002_2014_november_00000329320.023042490280.0324980000038-0000006.exe

.exe 180KB

3b3b1ffce2f886c58c7a30568dc7be34a0249c0d53d2426d723324cb389963c3

SHA256 3b3b1ffce2f886c58c7a30568dc7be34a0249c0d53d2426d723324cb389963c3
MD5 f5783d89d0f67e410bb376eca2da04f3
SHA1 1628b954d1038e0864a48ae0b86c95c3f1c08738
SHA512 01b88caea492b405e40dcce6dfc9a16ae5e8c1a01467ba18f93f07e34d42c18be50b9d2faff292979cc2f02dab12337487b99af81748bf9936a3c974c2e583bf
SSDEEP 3072:mG8ouV2qjrOpIAFjGylI9sMJF99JEro9qcbi5h4:CV7Pzq1lI9sMJFj4oLbSh4
MD5 SHA1 SHA512 SSDEEP

RG928200002_2014_november_00000329320.023042490280.0324980000038-0000006.exe

IMPHASH bcdc7ff93bc34eb6f3798d235d2e4142
SHA256 0ed91af7f5dd71ee724ef0bddaae43bdd10721fa21f2b226f69f3156085126fc
MD5 f96874ad23fde2f0b3af2af1565beb73
SHA1 16e63fa7df0f2e8964d2e9cf2541b9ccd5c31106
SHA512 e5c621a7bd62832ba331b2d0ee40d72e81d9a6892a662ded20c1c23e56b553b829f1691293728b1a8d190c6dd3c0dfdccfe77551ebe2bf7e3220d411c77e803d
SSDEEP 3072:t1ezQdDuZph4fWy6c3v40y+rzqVCr+YARsI6u2t4Y9sBG0hac0v2D+:t1eUNuFIdt3vTrz1r+R7F2t4pUO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

5701

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenFile VirtualAlloc GlobalUnfix WaitCommEvent ReadConsoleW GetConsoleInputExeNameA GetConsoleKeyboardLayoutNameA GetConsoleAliasExesLengthA SetConsoleDisplayMode lstrcpynA Module32NextW LocalFileTimeToFileTime GetACP

gdi32

CreateSolidBrush ExtSelectClipRgn TextOutW EqualRgn CreateBrushIndirect DeleteObject HT_Get8BPPFormatPalette GetStockObject CreatePalette CreatePenIndirect SelectObject StartPage CreateFontIndirectA GetClipBox CreatePen

user32

LoadCursorA LoadMenuW GetDC GetClientRect IsChild LoadBitmapW FindWindowW FindWindowA GetMenu LoadBitmapA GetSystemMetrics

dmocx

DllCanUnloadNow DllUnregisterServer DllRegisterServer DllGetClassObject

iasrad

?initialize@VSAFilter@@QAEJXZ ?radiusToIAS@VSAFilter@@QBEJPAUIAttributesRaw@@@Z DllUnregisterServer DllRegisterServer DllGetClassObject ?shutdown@VSAFilter@@QAEJXZ DllCanUnloadNow

wshext

DllGetClassObject PutSignedDataMsg IsFileSupportedName DllCanUnloadNow DllUnregisterServer CreateIndirectData VerifyIndirectData RemoveSignedDataMsg GetSignedDataMsg DllRegisterServer

comctl32

InitCommonControlsEx CreateStatusWindowW ImageList_AddMasked ImageList_SetFilter ImageList_Replace InitializeFlatSB FlatSB_SetScrollRange InitCommonControls PropertySheet ImageList_Read ImageList_Create

Sharing

General

Malware Config

Signatures

File Explorer

3b3b1ffce2f886c58c7a30568dc7be34a0249c0d53d2426d723324cb389963c3

RG928200002_2014_november_00000329320.023042490280.0324980000038-0000006.exe

kernel32

gdi32

user32

dmocx

iasrad

wshext

comctl32