157819bf15862fe5a1538896780f2b94587e35d09b7121d1200e565f5cd1cbc9

Sharing

Copy URL Twitter E-mail

General

Target
157819bf15862fe5a1538896780f2b94587e35d09b7121d1200e565f5cd1cbc9
Size 937KB
Sample221124-h47rmsbc61
SHA256 157819bf15862fe5a1538896780f2b94587e35d09b7121d1200e565f5cd1cbc9
MD5 88670d6e9b2205116ec3de8072692e21
SHA1 ef5b6120fc5d3d289f64b5e4824151b1ef7c264c
SHA512 b1b4b578e460c2ab0ebd1aacea4e5762246c5fb5693ce57b46a6a9aededef23d2249abc45a268ea3db476a464bbb3d3e4ee2db0c5c0d27bbc96f876ca65621b0
SSDEEP 24576:S/6NgZyGGZAim8giQ3UA/0TIRKb0gJAvaAtmSJcS+JEh:ybZfGZARViQkA/0TIR3gGvtxLh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

157819bf15862fe5a1538896780f2b94587e35d09b7121d1200e565f5cd1cbc9

.exe 937KB

157819bf15862fe5a1538896780f2b94587e35d09b7121d1200e565f5cd1cbc9

IMPHASH ea94c30843a9cb4bd71911c511950546
SHA256 157819bf15862fe5a1538896780f2b94587e35d09b7121d1200e565f5cd1cbc9
MD5 88670d6e9b2205116ec3de8072692e21
SHA1 ef5b6120fc5d3d289f64b5e4824151b1ef7c264c
SHA512 b1b4b578e460c2ab0ebd1aacea4e5762246c5fb5693ce57b46a6a9aededef23d2249abc45a268ea3db476a464bbb3d3e4ee2db0c5c0d27bbc96f876ca65621b0
SSDEEP 24576:S/6NgZyGGZAim8giQ3UA/0TIRKb0gJAvaAtmSJcS+JEh:ybZfGZARViQkA/0TIR3gGvtxLh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

418220

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdiplus

GdipCloneImage GdipGetImageEncoders GdipGetImageEncodersSize GdiplusShutdown GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipSaveImageToStream GdipDisposeImage GdipLoadImageFromFileICM GdipLoadImageFromFile GdipAlloc GdipFree GdiplusStartup GdipCreateHBITMAPFromBitmap

rpcrt4

UuidCreate

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

msi

ord204

winmm

PlaySoundA

kernel32

FileTimeToLocalFileTime DeleteCriticalSection GetFileAttributesA GetFileSizeEx GetFileTime TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree GetModuleHandleW GetCurrentDirectoryA GlobalFlags GetCPInfo GetOEMCP SetErrorMode UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapFree FindNextFileA ExitProcess GetSystemTimeAsFileTime GetDriveTypeA HeapAlloc GetCommandLineA GetStartupInfoA VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc ExitThread HeapSize SetStdHandle GetFileType HeapCreate VirtualFree SetHandleCount GetStdHandle GetConsoleCP GetConsoleMode GetACP IsValidCodePage LCMapStringA LCMapStringW InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTimeZoneInformation WriteConsoleA GetConsoleOutputCP WriteConsoleW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW CompareStringW SetEnvironmentVariableA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer ReadFile InterlockedIncrement FileTimeToSystemTime GetThreadLocale GlobalGetAtomNameA GlobalFindAtomA lstrcmpW FreeResource WritePrivateProfileStringA GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent SetThreadPriority InterlockedDecrement GetModuleFileNameW GlobalDeleteAtom GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA CompareStringA InterlockedExchange lstrcmpA GetModuleHandleA GlobalFree GlobalUnlock MulDiv lstrlenA lstrcpynA CreateProcessA SetLastError CreateThread TerminateThread EnterCriticalSection LeaveCriticalSection GetExitCodeThread InitializeCriticalSection LoadLibraryA GetProcAddress FreeLibrary CreateFileA WriteFile RemoveDirectoryA GetTempFileNameA GetTempPathA GetWindowsDirectoryA Sleep GetSystemTime CreateDirectoryA FormatMessageA OutputDebugStringA GetVersionExA GetSystemDirectoryA GlobalAlloc GlobalLock lstrcpyA lstrcatA MultiByteToWideChar WaitForSingleObject DeleteFileA GetUserDefaultUILanguage GetTickCount GetCurrentThread GetCurrentProcess LocalAlloc LocalFree CloseHandle ResumeThread CreateToolhelp32Snapshot GetLastError Process32First Process32Next OpenProcess GetExitCodeProcess TerminateProcess GetModuleFileNameA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource CreateFileW RtlUnwind GetProcessHeap

user32

InvalidateRgn GetNextDlgGroupItem MessageBeep RegisterClipboardFormatA PostThreadMessageA InsertMenuItemA CreatePopupMenu SetRectEmpty TranslateAcceleratorA CharUpperA InflateRect CharNextA RegisterWindowMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetMessagePos MapWindowPoints TrackPopupMenu SetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DeferWindowPos CopyRect DefWindowProcA CallWindowProcA GetMenu OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement EndPaint BeginPaint GetWindowDC ClientToScreen ScreenToClient FillRect CreateDialogIndirectParamA DestroyWindow GetNextDlgTabItem EndDialog SetWindowContextHelpId SetRect GetLastActivePopup ShowOwnedPopups SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA ReleaseCapture GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA CheckMenuItem GetWindowTextA GetFocus SetFocus IsWindowEnabled MoveWindow GetDlgCtrlID SetWindowTextA IsDialogMessageA SendDlgItemMessageA GetDlgItem GetWindow UnhookWindowsHookEx PostQuitMessage GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetSystemMenu EnableMenuItem GetWindowThreadProcessId IsWindowVisible GetWindowRect ShowWindow CloseWindow GetDesktopWindow DrawFrameControl MessageBoxA GetSysColor PostMessageA GetDC ReleaseDC GetSystemMetrics SetWindowPos GrayStringA DrawTextExA DrawTextA TabbedTextOutA LoadBitmapA GetWindowLongA SetWindowLongA LoadCursorA IsRectEmpty CopyAcceleratorTableA UnregisterClassA SetCapture SetCursor EnableWindow GetSysColorBrush GetMenuItemInfoA UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu MapDialogRect GetParent InvalidateRect GetClientRect IsIconic IsWindow GetKeyboardState keybd_event SetForegroundWindow BringWindowToTop SetActiveWindow DrawIcon PtInRect SetTimer KillTimer LoadIconA SendMessageA UpdateWindow GetActiveWindow LoadAcceleratorsA

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush SetWindowOrgEx SetViewportExtEx GetTextColor CreateRectRgnIndirect GetTextExtentPoint32A GetRgnBox ScaleViewportExtEx OffsetViewportOrgEx SetViewportOrgEx GetPixel CreateSolidBrush GetDeviceCaps GetCurrentObject DeleteObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetStockObject BitBlt LPtoDP DPtoLP GetWindowExtEx GetViewportExtEx GetMapMode GetBkColor SelectObject CreateCompatibleDC CreateCompatibleBitmap GetObjectA CreateFontIndirectA GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

OpenThreadToken RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA AbortSystemShutdownA RegEnumKeyExA RegQueryInfoKeyA RegQueryValueExA RegOpenKeyExA RegSetValueExA RegCloseKey EnumServicesStatusA OpenProcessToken DuplicateToken InitializeSecurityDescriptor GetLengthSid InitializeAcl AddAccessAllowedAce SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner IsValidSecurityDescriptor AccessCheck AllocateAndInitializeSid CheckTokenMembership FreeSid OpenSCManagerA

shell32

ShellExecuteA Shell_NotifyIconA DragFinish DragQueryFileA SHGetFolderPathA

comctl32

ord17

shlwapi

PathFindExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA UrlUnescapeA AssocQueryStringA

oledlg

ord8

ole32

CoTaskMemAlloc CoGetClassObject StgOpenStorageOnILockBytes CoTaskMemFree StringFromCLSID CreateStreamOnHGlobal CoInitializeEx CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes

oleaut32

VariantCopy VariantChangeType SysAllocStringLen SysAllocStringByteLen SysStringLen SysFreeString VariantInit SafeArrayCreateVector SysAllocString SafeArrayAccessData VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayUnaccessData SafeArrayDestroy OleCreateFontIndirect VariantClear

urlmon

ObtainUserAgentString URLDownloadToFileA

wininet

HttpOpenRequestA InternetConnectA HttpSendRequestA InternetReadFile InternetWriteFile InternetSetFilePointer InternetSetStatusCallback InternetGetLastResponseInfoA HttpQueryInfoA HttpAddRequestHeadersA DeleteUrlCacheEntry InternetCanonicalizeUrlA InternetOpenUrlA InternetCloseHandle InternetQueryDataAvailable InternetOpenA InternetCrackUrlA