b1378cc0168beefd7b7891cbd58d5282e9d33fd6c159464d6f728d46797ba76a

Sharing

Copy URL Twitter E-mail

General

Target
b1378cc0168beefd7b7891cbd58d5282e9d33fd6c159464d6f728d46797ba76a
Size 308KB
Sample221127-abldyaed83
SHA256 b1378cc0168beefd7b7891cbd58d5282e9d33fd6c159464d6f728d46797ba76a
MD5 60a8e3138981cf1e483c4800e73c4db3
SHA1 628b16123c244239c968303bf5619b2e97f5fae3
SHA512 4fc9e588ace1d1b0b07a52e654dfa84472ff57402e5d1adb236e25a0cf61cb7c1a5b137513af7ceaf93ca59f8e06f96ebd98f0334c1af207d56334ba09b898e6
SSDEEP 6144:BkJPQvAoH1OnWTQKbfasq7YIRvOOrelhQvnkjauV84Hn44/Vk7McQ:GJPQvAoH1OnJmNq1vVGhQsmF6Bh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b1378cc0168beefd7b7891cbd58d5282e9d33fd6c159464d6f728d46797ba76a

.exe 308KB

b1378cc0168beefd7b7891cbd58d5282e9d33fd6c159464d6f728d46797ba76a

IMPHASH 2eb619a3ea3dfbc7a5f7dc4b1fa6aa9a
SHA256 b1378cc0168beefd7b7891cbd58d5282e9d33fd6c159464d6f728d46797ba76a
MD5 60a8e3138981cf1e483c4800e73c4db3
SHA1 628b16123c244239c968303bf5619b2e97f5fae3
SHA512 4fc9e588ace1d1b0b07a52e654dfa84472ff57402e5d1adb236e25a0cf61cb7c1a5b137513af7ceaf93ca59f8e06f96ebd98f0334c1af207d56334ba09b898e6
SSDEEP 6144:BkJPQvAoH1OnWTQKbfasq7YIRvOOrelhQvnkjauV84Hn44/Vk7McQ:GJPQvAoH1OnJmNq1vVGhQsmF6Bh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

11903

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NO_BIND IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_NET_RUN_FROM_SWAP IMAGE_FILE_SYSTEM

PDB paths

kernel32

LCMapStringW MultiByteToWideChar WriteConsoleW SetStdHandle HeapSize RtlUnwind IsValidCodePage GetOEMCP GetACP GetCPInfo GetConsoleMode GetConsoleCP RaiseException GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetModuleFileNameA InterlockedDecrement SetLastError InterlockedIncrement TlsFree TlsSetValue GetStringTypeW TlsAlloc LoadLibraryW DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection GetModuleFileNameW GetStdHandle GetCurrentProcess HeapReAlloc FlushFileBuffers lstrcpyA GetCurrentThreadId ConvertDefaultLocale GetLastError GlobalUnlock lstrlenW CompareStringW CreateFileW HeapCreate Sleep WriteFile FormatMessageA TerminateProcess EncodePointer IsDebuggerPresent SetUnhandledExceptionFilter CloseHandle UnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW HeapSetInformation GetCommandLineA DecodePointer GetModuleHandleW GetProcAddress HeapFree GlobalLock HeapAlloc SetFilePointer TlsGetValue ExitProcess

user32

BeginDeferWindowPos GetSystemMetrics IsWindowVisible DeferWindowPos SetThreadDesktop SetWindowTextA UpdateWindow GetDlgItemTextA ShowWindow EnumWindowStationsW GetMenuItemInfoA DefWindowProcA EndDialog GetDlgItem ReleaseDC SetScrollPos DialogBoxParamA EndDeferWindowPos GetWindow EndPaint SetCursor GetUserObjectInformationA SetProcessWindowStation GetWindowRect GetThreadDesktop IsIconic CloseWindowStation GetFocus LoadBitmapA CreateDesktopA GetProcessWindowStation GetClientRect SetFocus CloseDesktop SendMessageA BeginPaint GetDC GetForegroundWindow GetMenu GetWindowTextA GetKeyboardLayout RegisterClipboardFormatA MessageBoxA InvalidateRect GetWindowLongA

gdi32

SetTextJustification BitBlt DeleteDC CreateFontIndirectA DeleteObject SelectObject CreateCompatibleDC GetKerningPairsA CreateCompatibleBitmap

shell32

ExtractIconExA

ole32

ReleaseStgMedium

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

shlwapi

StrToIntExA

gdiplus

GdipFree GdipCreateBitmapFromScan0 GdiplusStartup GdipCloneImage GdipSaveImageToFile GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipAlloc GdipGetImageGraphicsContext

imm32

ImmGetOpenStatus ImmGetConversionStatus ImmSetOpenStatus ImmGetContext ImmReleaseContext

ntdsapi

DsUnBindA

Name

.text

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.relo

Size

166KB

Virtual Size

166KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.cdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ