80be364ca95521d8d7f73e02480c6e366a8cf0ba3a7a33e77621eccc47c9dc8c

Sharing

Copy URL Twitter E-mail

General

Target
80be364ca95521d8d7f73e02480c6e366a8cf0ba3a7a33e77621eccc47c9dc8c
Size 143KB
Sample221127-gnhbdadg22
SHA256 80be364ca95521d8d7f73e02480c6e366a8cf0ba3a7a33e77621eccc47c9dc8c
MD5 1fd02c9ec81944b3ded98969146e64ac
SHA1 fb0593d1e15edaf634c507969b14d3503a5e8ef3
SHA512 f669af917f3bf4e191d3ae75fb211dd8b4ff279ea1afd6372db360ead2ea0b369a0bb44d5075f853fd9018b5cc6a1e7fa941424e08f9fdf470615c5672bc993a
SSDEEP 3072:iN6ZekwVJIlgps5q9Eb648qwlS/+TfQO45Dd:pe9IB83ID5x
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

80be364ca95521d8d7f73e02480c6e366a8cf0ba3a7a33e77621eccc47c9dc8c

.exe 143KB

80be364ca95521d8d7f73e02480c6e366a8cf0ba3a7a33e77621eccc47c9dc8c

IMPHASH dbe129d5088d493503666c0323721783
SHA256 80be364ca95521d8d7f73e02480c6e366a8cf0ba3a7a33e77621eccc47c9dc8c
MD5 1fd02c9ec81944b3ded98969146e64ac
SHA1 fb0593d1e15edaf634c507969b14d3503a5e8ef3
SHA512 f669af917f3bf4e191d3ae75fb211dd8b4ff279ea1afd6372db360ead2ea0b369a0bb44d5075f853fd9018b5cc6a1e7fa941424e08f9fdf470615c5672bc993a
SSDEEP 3072:iN6ZekwVJIlgps5q9Eb648qwlS/+TfQO45Dd:pe9IB83ID5x
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42229

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winhttp

WinHttpSendRequest WinHttpCrackUrl WinHttpQueryHeaders WinHttpReadData WinHttpOpen WinHttpConnect WinHttpOpenRequest WinHttpCloseHandle WinHttpReceiveResponse WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl WinHttpSetOption

shlwapi

StrCpyW StrStrIW StrToIntExA StrCatW PathAddBackslashW StrToIntW

comctl32

InitCommonControlsEx

urlmon

URLDownloadToFileW URLDownloadToCacheFileW

kernel32

GetACP GetCPInfo LoadLibraryA GetSystemTimeAsFileTime QueryPerformanceCounter GetLocaleInfoA IsValidCodePage HeapFree GetProcessHeap IsWow64Process GetCurrentProcess GetVersionExW CloseHandle GetFileSize CreateFileW GetTickCount GetLastError ReadFile WaitForSingleObject CreateProcessW lstrcatW FreeLibrary DeleteFileW LeaveCriticalSection EnterCriticalSection LoadLibraryW lstrcmpiW GetCommandLineW lstrlenW GlobalFree lstrcpyW MultiByteToWideChar WideCharToMultiByte GetExitCodeThread CreateThread Sleep HeapAlloc CreateEventExW GetTempPathW lstrcmpiA lstrcatA lstrlenA UnmapViewOfFile MapViewOfFile CreateFileMappingW GetCurrentProcessId GetModuleHandleW WaitForMultipleObjects ResumeThread GetEnvironmentStringsW TerminateProcess OpenProcess WriteFile GetModuleFileNameW InitializeCriticalSectionAndSpinCount CreateDirectoryW SetLastError LocalFree GetFileType GetOEMCP SetHandleCount FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA HeapSize InterlockedDecrement GetCurrentThreadId InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleFileNameA GetStdHandle ExitProcess GetProcAddress HeapCreate HeapReAlloc VirtualAlloc VirtualFree DeleteCriticalSection GetStartupInfoA GetCommandLineA GetStringTypeA GetStringTypeW LCMapStringW LCMapStringA GetTempFileNameW RaiseException IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlUnwind

user32

LoadIconW SetWindowTextW DestroyMenu SetDlgItemTextW ShowWindow SetTimer GetDlgItem SendMessageW GetWindowLongW SetWindowLongW wsprintfW TrackPopupMenuEx GetCursorPos AppendMenuW CreatePopupMenu DialogBoxParamW GetDlgItemTextW

gdi32

GetStockObject CreateFontIndirectW GetObjectW

advapi32

GetSecurityDescriptorSacl SetSecurityInfo ConvertStringSecurityDescriptorToSecurityDescriptorA ConvertStringSecurityDescriptorToSecurityDescriptorW

shell32

ShellExecuteW CommandLineToArgvW Shell_NotifyIconW