fb4eac1c3347e871b888daf54a29ffef542368bf29f5caea3cf96944acfb4bb3

Sharing

Copy URL Twitter E-mail

General

Target
fb4eac1c3347e871b888daf54a29ffef542368bf29f5caea3cf96944acfb4bb3
Size 60KB
Sample221127-pbdfnaah3w
SHA256 fb4eac1c3347e871b888daf54a29ffef542368bf29f5caea3cf96944acfb4bb3
MD5 c4add0b862693e3e1b7126ce140a14a0
SHA1 685a4c06c36e2e25d65159e28a77757550d36409
SHA512 6a2033a00e0c74e5da45459d7cfb809948f463f0e25363a11b88464bafc5f2efe9c4821e613aa94fe3dcba29b575863a1362fa756941814808abffd54590f546
SSDEEP 768:yFt04pX5u8baD9PyqJzEFABcqdi3zEtBq3l0OJYRvJQqY4zGxXRtNpSdqC6:xKgR5PyseuEE20O8JB3QRfpsqC6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

fb4eac1c3347e871b888daf54a29ffef542368bf29f5caea3cf96944acfb4bb3

.exe 60KB

fb4eac1c3347e871b888daf54a29ffef542368bf29f5caea3cf96944acfb4bb3

IMPHASH bc63879cfb68aa71ba557db156aea68a
SHA256 fb4eac1c3347e871b888daf54a29ffef542368bf29f5caea3cf96944acfb4bb3
MD5 c4add0b862693e3e1b7126ce140a14a0
SHA1 685a4c06c36e2e25d65159e28a77757550d36409
SHA512 6a2033a00e0c74e5da45459d7cfb809948f463f0e25363a11b88464bafc5f2efe9c4821e613aa94fe3dcba29b575863a1362fa756941814808abffd54590f546
SSDEEP 768:yFt04pX5u8baD9PyqJzEFABcqdi3zEtBq3l0OJYRvJQqY4zGxXRtNpSdqC6:xKgR5PyseuEE20O8JB3QRfpsqC6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40796

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit ??1type_info@@UAE@XZ _beginthreadex rename strcpy strcat _access sprintf _except_handler3 free realloc malloc memcmp ??2@YAPAXI@Z memset _ftol _CxxThrowException __CxxFrameHandler memmove ??3@YAXPAX@Z

kernel32

GetStartupInfoA GetModuleHandleA CreateToolhelp32Snapshot Process32First Process32Next lstrcmpiA CopyFileA GetCurrentThreadId ExpandEnvironmentStringsA WinExec CreateThread OpenEventA GetLocalTime CreateDirectoryA OpenProcess InitializeCriticalSection DeleteCriticalSection VirtualFree LeaveCriticalSection Sleep EnterCriticalSection VirtualAlloc CreateEventA CloseHandle WaitForSingleObject ResetEvent lstrcpyA SetEvent InterlockedExchange CancelIo WriteFile SetFilePointer CreateFileA GetFileSize GetWindowsDirectoryA ReadFile GetFileAttributesA CreateProcessA lstrlenA TerminateThread lstrcatA GetTickCount GetLastError GetCurrentProcess HeapAlloc GetProcessHeap VirtualProtect GetProcAddress LoadLibraryA IsBadReadPtr HeapFree FreeLibrary GetDiskFreeSpaceExA GetDriveTypeA DuplicateHandle GetSystemInfo GetVersionExA FindClose FindFirstFileA GetModuleFileNameA ExitProcess DeleteFileA GlobalMemoryStatusEx

user32

OpenInputDesktop GetThreadDesktop GetUserObjectInformationA SetThreadDesktop OpenDesktopA PostThreadMessageA GetInputState GetMessageA ExitWindowsEx wsprintfA CloseDesktop

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegSetValueExA RegCreateKeyExA RegOpenKeyA SetServiceStatus StartServiceCtrlDispatcherA CloseServiceHandle StartServiceA OpenServiceA ChangeServiceConfig2A LockServiceDatabase CreateServiceA

shell32

ShellExecuteA

ws2_32

WSAStartup WSACleanup WSAIoctl setsockopt connect htons gethostbyname socket ntohs recv closesocket select send gethostname getsockname