d611593bdac2721ddae12f58b1dfbb2ff27bd9e6e52627944fa99dd0991f2481

Sharing

Copy URL Twitter E-mail

General

Target
d611593bdac2721ddae12f58b1dfbb2ff27bd9e6e52627944fa99dd0991f2481
Size 973KB
Sample221127-py3n3acg3s
SHA256 d611593bdac2721ddae12f58b1dfbb2ff27bd9e6e52627944fa99dd0991f2481
MD5 48c5fe6ee3c73e9dee697bd4d6ae08e6
SHA1 8220ffe1e5c62e36a14510071b0486fa5aa9d629
SHA512 5d5c2b39e34845ec79360b692cae85196db1bd2cb1e3c0ed2771ed72258297f030bade556b61c8ee334325b2fbc4990e2ab81b9c72f0908763a711590680c1ab
SSDEEP 24576:K+wU+0GRJBMyaosJdRnPUKGh6qltQpoRGbkZMA0uSrr17wH5:IR0GRJ5RsBPUKGhtQugkZOXa5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d611593bdac2721ddae12f58b1dfbb2ff27bd9e6e52627944fa99dd0991f2481

.exe 973KB

d611593bdac2721ddae12f58b1dfbb2ff27bd9e6e52627944fa99dd0991f2481

IMPHASH c1af8ff24506400822909c376c7d240a
SHA256 d611593bdac2721ddae12f58b1dfbb2ff27bd9e6e52627944fa99dd0991f2481
MD5 48c5fe6ee3c73e9dee697bd4d6ae08e6
SHA1 8220ffe1e5c62e36a14510071b0486fa5aa9d629
SHA512 5d5c2b39e34845ec79360b692cae85196db1bd2cb1e3c0ed2771ed72258297f030bade556b61c8ee334325b2fbc4990e2ab81b9c72f0908763a711590680c1ab
SSDEEP 24576:K+wU+0GRJBMyaosJdRnPUKGh6qltQpoRGbkZMA0uSrr17wH5:IR0GRJ5RsBPUKGhtQugkZOXa5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

430691

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdiplus

GdipCloneImage GdipGetImageEncoders GdipGetImageEncodersSize GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipSaveImageToStream GdipDisposeImage GdipLoadImageFromFileICM GdipLoadImageFromFile GdipAlloc GdiplusShutdown GdipFree GdiplusStartup GdipCreateHBITMAPFromBitmap

rpcrt4

UuidCreate

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

msi

ord204

winmm

PlaySoundA

iphlpapi

GetAdaptersInfo

kernel32

FileTimeToLocalFileTime DeleteCriticalSection GetFileAttributesExA GetFileAttributesA GetFileSizeEx GetFileTime TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree GetModuleHandleW GetCurrentDirectoryA GlobalFlags GetCPInfo GetOEMCP SetErrorMode UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetFullPathNameA RtlUnwind ExitProcess GetSystemTimeAsFileTime HeapReAlloc HeapAlloc GetDriveTypeA GetCommandLineA GetStartupInfoA VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery ExitThread HeapSize SetStdHandle GetFileType HeapCreate VirtualFree SetHandleCount GetStdHandle GetConsoleCP GetConsoleMode GetACP IsValidCodePage LCMapStringA LCMapStringW InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTimeZoneInformation WriteConsoleA GetConsoleOutputCP WriteConsoleW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW CompareStringW SetEnvironmentVariableA GetVolumeInformationA FindFirstFileA FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer ReadFile FindNextFileA InterlockedIncrement FileTimeToSystemTime GetThreadLocale GlobalGetAtomNameA GlobalFindAtomA lstrcmpW FreeResource WritePrivateProfileStringA GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent SetThreadPriority GlobalDeleteAtom GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA CompareStringA InterlockedExchange lstrcmpA InterlockedDecrement GetModuleFileNameW GetModuleHandleA GlobalFree GlobalUnlock MulDiv lstrlenA lstrcpynA CreateProcessA SetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSection LoadLibraryA GetProcAddress FreeLibrary CreateFileA WriteFile RemoveDirectoryA GetTempFileNameA GetWindowsDirectoryA CreateThread Sleep TerminateThread GetSystemTime CreateDirectoryA FormatMessageA OutputDebugStringA GetVersionExA GetSystemDirectoryA GlobalAlloc GlobalLock lstrcpyA lstrcatA WaitForSingleObject DeleteFileA GetTempPathA MultiByteToWideChar GetUserDefaultUILanguage GetCurrentThread GetCurrentProcess LocalAlloc LocalFree CloseHandle GetTickCount ResumeThread CreateToolhelp32Snapshot GetLastError Process32First Process32Next OpenProcess GetExitCodeProcess TerminateProcess GetModuleFileNameA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource CreateFileW HeapFree GetProcessHeap

user32

InvalidateRgn GetNextDlgGroupItem MessageBeep RegisterClipboardFormatA PostThreadMessageA InsertMenuItemA CreatePopupMenu SetRectEmpty TranslateAcceleratorA CharUpperA InflateRect CharNextA CreateDialogIndirectParamA GetNextDlgTabItem EndDialog RegisterWindowMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints TrackPopupMenu SetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DeferWindowPos CopyRect DefWindowProcA CallWindowProcA GetMenu OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement EndPaint BeginPaint GetWindowDC ClientToScreen ScreenToClient FillRect SetWindowContextHelpId SetRect GetLastActivePopup ShowOwnedPopups SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA ReleaseCapture GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA CheckMenuItem GetFocus SetFocus IsWindowEnabled MoveWindow GetDlgCtrlID SetWindowTextA IsDialogMessageA SendDlgItemMessageA GetDlgItem GetWindow PostQuitMessage UnhookWindowsHookEx GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetSystemMenu EnableMenuItem GetWindowThreadProcessId IsWindowVisible GetWindowRect ShowWindow CloseWindow GetDesktopWindow DrawFrameControl MessageBoxA GetSysColor PostMessageA GetDC ReleaseDC GetSystemMetrics SetWindowPos GrayStringA DrawTextExA DrawTextA TabbedTextOutA LoadBitmapA IsWindow GetKeyboardState keybd_event IsRectEmpty CopyAcceleratorTableA SetCapture UnregisterClassA SetForegroundWindow BringWindowToTop GetSysColorBrush GetMenuItemInfoA UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu MapDialogRect SetActiveWindow LoadCursorA SetCursor GetWindowLongA SetWindowLongA EnableWindow GetParent InvalidateRect GetClientRect IsIconic DrawIcon PtInRect SetTimer KillTimer LoadIconA SendMessageA UpdateWindow GetActiveWindow LoadAcceleratorsA GetWindowTextA

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush SetWindowOrgEx SetViewportExtEx GetTextColor CreateRectRgnIndirect GetTextExtentPoint32A GetRgnBox ScaleViewportExtEx OffsetViewportOrgEx SetViewportOrgEx GetPixel CreateSolidBrush GetDeviceCaps GetCurrentObject DeleteObject GetStockObject Escape ExtTextOutA TextOutA RectVisible PtVisible BitBlt LPtoDP DPtoLP GetWindowExtEx GetViewportExtEx GetMapMode GetBkColor SelectObject CreateCompatibleDC CreateCompatibleBitmap GetObjectA CreateFontIndirectA GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

OpenThreadToken RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA AbortSystemShutdownA RegEnumKeyExA RegQueryInfoKeyA RegQueryValueExA RegSetValueExA RegCloseKey RegOpenKeyExA EnumServicesStatusA OpenProcessToken DuplicateToken InitializeSecurityDescriptor GetLengthSid InitializeAcl AddAccessAllowedAce SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner IsValidSecurityDescriptor AccessCheck AllocateAndInitializeSid CheckTokenMembership FreeSid OpenSCManagerA

shell32

ShellExecuteA Shell_NotifyIconA DragFinish DragQueryFileA SHGetFolderPathA

comctl32

ord17

shlwapi

PathFindExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA UrlUnescapeA AssocQueryStringA

oledlg

ord8

ole32

CoTaskMemAlloc CoGetClassObject StgOpenStorageOnILockBytes CoTaskMemFree StringFromCLSID CreateStreamOnHGlobal CoInitializeEx CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes

oleaut32

VariantCopy VariantChangeType SysAllocStringLen SysAllocStringByteLen SysStringLen VariantInit SafeArrayCreateVector SysAllocString SafeArrayAccessData SafeArrayUnaccessData VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy VariantClear OleCreateFontIndirect SysFreeString

urlmon

ObtainUserAgentString URLDownloadToFileA

wininet

HttpOpenRequestA InternetConnectA HttpSendRequestA InternetWriteFile InternetSetFilePointer InternetSetStatusCallback InternetGetLastResponseInfoA HttpAddRequestHeadersA InternetQueryDataAvailable InternetCloseHandle InternetCanonicalizeUrlA InternetCrackUrlA InternetSetOptionA InternetOpenUrlA InternetReadFile HttpQueryInfoA InternetOpenA DeleteUrlCacheEntry