9565c5780faf49f0d542cb81ced83df1bcc08eec6c3aa46322737e8668e36214

Sharing

Copy URL Twitter E-mail

General

Target
9565c5780faf49f0d542cb81ced83df1bcc08eec6c3aa46322737e8668e36214
Size 271KB
Sample221201-bcl8asag45
SHA256 9565c5780faf49f0d542cb81ced83df1bcc08eec6c3aa46322737e8668e36214
MD5 a95aa3282b30c581a4831b18127576d8
SHA1 041b3b699b348f242bc3e25ec37028bdfd6a608f
SHA512 6c89a36dffcba1b619f3106930db7216ff7c135d68b10f026fcb55f7530c1627b2a4728483f0977292d2c1b134fbba7fd01efe41c74a8323929a16efe23c0c78
SSDEEP 3072:4De5IBx7m/Epe5GP/Difd7r+rxHserl83toz8FXu9IqY/AKtexfLjqcsGHG/BjUi:4DPmW3W1yHs9t9F/C2e5XqoHCCxRLy5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9565c5780faf49f0d542cb81ced83df1bcc08eec6c3aa46322737e8668e36214

.exe 271KB

9565c5780faf49f0d542cb81ced83df1bcc08eec6c3aa46322737e8668e36214

IMPHASH 72bbdd00b322e70f59e8a95d25f454c1
SHA256 9565c5780faf49f0d542cb81ced83df1bcc08eec6c3aa46322737e8668e36214
MD5 a95aa3282b30c581a4831b18127576d8
SHA1 041b3b699b348f242bc3e25ec37028bdfd6a608f
SHA512 6c89a36dffcba1b619f3106930db7216ff7c135d68b10f026fcb55f7530c1627b2a4728483f0977292d2c1b134fbba7fd01efe41c74a8323929a16efe23c0c78
SSDEEP 3072:4De5IBx7m/Epe5GP/Difd7r+rxHserl83toz8FXu9IqY/AKtexfLjqcsGHG/BjUi:4DPmW3W1yHs9t9F/C2e5XqoHCCxRLy5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16992

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeEnvironmentStringsA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCurrentThreadId GetEnvironmentStrings GetEnvironmentStringsW GetFileAttributesA GetFileType GetLastError GetLocaleInfoA GetLocaleInfoW GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemInfo GetUserDefaultLCID GetVersionExA HeapAlloc HeapCreate HeapDestroy HeapFree ExitProcess InitializeCriticalSection IsValidCodePage IsValidLocale LCMapStringA LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryW MultiByteToWideChar RtlUnwind SetHandleCount SetLastError TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualProtect VirtualQuery WideCharToMultiByte WriteFile lstrcatA lstrcpyA lstrcpynA lstrlenA CreateFileA EnumSystemLocalesA EnterCriticalSection HeapReAlloc DeleteCriticalSection

user32

LoadIconA GetSystemMetrics ShowCursor LoadCursorA RegisterClassExA ShowWindow UpdateWindow

gdi32

GetStockObject

advapi32

RegOpenKeyW

ole32

CoTaskMemAlloc

Name

.text

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

237KB

Virtual Size

236KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.4444419

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.4444418

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.4444417

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.4444416

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.4444415

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.4444414

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.4444413

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.4444412

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.4444411

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.4444410

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.444449

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.444448

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.444447

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.444446

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.444445

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.444444

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.444443

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.444442

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.441441

Size

512B

Virtual Size

200B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.444441

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.344446

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.344445

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.344444

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.344443

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.344442

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.344441

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.443441

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.442441

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.341441

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ