88ac5479e768d67541e50aca0eb3d05418afbd68d21a41d9426b92880b4b2bae

Sharing

Copy URL Twitter E-mail

General

Target
88ac5479e768d67541e50aca0eb3d05418afbd68d21a41d9426b92880b4b2bae
Size 1.1MB
Sample221201-cdh3pshc5w
SHA256 88ac5479e768d67541e50aca0eb3d05418afbd68d21a41d9426b92880b4b2bae
MD5 189e57e14c85efd9bb729a14513fa9d0
SHA1 457243d80844dab7bc06ffd6cf32933a00f7b133
SHA512 f9efb4376c881eac26b36d8d70a25d42df179a176c5637961b40f0fbfa83867028faaf197122fa87cc148530b07e77079d9cfd5f441b7665fd8daf8f2e31b2ac
SSDEEP 12288:y+TQVTFeun/GJuWnkoyUJ1waoNC8wOQBvwI+GIH5M7JXMD7JXO:y9eun/GJuWnRzTow8wOAwFGM6QO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

88ac5479e768d67541e50aca0eb3d05418afbd68d21a41d9426b92880b4b2bae

.exe 1.1MB

88ac5479e768d67541e50aca0eb3d05418afbd68d21a41d9426b92880b4b2bae

IMPHASH 6a4543c6d12753335c8cd2fa23a1a208
SHA256 88ac5479e768d67541e50aca0eb3d05418afbd68d21a41d9426b92880b4b2bae
MD5 189e57e14c85efd9bb729a14513fa9d0
SHA1 457243d80844dab7bc06ffd6cf32933a00f7b133
SHA512 f9efb4376c881eac26b36d8d70a25d42df179a176c5637961b40f0fbfa83867028faaf197122fa87cc148530b07e77079d9cfd5f441b7665fd8daf8f2e31b2ac
SSDEEP 12288:y+TQVTFeun/GJuWnkoyUJ1waoNC8wOQBvwI+GIH5M7JXMD7JXO:y9eun/GJuWnRzTow8wOAwFGM6QO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

119110

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

InternetReadFile InternetOpenUrlW HttpQueryInfoW InternetCloseHandle InternetOpenW InternetSetOptionW

kernel32

DeleteFileW GetModuleFileNameA CreateFileA GetFileSize SetFilePointer ReadFile SetLastError GetCurrentThread FreeLibrary GetModuleFileNameW LoadLibraryA GetProcAddress GetModuleHandleA VirtualProtect GetCurrentProcess CreateFileW WriteFile GetPrivateProfileStringW WritePrivateProfileStringW MultiByteToWideChar WideCharToMultiByte lstrlenW lstrlenA FormatMessageW LoadResource LockResource SizeofResource FindResourceW FindResourceExW GetACP GetTickCount Sleep CreateDirectoryW GetFileAttributesW SetEndOfFile WaitForSingleObject GetModuleHandleW GetLocaleInfoW SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA GetLocaleInfoA GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA IsValidCodePage GetOEMCP GetFileType GetStdHandle SetHandleCount FlushFileBuffers GetConsoleMode GetConsoleCP OutputDebugStringW CreateProcessW GetTempFileNameW GetTempPathW CloseHandle OpenMutexW GetLastError CreateMutexW VirtualQuery ResumeThread FlushInstructionCache SetThreadContext GetThreadContext SuspendThread GetThreadLocale HeapReAlloc VirtualAlloc VirtualFree HeapCreate HeapDestroy InterlockedIncrement InterlockedDecrement InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InterlockedCompareExchange TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCommandLineA GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA RaiseException RtlUnwind LCMapStringA LCMapStringW GetCPInfo ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize

user32

UnregisterClassA CreateWindowExW RegisterClassW LoadCursorW LoadIconW DefWindowProcW PostQuitMessage SetForegroundWindow SetWindowPos IsZoomed AttachThreadInput GetWindowThreadProcessId ShowWindow IsWindowVisible GetForegroundWindow IsWindow MessageBoxW

gdi32

GetStockObject

advapi32

RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCloseKey RegEnumValueW RegQueryValueExW RegEnumKeyExW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken

shell32

SHGetFolderPathW

shlwapi

PathFileExistsW

Name

.text

Size

219KB

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gms

Size

512B

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.APP

Size

832KB

Virtual Size

992KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

95KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ