daf3fdc87831e6c0f4aa59c08efe241188cf7dfe92c2fa889b299f93e88531b1

Sharing

Copy URL Twitter E-mail

General

Target
daf3fdc87831e6c0f4aa59c08efe241188cf7dfe92c2fa889b299f93e88531b1
Size 52KB
Sample221201-vd5ktacf3v
SHA256 daf3fdc87831e6c0f4aa59c08efe241188cf7dfe92c2fa889b299f93e88531b1
MD5 8aa3eace1329ef399bb20822c1c179ef
SHA1 0e77bfe9967e094d990b23e0f91ef3e516e95eae
SHA512 6f923864e875c32de52330c1f69aa1b6979234f2a5561248325726a0fd912bdaddf5549acbc71519af3fd314e68ce97bc5a120726a4d47e569442155010eab48
SSDEEP 768:txyE7l5DqKG8pNRvAILgvZnhydzQaOE40VwM0KzzdkFXSvt9V+99bplgyMYy7fim:tMgDxjpXAISH8Qy16BA19u9bjaRmdL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

daf3fdc87831e6c0f4aa59c08efe241188cf7dfe92c2fa889b299f93e88531b1

.dll 52KB

daf3fdc87831e6c0f4aa59c08efe241188cf7dfe92c2fa889b299f93e88531b1

IMPHASH a605802457c9da361b307740ead8d397
SHA256 daf3fdc87831e6c0f4aa59c08efe241188cf7dfe92c2fa889b299f93e88531b1
MD5 8aa3eace1329ef399bb20822c1c179ef
SHA1 0e77bfe9967e094d990b23e0f91ef3e516e95eae
SHA512 6f923864e875c32de52330c1f69aa1b6979234f2a5561248325726a0fd912bdaddf5549acbc71519af3fd314e68ce97bc5a120726a4d47e569442155010eab48
SSDEEP 768:txyE7l5DqKG8pNRvAILgvZnhydzQaOE40VwM0KzzdkFXSvt9V+99bplgyMYy7fim:tMgDxjpXAISH8Qy16BA19u9bjaRmdL
MD5 SHA1 SHA512 SSDEEP

Minor OS version

Major OS version

Entry point

33009

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection InterlockedIncrement EnterCriticalSection InterlockedDecrement HeapDestroy GetShortPathNameA GetModuleHandleA LocalFree CreateThread LoadLibraryA Process32Next Process32First GetExitCodeProcess WaitForSingleObject MoveFileA RemoveDirectoryA CreateDirectoryA Sleep ExitProcess GetCurrentProcessId FreeLibrary GetSystemDirectoryA CreateProcessA CloseHandle FindFirstFileA GetPrivateProfileStringA SetFileAttributesA DeleteFileA FindNextFileA GetModuleFileNameA lstrlenA MultiByteToWideChar WritePrivateProfileStringA WideCharToMultiByte lstrlenW GetCommandLineW

advapi32

RegDeleteKeyA RegOpenKeyExA RegQueryInfoKeyA RegEnumKeyExA BuildExplicitAccessWithNameA SetEntriesInAclA GetNamedSecurityInfoA SetNamedSecurityInfoA RegCreateKeyExA RegSetValueExA RegCloseKey RegQueryValueExA

shell32

SHGetSpecialFolderPathA CommandLineToArgvW

ole32

CoMarshalInterThreadInterfaceInStream CoUninitialize CoGetInterfaceAndReleaseStream CoInitialize CoCreateInstance

oleaut32

SysStringLen LoadRegTypeLi SysAllocString VariantClear SysFreeString

msvcrt

_purecall _strupr _strlwr _adjust_fdiv malloc _initterm free strncmp strncpy _access fopen fseek ftell fread fclose strcpy strlen ??3@YAXPAX@Z sprintf strstr memcmp memcpy memset strrchr strcat strcmp _stricmp ??2@YAPAXI@Z atoi strchr wcsstr _wcslwr

shlwapi

SHSetValueA SHDeleteValueA SHDeleteKeyA