bba53e2f348c424cbac1043a464807d4c18f76ed599991b0f7c618125830ce26

Sharing

Copy URL Twitter E-mail

General

Target
bba53e2f348c424cbac1043a464807d4c18f76ed599991b0f7c618125830ce26
Size 137KB
Sample221203-g3xplsbf78
SHA256 bba53e2f348c424cbac1043a464807d4c18f76ed599991b0f7c618125830ce26
MD5 3fc1ca0c4e291cd7a49892b522f97010
SHA1 be77d611e246259a8b38db018b031b2418e949c1
SHA512 0885bf12b6d963a6302ef16d594726c512a133dc3bd286579f18b7853df883aaa833ec44dd5527207e7ca2530908037a74528d8ae15b063aa257deefaae3cf7c
SSDEEP 3072:C8wA0TMD5Dqg0yN1nvAANSw8ltWoihGCyMOLySWst+fXxW0ILR:C8w6D4Kotup0LWI+fM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bba53e2f348c424cbac1043a464807d4c18f76ed599991b0f7c618125830ce26

.dll 137KB

bba53e2f348c424cbac1043a464807d4c18f76ed599991b0f7c618125830ce26

IMPHASH 4ed2b4a4b85d4eee99d4f5803e8cbdac
SHA256 bba53e2f348c424cbac1043a464807d4c18f76ed599991b0f7c618125830ce26
MD5 3fc1ca0c4e291cd7a49892b522f97010
SHA1 be77d611e246259a8b38db018b031b2418e949c1
SHA512 0885bf12b6d963a6302ef16d594726c512a133dc3bd286579f18b7853df883aaa833ec44dd5527207e7ca2530908037a74528d8ae15b063aa257deefaae3cf7c
SSDEEP 3072:C8wA0TMD5Dqg0yN1nvAANSw8ltWoihGCyMOLySWst+fXxW0ILR:C8w6D4Kotup0LWI+fM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

115384

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges

user32

GetKeyboardType DestroyWindow LoadStringA MessageBoxA CharNextA UnhookWindowsHookEx TranslateMessage SetWindowsHookExA SetWindowLongA RegisterWindowMessageA PostThreadMessageA PeekMessageA MsgWaitForMultipleObjects MessageBoxA LoadStringA IsWindowVisible GetWindowThreadProcessId GetWindowLongA GetSystemMetrics GetParent GetWindow GetDesktopWindow GetClassNameA DispatchMessageA CallWindowProcA CallNextHookEx CharNextA CharToOemA

kernel32

GetACP Sleep VirtualFree VirtualAlloc GetTickCount QueryPerformanceCounter GetCurrentThreadId InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenA lstrcpynA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess ExitThread CreateThread CompareStringA WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc lstrcmpA WriteFile WaitForSingleObject VirtualQuery VirtualProtect VirtualAlloc UnmapViewOfFile TerminateThread SetFilePointer SetEvent SetEndOfFile ResumeThread ResetEvent ReadFile OutputDebugStringA OpenProcess OpenFileMappingA MoveFileA MapViewOfFile LoadLibraryA LeaveCriticalSection InitializeCriticalSection GetVersionExA GetTickCount GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLocalTime GetLastError GetFullPathNameA GetFileAttributesA GetExitCodeThread GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentProcessId GetCurrentProcess GetCPInfo InterlockedIncrement InterlockedExchange InterlockedDecrement FreeLibraryAndExitThread FreeLibrary FormatMessageA FindFirstFileA FindClose EnumCalendarInfoA EnterCriticalSection DisableThreadLibraryCalls DeleteFileA DeleteCriticalSection CreateProcessA CreateFileMappingA CreateFileA CreateEventA CompareStringA CloseHandle Sleep

Name

.text

Size

107KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

1024B

Virtual Size

748B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

18KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

94B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ