fea4993a27ef7eb3aac229053bd5f429790144c3684e2bdf128558da1faf1081

Sharing

Copy URL Twitter E-mail

General

Target
fea4993a27ef7eb3aac229053bd5f429790144c3684e2bdf128558da1faf1081
Size 32KB
Sample221203-mrzbysce95
SHA256 fea4993a27ef7eb3aac229053bd5f429790144c3684e2bdf128558da1faf1081
MD5 674344fe9c0654af92e87a27f779931b
SHA1 2b97fba826465fab9225caee4515cf8f2e784b63
SHA512 68b275675e8dbc01e1ccf4aa4e73402b81dea3adef877e60868c56ca2824775ade71ca1ee5502a2edf3ecb807440fded6bca91d6a2f8f18927953de0a93978ac
SSDEEP 768:KN/CMPCo5t+dOpk7Vz7LPT1IShVD8R96Cs4:KN/CMPCA4Oe57LrXHARF/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

fea4993a27ef7eb3aac229053bd5f429790144c3684e2bdf128558da1faf1081

.dll 32KB

fea4993a27ef7eb3aac229053bd5f429790144c3684e2bdf128558da1faf1081

IMPHASH 011e0c6b99c34143d8703f7a06cbd3ec
SHA256 fea4993a27ef7eb3aac229053bd5f429790144c3684e2bdf128558da1faf1081
MD5 674344fe9c0654af92e87a27f779931b
SHA1 2b97fba826465fab9225caee4515cf8f2e784b63
SHA512 68b275675e8dbc01e1ccf4aa4e73402b81dea3adef877e60868c56ca2824775ade71ca1ee5502a2edf3ecb807440fded6bca91d6a2f8f18927953de0a93978ac
SSDEEP 768:KN/CMPCo5t+dOpk7Vz7LPT1IShVD8R96Cs4:KN/CMPCA4Oe57LrXHARF/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23864

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MultiByteToWideChar CreateThread WaitForSingleObject ReadFile GetFileSize SetFilePointer GetLastError CreateEventA GetModuleFileNameA GetTempPathA GlobalLock SetFileAttributesA CreateFileA WriteFile GlobalUnlock GlobalFree CloseHandle LoadLibraryA GetProcAddress GlobalAlloc VirtualProtect GetModuleHandleA Sleep ExitProcess GetCommandLineA GetPrivateProfileStringA GetSystemDirectoryA DeleteFileA GetWindowsDirectoryA WritePrivateProfileStringA

user32

SetWindowLongA RegisterShellHookWindow RegisterWindowMessageA GetClassNameA GetClientRect GetDesktopWindow GetDC GetWindowRect wsprintfA GetWindowTextA GetParent GetWindowThreadProcessId ReleaseDC CallWindowProcA

gdi32

CreateDCA DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetDIBits RealizePalette SelectPalette GetStockObject GetObjectA DeleteDC GetDeviceCaps

gdiplus

GdiplusShutdown GdipDisposeImage GdiplusStartup GdipGetImageEncoders GdipGetImageEncodersSize GdipFree GdipAlloc GdipCloneImage GdipSaveImageToFile GdipLoadImageFromFile

msvcp60

??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ

ws2_32

connect htons gethostbyname socket recv send inet_ntoa WSAStartup WSACleanup inet_addr closesocket

wininet

InternetReadFile InternetOpenUrlA InternetOpenA InternetCloseHandle

msvcrt

strrchr _access strcat memset strchr strncpy abs free __dllonexit _onexit _initterm _adjust_fdiv _getpid _stricmp _strlwr _strrev malloc wcscmp ??2@YAPAXI@Z memcpy __CxxFrameHandler strstr strcmp atoi strcpy strlen sprintf

netapi32

Netbios