eb6a78c60d6adfdbf1cef101a7ec40229efb06de82a83eaabfd57352bf425fd9

Sharing

Copy URL Twitter E-mail

General

Target
eb6a78c60d6adfdbf1cef101a7ec40229efb06de82a83eaabfd57352bf425fd9
Size 172KB
Sample221203-nrbrbsba31
SHA256 eb6a78c60d6adfdbf1cef101a7ec40229efb06de82a83eaabfd57352bf425fd9
MD5 309d812f01f1db9123db63b787b45ec8
SHA1 223c97477f0cf3c7d14e453d31550397413a8df0
SHA512 8f6bf1f8b6c6a7f7d024e197b11a79ab1e8a2b1b419e7a9d9d0119f17d01a1bdbe81d37344e4d61ab87d2042647cd3cd44850adf285d595891cc2431c6724f3f
SSDEEP 3072:pJRTJteUJ1Fs7MaSJTMKuOBS7OncHcUF1RjtEwlHJ1L22blmA9NqxvWWhDGH:ls+KimhHcmkyMxvW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

eb6a78c60d6adfdbf1cef101a7ec40229efb06de82a83eaabfd57352bf425fd9

.dll 172KB

eb6a78c60d6adfdbf1cef101a7ec40229efb06de82a83eaabfd57352bf425fd9

IMPHASH b5494630e9779830b73a0bc562a15ef5
SHA256 eb6a78c60d6adfdbf1cef101a7ec40229efb06de82a83eaabfd57352bf425fd9
MD5 309d812f01f1db9123db63b787b45ec8
SHA1 223c97477f0cf3c7d14e453d31550397413a8df0
SHA512 8f6bf1f8b6c6a7f7d024e197b11a79ab1e8a2b1b419e7a9d9d0119f17d01a1bdbe81d37344e4d61ab87d2042647cd3cd44850adf285d595891cc2431c6724f3f
SSDEEP 3072:pJRTJteUJ1Fs7MaSJTMKuOBS7OncHcUF1RjtEwlHJ1L22blmA9NqxvWWhDGH:ls+KimhHcmkyMxvW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14663

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnterCriticalSection EnumSystemLocalesA ExitProcess ExpandEnvironmentStringsW FindResourceExW FindResourceW FlushFileBuffers FormatMessageA FormatMessageW FreeEnvironmentStringsA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetConsoleCP GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentThreadId GetDateFormatA GetEnvironmentStringsA GetEnvironmentStringsW GetFileAttributesW GetFileSizeEx GetFileType GetGeoInfoW GetLastError GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetProcessTimes GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTickCount GetTimeFormatA GetTimeZoneInformation GetUserDefaultLCID DeleteFileW GetVersionExW HeapAlloc HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize InitializeCriticalSection InitializeCriticalSectionAndSpinCount InterlockedCompareExchange InterlockedDecrement InterlockedExchange InterlockedIncrement IsDebuggerPresent IsValidCodePage IsValidLocale LCMapStringA LCMapStringW LeaveCriticalSection LoadResource LockResource MoveFileW MultiByteToWideChar OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseMutex RemoveDirectoryW RtlUnwind SetEnvironmentVariableA SetEvent SetFilePointer SetHandleCount SetLastError SetStdHandle SetUnhandledExceptionFilter SizeofResource Sleep TerminateProcess UnhandledExceptionFilter VirtualAlloc VirtualFree WaitForSingleObject lstrlenW DeleteCriticalSection CreateMutexW CreateMutexA CreateFileW CreateFileA CreateEventA CreateDirectoryW CompareStringW CompareStringA GetUserGeoID CloseHandle

shell32

ShellExecuteW SHGetFolderLocation

oleaut32

SafeArrayLock SafeArrayUnlock SysAllocString SysAllocStringByteLen SysAllocStringLen SysFreeString SysStringByteLen SysStringLen VariantChangeType VariantClear VariantCopy VariantInit LoadRegTypeLi LoadTypeLi SafeArrayGetVartype SafeArrayGetUBound SafeArrayGetLBound SafeArrayDestroy SafeArrayCreate SafeArrayCopy

ole32

CoCreateInstance

advapi32

LsaNtStatusToWinError RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegOpenCurrentUser RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegCloseKey

shlwapi

PathFindFileNameW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

setupapi

CM_Get_Device_IDW SetupGetStringFieldW SetupGetFieldCount SetupDiSetSelectedDriverW SetupDiSetSelectedDevice SetupDiOpenDevRegKey SetupDiGetDeviceRegistryPropertyW SetupDiGetDeviceInstanceIdW SetupDiGetClassDevsW SetupDiEnumDeviceInfo SetupDiDeleteDeviceInfo CM_Get_DevNode_Status