1c06c47fd8b663d178b44f56ab8d4f47a3a9014b8eb3fe27311ff1f299f4bbca

Sharing

Copy URL Twitter E-mail

General

Target
1c06c47fd8b663d178b44f56ab8d4f47a3a9014b8eb3fe27311ff1f299f4bbca
Size 120KB
Sample221203-tplfmseh77
SHA256 1c06c47fd8b663d178b44f56ab8d4f47a3a9014b8eb3fe27311ff1f299f4bbca
MD5 f2c643981be5a165904215212e8af296
SHA1 b21ffd4e43b614f30d2766934b4c4ff3d320759b
SHA512 5f943796dfe0f884ed8a18f62e7d01f64cb0befe1db1517ef200490fa122bfc3944f5761138f5f32e0a48f03d86555e4dec2626f16b27c9e967436ad7ce594eb
SSDEEP 1536:1MDW2ab+dOE+kVwzXGMum70F6by7SGMeJVfdckqVy7gXng9EBsBtygD:1MK2aaQqKaR7SGMeLC/VBS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1c06c47fd8b663d178b44f56ab8d4f47a3a9014b8eb3fe27311ff1f299f4bbca

.exe 120KB

1c06c47fd8b663d178b44f56ab8d4f47a3a9014b8eb3fe27311ff1f299f4bbca

IMPHASH c621ef563052f32c475160fc86798855
SHA256 1c06c47fd8b663d178b44f56ab8d4f47a3a9014b8eb3fe27311ff1f299f4bbca
MD5 f2c643981be5a165904215212e8af296
SHA1 b21ffd4e43b614f30d2766934b4c4ff3d320759b
SHA512 5f943796dfe0f884ed8a18f62e7d01f64cb0befe1db1517ef200490fa122bfc3944f5761138f5f32e0a48f03d86555e4dec2626f16b27c9e967436ad7ce594eb
SSDEEP 1536:1MDW2ab+dOE+kVwzXGMum70F6by7SGMeJVfdckqVy7gXng9EBsBtygD:1MK2aaQqKaR7SGMeLC/VBS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

57540

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen

user32

MessageBoxA CreateWindowExW UnhookWindowsHookEx TranslateMessage ShowWindow SetWindowsHookExW SetWindowTextW SetWindowLongW SetTimer SetCursor SendMessageW ReleaseDC RegisterWindowMessageW RegisterClassExW PostQuitMessage PostMessageW MessageBoxW LoadIconW LoadCursorW LoadBitmapW KillTimer GetWindowLongW GetSystemMetrics GetMessageW GetDlgItem GetDC GetClientRect FindWindowExW FillRect EndPaint EnableWindow DispatchMessageW DestroyWindow DefWindowProcW CheckDlgButton BeginPaint

kernel32

lstrcmpiA LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetLastError GetCommandLineW FreeLibrary ExitProcess WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleW WriteFile WinExec Sleep SetFilePointer RemoveDirectoryW ReadFile MultiByteToWideChar MoveFileW LoadLibraryW GetWindowsDirectoryW GetVolumeInformationW GetVersionExW GetTempPathW GetTempFileNameW GetSystemDirectoryW GetProcAddress GetFileSize GetCurrentThreadId FreeLibrary FindNextFileW FindFirstFileW FindClose DeleteFileW CreateThread CreateFileW CreateDirectoryW CopyFileW CloseHandle

gdi32

SetTextColor SetBkMode SelectObject GetStockObject GetObjectW CreateFontW CreateCompatibleDC BitBlt

advapi32

RegSetValueExW RegOpenKeyExW RegDeleteKeyW RegCreateKeyExW RegCloseKey

wininet

InternetCloseHandle InternetReadFile InternetSetOptionW HttpQueryInfoW InternetOpenUrlW InternetOpenW

ole32

CoUninitialize CoCreateInstance CoInitialize

shell32

ShellExecuteW SHGetSpecialFolderPathW

comctl32

InitCommonControls

Name

.text

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

11KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

59KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ