aed3bd605b4ac71088f72ff04cc998707654dacfc4ab5002fe127372e143a30a

Sharing

Copy URL Twitter E-mail

General

Target
aed3bd605b4ac71088f72ff04cc998707654dacfc4ab5002fe127372e143a30a
Size 32KB
Sample221204-b93asaff47
SHA256 aed3bd605b4ac71088f72ff04cc998707654dacfc4ab5002fe127372e143a30a
MD5 33b334a8970c81622d165b857b842090
SHA1 ddadb2fecbd5112d4eafd0eaa6bd1b199280f840
SHA512 a8b47ef783a11bb974e0547d28b6395aad9cd829118d7c0a504f8caca5bb47dc81ad0cdaa46229afaabb082de51c01600936b9443475350cd718021f67698029
SSDEEP 768:oIh6p/HSZlfvKppbJ17vyfrxOVOGKLRqMjGf:96pNppj7afryERqMjGf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

aed3bd605b4ac71088f72ff04cc998707654dacfc4ab5002fe127372e143a30a

.dll 32KB

aed3bd605b4ac71088f72ff04cc998707654dacfc4ab5002fe127372e143a30a

IMPHASH b58f7d363109a5ce97294e40b01efa9f
SHA256 aed3bd605b4ac71088f72ff04cc998707654dacfc4ab5002fe127372e143a30a
MD5 33b334a8970c81622d165b857b842090
SHA1 ddadb2fecbd5112d4eafd0eaa6bd1b199280f840
SHA512 a8b47ef783a11bb974e0547d28b6395aad9cd829118d7c0a504f8caca5bb47dc81ad0cdaa46229afaabb082de51c01600936b9443475350cd718021f67698029
SSDEEP 768:oIh6p/HSZlfvKppbJ17vyfrxOVOGKLRqMjGf:96pNppj7afryERqMjGf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24312

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject ReadFile GetFileSize SetFilePointer GetLastError CreateEventA GetModuleFileNameA GetTempPathA GetWindowsDirectoryA GetSystemDirectoryA SetFileAttributesA CreateMutexA MultiByteToWideChar DeleteFileA GlobalLock CreateFileA WriteFile GlobalUnlock GlobalFree LoadLibraryA GetProcAddress GlobalAlloc VirtualProtect GetCommandLineA ExitProcess Sleep IsBadReadPtr CreateThread CloseHandle

user32

GetParent GetWindowThreadProcessId EnumWindows wsprintfA GetWindowTextA ReleaseDC GetWindowRect GetDC GetDesktopWindow GetClientRect CallWindowProcA GetClassNameA SetWindowLongA RegisterShellHookWindow RegisterWindowMessageA

gdi32

CreateDCA GetDeviceCaps DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetDIBits RealizePalette SelectPalette GetStockObject GetObjectA DeleteDC

gdiplus

GdipCloneImage GdipAlloc GdipFree GdipGetImageEncodersSize GdipGetImageEncoders GdiplusStartup GdipDisposeImage GdiplusShutdown GdipLoadImageFromFile GdipSaveImageToFile

msvcp60

??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ

ws2_32

inet_ntoa send recv socket inet_addr htons connect closesocket gethostbyname WSACleanup WSAStartup

wininet

InternetOpenUrlA InternetCloseHandle InternetReadFile InternetOpenA

msvcrt

_access strrchr strcat memset strchr strncpy __dllonexit _onexit _initterm _adjust_fdiv _getpid _stricmp _strlwr _strrev free strstr abs malloc wcscmp ??2@YAPAXI@Z memcpy __CxxFrameHandler strcmp atoi sprintf strlen strcpy

netapi32

Netbios