a430ece3ebc41e11c1c13e312f2ddc5dbf3b2eab07743a65fb40a8519261bdca

Sharing

Copy URL Twitter E-mail

General

Target
a430ece3ebc41e11c1c13e312f2ddc5dbf3b2eab07743a65fb40a8519261bdca
Size 444KB
Sample221204-bgcvesdb98
SHA256 a430ece3ebc41e11c1c13e312f2ddc5dbf3b2eab07743a65fb40a8519261bdca
MD5 16a4cfaabf3485a144995edab40cb660
SHA1 88e447ec4eb462a9c110ab802c322dfc14d6d880
SHA512 eb4e78e5e63db41be74ab0c601ee356bb13a4569ecbeaa50b862119acc0badf08672accbe6c424273320363924dba7ccd8c2498b37da3676498ddc75da8d3737
SSDEEP 12288:vWc0GkgHdfZmtP9a3bxtdpHS1XOxUeNZu1AVTGkz4oye/1z2gToNQ3yjdEzBuj:vHf9H3mtP9a3bDdpHMexUeNZu1aTGkz0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a430ece3ebc41e11c1c13e312f2ddc5dbf3b2eab07743a65fb40a8519261bdca

.dll 444KB

a430ece3ebc41e11c1c13e312f2ddc5dbf3b2eab07743a65fb40a8519261bdca

IMPHASH ae3d22662202f10c0b2eae6344bb5540
SHA256 a430ece3ebc41e11c1c13e312f2ddc5dbf3b2eab07743a65fb40a8519261bdca
MD5 16a4cfaabf3485a144995edab40cb660
SHA1 88e447ec4eb462a9c110ab802c322dfc14d6d880
SHA512 eb4e78e5e63db41be74ab0c601ee356bb13a4569ecbeaa50b862119acc0badf08672accbe6c424273320363924dba7ccd8c2498b37da3676498ddc75da8d3737
SSDEEP 12288:vWc0GkgHdfZmtP9a3bxtdpHS1XOxUeNZu1AVTGkz4oye/1z2gToNQ3yjdEzBuj:vHf9H3mtP9a3bDdpHMexUeNZu1aTGkz0
MD5 SHA1 SHA512 SSDEEP

Minor OS version

Major OS version

Entry point

9804

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

odbc32

ord61 ord5 ord19 ord1 ord2 ord15 ord9 ord14 ord41 ord23 ord40 ord47 ord42 ord44 ord49 ord50 ord54 ord43 ord59 ord6 ord46 ord18 ord10 ord45 ord17 ord72 ord68 ord20 ord12 ord11 ord51 ord4 ord48 ord3 ord58 ord63 ord16 ord13 ord66

kernel32

LCMapStringA GetOEMCP TerminateProcess GetModuleFileNameA lstrcatA FlushFileBuffers SetStdHandle IsBadCodePtr SetFilePointer SetUnhandledExceptionFilter VirtualAlloc WriteFile HeapCreate HeapDestroy VirtualFree GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetStartupInfoA GetFileType FreeEnvironmentStringsA SetHandleCount GetStringTypeW GetStdHandle RtlUnwind RaiseException GetStringTypeA SetLastError TlsFree LocalFree GetCurrentThreadId lstrlenA GetExitCodeThread ResumeThread GetTickCount CreateThread WaitForSingleObject SuspendThread WideCharToMultiByte lstrcpyA GetLastError lstrcmpiA lstrcmpA HeapReAlloc HeapFree HeapAlloc GetProcessHeap lstrcpynA lstrlenW GetUserDefaultLCID IsDBCSLeadByte GetProcAddress LoadLibraryA FreeLibrary InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetSystemDefaultLCID GlobalFree GlobalUnlock GlobalLock GlobalAlloc GetCurrentProcessId TlsGetValue GetLocaleInfoA InterlockedIncrement InterlockedDecrement LocalAlloc LocalReAlloc MultiByteToWideChar CloseHandle DisableThreadLibraryCalls CreateMutexA Sleep ReleaseMutex IsBadReadPtr GetCurrentThread GetCommandLineA GetModuleHandleA GetVersion ExitProcess TlsSetValue TlsAlloc LCMapStringW GetCPInfo GetACP GetCurrentProcess HeapSize

user32

MsgWaitForMultipleObjects TranslateMessage PeekMessageA DispatchMessageA GetWindowThreadProcessId GetWindow IsWindowVisible CharUpperA PostMessageA GetWindowLongA DestroyWindow GetActiveWindow CreateDialogParamA SetWindowLongA LoadStringA GetDesktopWindow SetTimer wsprintfA KillTimer CharNextA

ole32

CLSIDFromString StringFromGUID2 CoTaskMemAlloc CoTaskMemFree

advapi32

RegDeleteKeyA RegCreateKeyA RegOpenKeyA RegCloseKey RegSetValueExA RegQueryValueA RegSetValueA

oleaut32

SafeArrayGetLBound RegisterTypeLi CreateErrorInfo UnRegisterTypeLi VariantChangeTypeEx SafeArrayCopy SetErrorInfo SysAllocStringLen SafeArrayRedim SysStringLen SafeArrayCreate SafeArrayAccessData SafeArrayDestroy VariantCopy VariantChangeType SafeArrayUnaccessData VariantInit SafeArrayGetUBound LoadTypeLi SysAllocStringByteLen VariantClear SysReAllocString SysFreeString SysAllocString

Name

.text

Size

196KB

Virtual Size

193KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

20KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

24KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

128KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ