72ebe5d76fe31eb584cf70aa1d4103fffe2054fd7e2783aca1cf76d54ab38bf0

Sharing

Copy URL Twitter E-mail

General

Target
72ebe5d76fe31eb584cf70aa1d4103fffe2054fd7e2783aca1cf76d54ab38bf0
Size 432KB
Sample221204-blq8lsdf26
SHA256 72ebe5d76fe31eb584cf70aa1d4103fffe2054fd7e2783aca1cf76d54ab38bf0
MD5 ce881f75058bb8bc2acd853569838350
SHA1 f1b189e2b16d54b7423af52209f95e8cedc73b41
SHA512 e1113f4f4a73654f71ed4f2abfc6815471e44ef3916a203f6a768bdf6a25314c3d8640945fa95fdaeb6dc2db96ef4d75ae5b8cec4454290ec0d6d8725af82c01
SSDEEP 6144:3CnJtKFKgoMvnE1P6/pofRWq+m0zyx3h6l66x4zcKgHh8iyI1kd:3Y6Z/yJInqix32iyI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

72ebe5d76fe31eb584cf70aa1d4103fffe2054fd7e2783aca1cf76d54ab38bf0

.dll 432KB

72ebe5d76fe31eb584cf70aa1d4103fffe2054fd7e2783aca1cf76d54ab38bf0

IMPHASH dd1ef49431954e7994f1511a9ab97358
SHA256 72ebe5d76fe31eb584cf70aa1d4103fffe2054fd7e2783aca1cf76d54ab38bf0
MD5 ce881f75058bb8bc2acd853569838350
SHA1 f1b189e2b16d54b7423af52209f95e8cedc73b41
SHA512 e1113f4f4a73654f71ed4f2abfc6815471e44ef3916a203f6a768bdf6a25314c3d8640945fa95fdaeb6dc2db96ef4d75ae5b8cec4454290ec0d6d8725af82c01
SSDEEP 6144:3CnJtKFKgoMvnE1P6/pofRWq+m0zyx3h6l66x4zcKgHh8iyI1kd:3Y6Z/yJInqix32iyI
MD5 SHA1 SHA512 SSDEEP

Minor OS version

Major OS version

Entry point

74525

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_adjust_fdiv _initterm free _vsnwprintf wcsstr malloc memmove isdigit mbstowcs wcschr swscanf wcstombs

kernel32

Sleep lstrcpynW InterlockedIncrement InterlockedDecrement lstrcmpiW GetCurrentProcess lstrcmpW LocalFree LocalAlloc OpenFile GetWindowsDirectoryW MulDiv GetModuleFileNameW lstrcmpA lstrcatW GetModuleHandleW MultiByteToWideChar GetUserDefaultLCID QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter lstrcpyW GetFileAttributesW ExpandEnvironmentStringsW FindFirstFileW FindClose GetVersionExW lstrlenA SetLastError GlobalFree lstrlenW CreateProcessA GlobalReAlloc GlobalAlloc LoadLibraryW GetProcAddress GetLastError FormatMessageW FreeLibrary CloseHandle

user32

ReleaseDC GetDC SetFocus SetWindowTextW SetForegroundWindow SendDlgItemMessageW GetDlgItemTextW ScreenToClient LoadStringW SetDlgItemInt FillRect GetClientRect GetSysColorBrush DefWindowProcW WinHelpW LoadImageW LoadCursorW DispatchMessageW DialogBoxParamW MessageBoxW CreateDialogParamW GetDesktopWindow MoveWindow SetDlgItemTextW ShowWindow CharPrevW CharNextW IsDlgButtonChecked GetWindowTextW SendMessageW GetDlgItem EnableWindow SetCursor wsprintfW IsWindow BringWindowToTop DestroyWindow EndDialog PeekMessageW FindWindowW UpdateWindow GetWindowRect GetSystemMetrics SetWindowPos GetParent MsgWaitForMultipleObjects GetWindowLongW PostMessageW SetWindowLongW CheckDlgButton RegisterWindowMessageW

gdi32

BitBlt SelectObject StretchBlt GetStockObject SetBkMode DeleteDC GetObjectW CreateCompatibleDC DeleteObject GetDeviceCaps CreateFontIndirectW

tapi32

tapiGetLocationInfoW lineGetCountryW lineInitialize lineNegotiateAPIVersion lineGetTranslateCapsW lineShutdown lineTranslateDialogW

advapi32

IsTextUnicode RegOpenKeyW RegQueryValueExW RegDeleteValueW RegSetValueExW RegCreateKeyW RegOpenKeyExW RegEnumKeyExW RegDeleteKeyW RegCloseKey RegCreateKeyExW

comctl32

CreatePropertySheetPageW DestroyPropertySheetPage PropertySheetW

shell32

ShellExecuteW

comdlg32

GetOpenFileNameW

mpr

WNetGetUserW

ole32

CoInitialize CoCreateInstance CoUninitialize StringFromCLSID CoTaskMemFree

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW