ca7848cd0687c885205b604048f5c4dac65033672b6fe9e565ad063193ee9654

Sharing

Copy URL Twitter E-mail

General

Target
ca7848cd0687c885205b604048f5c4dac65033672b6fe9e565ad063193ee9654
Size 204KB
Sample221205-gltavsbe36
SHA256 ca7848cd0687c885205b604048f5c4dac65033672b6fe9e565ad063193ee9654
MD5 dca621955f1055cc89c6756b12f00990
SHA1 7a05c318d58c5d33dba8a68347b7e78bf695cde9
SHA512 ea944354c9efb7e3651a0aabc204d5dd088095b32ead0e5cd9f1736b834b591596254c354a5248267d47e0c4c6f3e2c47c0155d8c9f046cd985168479bdc531a
SSDEEP 3072:4L4VDxk7xWamNdyDIRzHJc0nJ2VbWMk7V7wBkSqcmRlvmI0qHhcO5VHteGHzkswW:odJv0Jl7W84swYCa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ca7848cd0687c885205b604048f5c4dac65033672b6fe9e565ad063193ee9654

.dll 204KB

ca7848cd0687c885205b604048f5c4dac65033672b6fe9e565ad063193ee9654

IMPHASH bb604ea18c14c188312cfff7907e19e1
SHA256 ca7848cd0687c885205b604048f5c4dac65033672b6fe9e565ad063193ee9654
MD5 dca621955f1055cc89c6756b12f00990
SHA1 7a05c318d58c5d33dba8a68347b7e78bf695cde9
SHA512 ea944354c9efb7e3651a0aabc204d5dd088095b32ead0e5cd9f1736b834b591596254c354a5248267d47e0c4c6f3e2c47c0155d8c9f046cd985168479bdc531a
SSDEEP 3072:4L4VDxk7xWamNdyDIRzHJc0nJ2VbWMk7V7wBkSqcmRlvmI0qHhcO5VHteGHzkswW:odJv0Jl7W84swYCa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

77738

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

htonl ntohl inet_addr

rpcrt4

UuidFromStringW

kernel32

GetProcAddress LoadLibraryW InitializeCriticalSection InterlockedIncrement MultiByteToWideChar WideCharToMultiByte SizeofResource LockResource LoadResource FindResourceW FindResourceExW CloseHandle GetLastError GetCurrentProcess Sleep lstrlenW lstrlenA GetTickCount SetLastError CreateMutexW GetNativeSystemInfo GetVersionExW CreateThread GetModuleFileNameW GetModuleHandleW DuplicateHandle CreatePipe GetEnvironmentStringsW WriteFile ReadFile InterlockedCompareExchange GetConsoleOutputCP WriteConsoleA InterlockedDecrement EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WriteConsoleW CreateFileA FlushFileBuffers WaitForSingleObject SetStdHandle GetStringTypeW GetStringTypeA LoadLibraryA VirtualAlloc GetConsoleMode GetConsoleCP SetFilePointer InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale GetVersionExA RaiseException HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCurrentThreadId GetCommandLineA GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree ExitProcess GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime

user32

LoadStringW UnregisterClassA

advapi32

RegCloseKey RegOpenKeyExW EnumServicesStatusW RegQueryValueExW

ole32

CoInitializeEx CoUninitialize CLSIDFromString CoCreateInstance

oleaut32

VariantInit VariantCopy VariantClear SysStringLen SysAllocString VariantChangeType SysFreeString SysAllocStringByteLen