bb0fc052d10c71f2df7b9240599b751f939a76f73be3a36dab38c8ab77be2a83

Sharing

Copy URL Twitter E-mail

General

Target
bb0fc052d10c71f2df7b9240599b751f939a76f73be3a36dab38c8ab77be2a83
Size 265KB
Sample221205-jg3d3sdc91
SHA256 bb0fc052d10c71f2df7b9240599b751f939a76f73be3a36dab38c8ab77be2a83
MD5 dd5cc63b1a1b334a2e6cf3945e5717b9
SHA1 6dd2b9bbf99b062d2871859c7246f7620d6f23b1
SHA512 485f14c61b28f6cce48b5483dc4286370eb90c3ee646192e4c3734f30007910f6de006456d002928d15c0e77372c9ae29f7cfdf1fcc09059139ce5e3f01ed4bf
SSDEEP 6144:fWywgKQ/dnbdxoXUFuS5fvvUaOWpVshQchEnnbUaDk/ii:fSgLFHvOWpVEhEbU9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bb0fc052d10c71f2df7b9240599b751f939a76f73be3a36dab38c8ab77be2a83

.exe 265KB

bb0fc052d10c71f2df7b9240599b751f939a76f73be3a36dab38c8ab77be2a83

IMPHASH 5921afb5289ab4b8b03dc2f44889e5e1
SHA256 bb0fc052d10c71f2df7b9240599b751f939a76f73be3a36dab38c8ab77be2a83
MD5 dd5cc63b1a1b334a2e6cf3945e5717b9
SHA1 6dd2b9bbf99b062d2871859c7246f7620d6f23b1
SHA512 485f14c61b28f6cce48b5483dc4286370eb90c3ee646192e4c3734f30007910f6de006456d002928d15c0e77372c9ae29f7cfdf1fcc09059139ce5e3f01ed4bf
SSDEEP 6144:fWywgKQ/dnbdxoXUFuS5fvvUaOWpVshQchEnnbUaDk/ii:fSgLFHvOWpVEhEbU9
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

25632

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

InternetAttemptConnect HttpSendRequestW InternetReadFile InternetQueryOptionW InternetSetOptionW InternetAutodial InternetCloseHandle HttpQueryInfoW InternetOpenW InternetOpenUrlW

kernel32

LocalAlloc GetCurrentProcess GetCurrentThread GetFileAttributesW GetDateFormatW GetTimeFormatW GetStartupInfoW LoadLibraryA ExpandEnvironmentStringsA LocalFree OpenMutexW DosDateTimeToFileTime lstrcmpiW CreateDirectoryW lstrlenW GetProcessHeap GetModuleHandleW CreateMutexW SetUnhandledExceptionFilter GetTickCount GetCurrentThreadId IsDebuggerPresent FindResourceW LoadResource WaitForSingleObject GetCurrentProcessId GetSystemTime GetModuleFileNameW GetExitCodeProcess QueryPerformanceCounter GetLastError CreateEventW LoadLibraryW Sleep lstrlenA GetTempPathW FreeLibrary SetEvent GetLocaleInfoW GetVersionExW MultiByteToWideChar GetLocalTime GetVersion GetProcAddress

user32

SetTimer LoadIconW GetForegroundWindow GetFocus IsWindow CopyRect SetCapture GetActiveWindow MessageBoxW GetCursorPos SetWindowLongW SetCursor LoadCursorW GetSystemMetrics SetForegroundWindow PostMessageW FindWindowW SendMessageW EnableWindow InvalidateRect GetDesktopWindow LoadImageW OffsetRect DestroyIcon IsChild MessageBeep PostMessageA PeekMessageA GetKeyboardLayout GetCapture RegisterWindowMessageA AdjustWindowRect GetKeyboardType ActivateKeyboardLayout EndMenu GetClassInfoExW SetDlgItemInt CreateWindowExA CreateDialogParamW CharPrevA CharPrevW CreateAcceleratorTableW SetWindowPos GetMenuStringA EmptyClipboard WinHelpW GetWindowRgn RegisterWindowMessageW RegisterClassExA MonitorFromPoint EnumClipboardFormats LoadIconA GetTopWindow CreateDialogParamA DestroyCursor MonitorFromWindow GetDlgItemInt RemoveMenu MessageBoxIndirectW ShowCaret SetActiveWindow InsertMenuItemW CreatePopupMenu InsertMenuA GetMenu GetScrollPos GetMenuItemID SendDlgItemMessageW CharNextA PeekMessageW EndDialog UpdateLayeredWindow

gdi32

CreateFontIndirectW CreatePen CreateCompatibleDC CreateSolidBrush GetStockObject CreatePalette StretchDIBits DeleteObject GetTextExtentPointA CreateMetaFileW CreateICA SetEnhMetaFileBits GdiGetBatchLimit GetRasterizerCaps SetMetaFileBitsEx CreatePolyPolygonRgn CreateBitmapIndirect CreateColorSpaceW CreateEllipticRgn CreateFontA

comdlg32

GetOpenFileNameW

advapi32

ImpersonateSelf OpenThreadToken OpenProcessToken AllocateAndInitializeSid InitializeSecurityDescriptor GetLengthSid InitializeAcl AddAccessAllowedAce SetSecurityDescriptorDacl SetSecurityDescriptorGroup FileEncryptionStatusW FreeSid SetSecurityDescriptorOwner IsValidSecurityDescriptor RegOpenKeyExA RegQueryValueExA RegDeleteValueW RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey AccessCheck RevertToSelf DecryptFileW

oleaut32

SysFreeString

shell32

ShellExecuteW

netapi32

NetGetJoinableOUs

rasman

RasSetEapUserInfo

ntprint

PSetupCreateMonitorInfo PSetupDriverInfoFromName PSetupInstallMonitor

Name

.edata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

13KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.FMVaU

Size

104KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.dWR

Size

114KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ