b469bf6f3cffc6ebc1448744adf298c97b2d970b23c220943a3e9327202166ab

Sharing

Copy URL Twitter E-mail

General

Target
b469bf6f3cffc6ebc1448744adf298c97b2d970b23c220943a3e9327202166ab
Size 429KB
Sample221206-1pz3csfh33
SHA256 b469bf6f3cffc6ebc1448744adf298c97b2d970b23c220943a3e9327202166ab
MD5 e7e88c89b74034e8164640db5bd406c7
SHA1 b1464e8ffe65265f60bce1119c58834448bc91cd
SHA512 7157c65fee6867c57863e8f6447374d284d2d75d8211b29fe23282075f09dc6c59ce763d46b515fb43e08e845df36346799fae9dac4570f565bef92d6bb588aa
SSDEEP 1536:cHb2FTOaRIrHRgl7D7AFysbP0DOIqxLcakr/6W4j752aR1p/WVHJq:c72Bmxu/A4sD0DOb4aM4Bhh2HY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b469bf6f3cffc6ebc1448744adf298c97b2d970b23c220943a3e9327202166ab

.exe 429KB

b469bf6f3cffc6ebc1448744adf298c97b2d970b23c220943a3e9327202166ab

IMPHASH 14fa971627c9a89a7158655309685ac2
SHA256 b469bf6f3cffc6ebc1448744adf298c97b2d970b23c220943a3e9327202166ab
MD5 e7e88c89b74034e8164640db5bd406c7
SHA1 b1464e8ffe65265f60bce1119c58834448bc91cd
SHA512 7157c65fee6867c57863e8f6447374d284d2d75d8211b29fe23282075f09dc6c59ce763d46b515fb43e08e845df36346799fae9dac4570f565bef92d6bb588aa
SSDEEP 1536:cHb2FTOaRIrHRgl7D7AFysbP0DOIqxLcakr/6W4j752aR1p/WVHJq:c72Bmxu/A4sD0DOb4aM4Bhh2HY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

5376

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeConsole GetProcAddress CloseHandle GetFullPathNameA OpenProcess GetVersion GetVolumePathNameW GlobalMemoryStatusEx ExitProcess LoadLibraryExW OpenMutexA GetLocaleInfoA OpenEventA GetPrivateProfileStringW GetDiskFreeSpaceExW CreateToolhelp32Snapshot FindNextVolumeW GetUserDefaultUILanguage WriteProcessMemory GetCommandLineW GlobalGetAtomNameA CreateFiber GetCurrentProcess GetModuleHandleA CreateFileA GetPrivateProfileSectionNamesW Process32First DeleteCriticalSection GlobalDeleteAtom ReadProcessMemory FlushFileBuffers LoadModule GetModuleFileNameA GetProcAddress FindNextFileW Process32Next LoadLibraryA GetEnvironmentStringsW CopyFileW GetFileTime HeapReAlloc

user32

DdeConnect TranslateMessage CallWindowProcA CharUpperW GetKeyboardLayoutList AppendMenuA GetMessageA DispatchMessageA GetMenuState DefWindowProcA EndDeferWindowPos CreateWindowExA ClientToScreen DdeFreeStringHandle CallMsgFilterW CharToOemA DdeQueryConvInfo DrawFrameControl CreateIconIndirect FillRect GetFocus CreateDialogIndirectParamW DdeCreateStringHandleW GetDlgItemTextA DrawMenuBar GetWindowRgn CallNextHookEx GetGUIThreadInfo GetCaretPos ShowWindow GetParent GetMessagePos UpdateWindow CreateCaret GetDCEx RegisterClassExA BeginPaint ChildWindowFromPoint CreateAcceleratorTableA DeleteMenu

advapi32

CryptGetHashParam RegNotifyChangeKeyValue GetSecurityDescriptorGroup SetSecurityDescriptorOwner SetSecurityDescriptorDacl RegEnumKeyA CryptGetProvParam GetSecurityDescriptorLength SetSecurityInfo QueryServiceConfigA

shell32

ShellExecuteEx StrCmpNIA DragQueryPoint StrRChrA RealShellExecuteExW SHAppBarMessage SHCreateDirectoryExW DragFinish SHGetFolderLocation InternalExtractIconListW ExtractAssociatedIconW SHGetDesktopFolder SHExtractIconsW DragQueryFileW RealShellExecuteA SHGetPathFromIDListW SHGetSpecialFolderLocation DragAcceptFiles StrRStrA OpenAs_RunDLLA

gdi32

SetROP2 GetObjectType GetObjectW CreateHatchBrush ExtCreateRegion GetCharABCWidthsW MoveToEx FlattenPath PolyBezierTo

Name

.text

Size

120KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

212KB

Virtual Size

212KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE