b04746169b406519a768c968b8ed6a02845e825d2f45d5c2128bc0febfe50ba6

Sharing

Copy URL Twitter E-mail

General

Target
b04746169b406519a768c968b8ed6a02845e825d2f45d5c2128bc0febfe50ba6
Size 39KB
Sample221206-j47mbahe29
SHA256 b04746169b406519a768c968b8ed6a02845e825d2f45d5c2128bc0febfe50ba6
MD5 ed9a0114f3e4cfa3a1505c7cec15d636
SHA1 44ab5fb97380f2d1e5bf5b7a5d1a6dc125f505b0
SHA512 5652a876a1d271f2cc05c83138fe70098d07cd949b3f67c40eccf6b1d13b5a2512c67301a2dab9d79a42180ba68615afba107a12dc180aa7a2c6dc19951b49bf
SSDEEP 768:pfH0yOTl4gfX0HlRB+w0dhYuq6p8q2e8vkIqfSYNL3RoeckWudJZe+YiMue5loiV:h0yOTlpfKlRshq6pv8rY5ZBMuK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b04746169b406519a768c968b8ed6a02845e825d2f45d5c2128bc0febfe50ba6

.exe 39KB

b04746169b406519a768c968b8ed6a02845e825d2f45d5c2128bc0febfe50ba6

IMPHASH 2632dc0d8a67c69408bfd8429bd06634
SHA256 b04746169b406519a768c968b8ed6a02845e825d2f45d5c2128bc0febfe50ba6
MD5 ed9a0114f3e4cfa3a1505c7cec15d636
SHA1 44ab5fb97380f2d1e5bf5b7a5d1a6dc125f505b0
SHA512 5652a876a1d271f2cc05c83138fe70098d07cd949b3f67c40eccf6b1d13b5a2512c67301a2dab9d79a42180ba68615afba107a12dc180aa7a2c6dc19951b49bf
SSDEEP 768:pfH0yOTl4gfX0HlRB+w0dhYuq6p8q2e8vkIqfSYNL3RoeckWudJZe+YiMue5loiV:h0yOTlpfKlRshq6pv8rY5ZBMuK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13522

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree GetProcAddress HeapAlloc GetProcessHeap GetLastError ReadFile SetFilePointer GetPrivateProfileStringA WritePrivateProfileStringA CreateDirectoryA GetWindowsDirectoryA SetUnhandledExceptionFilter ReleaseMutex CreateMutexA GetCommandLineA WinExec Sleep CreateThread GetCurrentThreadId GetStartupInfoA SetLastError GetTempPathA GetTickCount FindResourceA LoadResource CreateFileA FindFirstFileA LocalFileTimeToFileTime SetFileTime SizeofResource WriteFile lstrlenA FreeResource MoveFileA DeleteFileA OutputDebugStringA lstrcpyA MultiByteToWideChar WideCharToMultiByte GetCurrentProcess CreateToolhelp32Snapshot Process32First Process32Next CloseHandle ExitProcess CreateProcessA GetThreadContext ReadProcessMemory GetModuleFileNameA lstrcmpiA GetModuleHandleA VirtualAllocEx WriteProcessMemory SetThreadContext ResumeThread TerminateProcess GetSystemDirectoryA lstrcatA GetFileAttributesA

user32

GetMessageA UpdateWindow ShowWindow CreateWindowExA RegisterClassExA TranslateMessage LoadIconA wsprintfA PostThreadMessageA GetInputState PostQuitMessage DispatchMessageA LoadCursorA DefWindowProcA

advapi32

OpenProcessToken GetFileSecurityA InitializeSecurityDescriptor GetSecurityDescriptorDacl GetAclInformation GetLengthSid InitializeAcl GetAce EqualSid AddAce AddAccessAllowedAce SetSecurityDescriptorDacl GetSecurityDescriptorControl SetFileSecurityA RegOpenKeyExA RegSaveKeyA RegCloseKey RegCreateKeyExA RegRestoreKeyA RegQueryValueExA RegSetValueExA GetUserNameA LookupPrivilegeValueA AdjustTokenPrivileges RegCreateKeyA CloseServiceHandle CreateServiceA OpenSCManagerA StartServiceA OpenServiceA RegDeleteKeyA RegDeleteValueA LookupAccountNameA

msvcrt

_strcmpi _controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln memset ??2@YAPAXI@Z memcpy _except_handler3 __CxxFrameHandler strlen ??3@YAXPAX@Z realloc malloc rand strchr strstr ??1type_info@@UAE@XZ _exit _XcptFilter exit

ntdll

ZwUnmapViewOfSection

netapi32

NetApiBufferFree NetUserGetLocalGroups