c1ec9e1e5700abc200babd2a0ccd504ccf4feafc4c6c9f523b9fab27229a2474

Sharing

Copy URL Twitter E-mail

General

Target
c1ec9e1e5700abc200babd2a0ccd504ccf4feafc4c6c9f523b9fab27229a2474
Size 212KB
Sample221206-sdrb3sgh37
SHA256 c1ec9e1e5700abc200babd2a0ccd504ccf4feafc4c6c9f523b9fab27229a2474
MD5 3c6460204f2801f808d4eed8d3d1b338
SHA1 0950e033fe3fa26718eb121d8ed2245803391e53
SHA512 9ad824516b4e6a36651e55c5ca98bddd74913af488761ab6d77bfcfca32be1cf8b2143b1923663459e448865483a642cd58b2fcafe4c74615b5ed90eb92a1bfb
SSDEEP 6144:x21GNmfXgeEnsv0jSEP5GSd2JgZAHUAEPf:mGNmfQeE/SeGSdygmlEPf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

c1ec9e1e5700abc200babd2a0ccd504ccf4feafc4c6c9f523b9fab27229a2474

.dll 212KB

c1ec9e1e5700abc200babd2a0ccd504ccf4feafc4c6c9f523b9fab27229a2474

IMPHASH d97324633df84b9c8d2ce10dc4ea726d
SHA256 c1ec9e1e5700abc200babd2a0ccd504ccf4feafc4c6c9f523b9fab27229a2474
MD5 3c6460204f2801f808d4eed8d3d1b338
SHA1 0950e033fe3fa26718eb121d8ed2245803391e53
SHA512 9ad824516b4e6a36651e55c5ca98bddd74913af488761ab6d77bfcfca32be1cf8b2143b1923663459e448865483a642cd58b2fcafe4c74615b5ed90eb92a1bfb
SSDEEP 6144:x21GNmfXgeEnsv0jSEP5GSd2JgZAHUAEPf:mGNmfQeE/SeGSdygmlEPf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

53930

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

StartServiceA SetSecurityDescriptorDacl OpenProcessToken RegOpenKeyA RegCloseKey RegOpenKeyExA RegQueryValueExA RegSetValueExA RegisterServiceCtrlHandlerA SetServiceStatus OpenSCManagerA OpenServiceA DeleteService CloseServiceHandle QueryServiceStatus ControlService CreateServiceA RegCreateKeyA RegEnumKeyA RegCreateKeyExA RegDeleteKeyA LookupPrivilegeValueA AdjustTokenPrivileges InitializeSecurityDescriptor AllocateAndInitializeSid GetLengthSid InitializeAcl AddAccessAllowedAce

user32

CharLowerBuffW

psapi

EnumProcessModules EnumProcesses GetModuleBaseNameW

shell32

SHGetFolderPathA

kernel32

InterlockedCompareExchange SetEnvironmentVariableA CompareStringW CompareStringA SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile GetExitCodeProcess CloseHandle GetVersionExA CreateToolhelp32Snapshot Process32First GetLastError Process32Next OpenProcess GetModuleFileNameA MultiByteToWideChar Sleep CreateThread TerminateThread CreateProcessA SetLastError TerminateProcess OpenMutexA CreateMutexA WaitForSingleObject ReleaseMutex GetCurrentProcess VirtualQueryEx ReadProcessMemory WriteProcessMemory HeapAlloc GetProcessHeap HeapFree GetCurrentProcessId GetTickCount GetCurrentThreadId InterlockedIncrement InterlockedDecrement WideCharToMultiByte InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime GetProcAddress GetModuleHandleA ExitProcess GetCommandLineA RtlUnwind RaiseException GetCPInfo LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW TlsGetValue TlsAlloc TlsSetValue TlsFree GetACP GetOEMCP WriteFile GetStdHandle LoadLibraryA HeapSize GetFileAttributesA HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc SetHandleCount GetFileType GetStartupInfoA GetConsoleCP GetConsoleMode SetFilePointer FlushFileBuffers FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage CreateFileA SetStdHandle GetLocaleInfoW