981E6B7E07D549903C7C91F149B643C9A75AB98E0E0CB[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
981E6B7E07D549903C7C91F149B643C9A75AB98E0E0CB.exe
Size 6.3MB
Sample221206-tagtxaeg2s
SHA256 981e6b7e07d549903c7c91f149b643c9a75ab98e0e0cba8f0845bef2e162ea7c
MD5 bfb6121383e3e301ec4267ecb9cacb56
SHA1 d36b7cd218b3e88a03fa3a9c681e6f6fad3b415d
SHA512 845559ef9f6cbd7c03f39c60a403b0058b1cfd09e8e84581e8f5dd11501708d06139d5a949cfc9bb1d52537e3cde468ceeee8bd0dcb299c8f29b1496d1f542f3
SSDEEP 98304:MjMgl8EOJi4JhgiIVqskETxGaYequQ+vVNYENTGBxX9WVLE8zjNBumjiQcNOyfAV:MYg8EBEZSeaYeqS8UYWtzmmUJAV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

981E6B7E07D549903C7C91F149B643C9A75AB98E0E0CB.exe

.exe 6.3MB

981E6B7E07D549903C7C91F149B643C9A75AB98E0E0CB.exe

IMPHASH c769210c368165fcb9c03d3f832f55eb
SHA256 981e6b7e07d549903c7c91f149b643c9a75ab98e0e0cba8f0845bef2e162ea7c
MD5 bfb6121383e3e301ec4267ecb9cacb56
SHA1 d36b7cd218b3e88a03fa3a9c681e6f6fad3b415d
SHA512 845559ef9f6cbd7c03f39c60a403b0058b1cfd09e8e84581e8f5dd11501708d06139d5a949cfc9bb1d52537e3cde468ceeee8bd0dcb299c8f29b1496d1f542f3
SSDEEP 98304:MjMgl8EOJi4JhgiIVqskETxGaYequQ+vVNYENTGBxX9WVLE8zjNBumjiQcNOyfAV:MYg8EBEZSeaYeqS8UYWtzmmUJAV
MD5 SHA1 SHA512 SSDEEP

windows x86

Digest

c7:23:43:50:af:71:6f:12:d2:bb:03:09:f7:c2:12:12:a9:d2:56:89:e9:44:a0:45:f3:ec:05:0a:a6:0c:f7:67

Digest Algorithm

sha256

PE Digests Matches

Trusted

Minor OS version

Major OS version

Entry point

74191

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

shell32

SHGetSpecialFolderPathW ShellExecuteExW SHGetMalloc SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW

gdi32

CreateFontIndirectW DeleteObject GetDeviceCaps GetObjectW CreateCompatibleDC SelectObject CreateCompatibleBitmap SetStretchBltMode DeleteDC GetCurrentObject StretchBlt

user32

GetWindowRect ScreenToClient CreateWindowExW GetWindowTextW GetMessageW GetParent KillTimer DestroyWindow CharUpperW EndDialog SendMessageW wsprintfW CopyImage ReleaseDC GetWindowDC SetWindowPos GetMenu GetWindowLongW DispatchMessageW GetWindowTextLengthW GetSysColor SetWindowTextW MessageBoxA wsprintfA GetKeyState GetDlgItem GetClientRect GetSystemMetrics SetWindowLongW SetFocus SystemParametersInfoW ShowWindow DrawTextW GetDC ClientToScreen GetWindow DialogBoxIndirectParamW DrawIconEx CallWindowProcW DefWindowProcW IsWindow wvsprintfW LoadImageW LoadIconW MessageBeep EnableWindow EnableMenuItem GetSystemMenu GetClassNameA SetTimer

ole32

CreateStreamOnHGlobal CoCreateInstance CoInitialize

oleaut32

SysAllocString VariantClear OleLoadPicture

kernel32

SetEndOfFile EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects DeleteCriticalSection GetModuleHandleA SetFileTime ReadFile SetFilePointer GetFileSize GetSystemDirectoryW FormatMessageW lstrcpyW LocalFree IsBadReadPtr SuspendThread ResumeThread TerminateThread InitializeCriticalSection ResetEvent SetEvent CreateEventW GetVersionExW GetCommandLineW GetModuleFileNameW SetCurrentDirectoryW GetDriveTypeW CreateFileW CloseHandle SetEnvironmentVariableW GetTempPathW lstrlenW GetSystemTimeAsFileTime CompareFileTime SetThreadLocale FindFirstFileW DeleteFileW FindNextFileW FindClose RemoveDirectoryW ExpandEnvironmentStringsW WideCharToMultiByte VirtualAlloc GlobalMemoryStatusEx lstrcmpW GetEnvironmentVariableW lstrcmpiW lstrlenA GetLocaleInfoW MultiByteToWideChar GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemDefaultLCID lstrcmpiA GlobalAlloc GlobalFree MulDiv FindResourceExA SizeofResource LoadResource LockResource LoadLibraryA GetProcAddress GetModuleHandleW VirtualFree GetStdHandle ExitProcess lstrcatW GetDiskFreeSpaceExW SetFileAttributesW SetLastError Sleep GetExitCodeThread WaitForSingleObject CreateThread GetLastError SystemTimeToFileTime GetLocalTime GetFileAttributesW CreateDirectoryW WriteFile GetStartupInfoA

msvcrt

??2@YAPAXI@Z _purecall memcmp free memcpy _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ _onexit __dllonexit _CxxThrowException _beginthreadex _EH_prolog ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z memset _wcsnicmp strncmp malloc memmove _wtol ??3@YAXPAX@Z