user[.]dat | Triage™

Resubmissions

27/12/2022, 14:30

221227-rt6w2aab9s10

27/12/2022, 14:29

221227-rt3jlsfa4310

27/12/2022, 12:27

221227-pmp9laeh3710

27/12/2022, 12:24

221227-pk183saa9s10

Sharing

Copy URL Twitter E-mail

General

Target
user.dat
Size 2.0MB
Sample221227-rt3jlsfa43
SHA256 c08675ecfcb06a2b57b946051d3a63693e4a1de9a33cc98f0cb8a50205906edf
MD5 37bf163c9a37e27cdbb8c5db31457063
SHA1 6e5a4df996ffefd5ef01ff8a13913ec09ba404da
SHA512 131dfdc3f1e648718887648690f0631bd6d77e137d2562aa47d5abec058dcde93f2c3f12bc82ca487d3d60285c126707eae414738f04e20325c599fab3ae072b
SSDEEP 49152:TDG9pmVnnyKKdmwLxSMKmc2qgI9Mprlcuhz6:/VVnnP8XLQL2q1YSu
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

user.dat

.dll 2.0MB

user.dat

IMPHASH f7ec684b3b9ecfe69ca24d2cf5ad7af3
SHA256 c08675ecfcb06a2b57b946051d3a63693e4a1de9a33cc98f0cb8a50205906edf
MD5 37bf163c9a37e27cdbb8c5db31457063
SHA1 6e5a4df996ffefd5ef01ff8a13913ec09ba404da
SHA512 131dfdc3f1e648718887648690f0631bd6d77e137d2562aa47d5abec058dcde93f2c3f12bc82ca487d3d60285c126707eae414738f04e20325c599fab3ae072b
SSDEEP 49152:TDG9pmVnnyKKdmwLxSMKmc2qgI9Mprlcuhz6:/VVnnP8XLQL2q1YSu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43956

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateThread GetTickCount64 VirtualAlloc FindFirstFileW GetFileAttributesW SetUnhandledExceptionFilter QueryPerformanceCounter QueryPerformanceFrequency LeaveCriticalSection ReleaseSemaphore GetCurrentProcess GetCurrentProcessId GetCurrentThread TlsAlloc TlsGetValue GetSystemInfo GetTickCount VirtualProtect FindResourceExW WaitForSingleObject GetModuleHandleW LoadResource LoadLibraryA LoadLibraryW LocalAlloc LocalFree SystemTimeToFileTime WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers SetStdHandle GetModuleFileNameA GetModuleHandleA HeapReAlloc HeapSize GetStringTypeW IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter GetStartupInfoW GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RaiseException RtlUnwind InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetProcessHeap GetStdHandle GetFileType DecodePointer

user32

MessageBoxW UnregisterClassA LoadCursorA GetDesktopWindow BeginPaint CreateWindowExA RegisterClassA PostQuitMessage DefWindowProcA SendMessageA EndPaint

advapi32

RegCloseKey

shlwapi

PathFindExtensionA