fb651d07bc1ee0b1676123399c358c9f3a276448b4938b46cfd2b9b701956913

Resubmissions

12/01/2023, 04:40

230112-fap9dsfb925

12/01/2023, 04:27

230112-e25ygsfb755

12/01/2023, 04:12

230112-es18yaba3x5

Sharing

Copy URL Twitter E-mail

General

Target
fb651d07bc1ee0b1676123399c358c9f3a276448b4938b46cfd2b9b701956913
Size 404KB
Sample230112-es18yaba3x
SHA256 fb651d07bc1ee0b1676123399c358c9f3a276448b4938b46cfd2b9b701956913
MD5 50041dfa1df5ade46be281c9ab56180c
SHA1 0ef1bd886615ae649a517514e64587fff9bbd889
SHA512 d8743280a16c851574d1caa69984ab0a81a15a62ebd01f86a4cf943322307cd541131d8af687e9f0789e4ac03c608ebf8dcb843288ce8c5c42e220befe716e9f
SSDEEP 6144:2T5OyDvKJ+usv+xm2OjZC9YLrU6oObkCPKZtRVyDqCF0MeKY6:2T5vKJg+xvPgU6hW6OC6M5Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

fb651d07bc1ee0b1676123399c358c9f3a276448b4938b46cfd2b9b701956913

.exe 404KB

fb651d07bc1ee0b1676123399c358c9f3a276448b4938b46cfd2b9b701956913

IMPHASH 62f628538e3c61be2e3186663f4b6cfe
SHA256 fb651d07bc1ee0b1676123399c358c9f3a276448b4938b46cfd2b9b701956913
MD5 50041dfa1df5ade46be281c9ab56180c
SHA1 0ef1bd886615ae649a517514e64587fff9bbd889
SHA512 d8743280a16c851574d1caa69984ab0a81a15a62ebd01f86a4cf943322307cd541131d8af687e9f0789e4ac03c608ebf8dcb843288ce8c5c42e220befe716e9f
SSDEEP 6144:2T5OyDvKJ+usv+xm2OjZC9YLrU6oObkCPKZtRVyDqCF0MeKY6:2T5vKJg+xvPgU6hW6OC6M5Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28199

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetProcessHeap EnumResourceTypesA TlsSetValue GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA SetConsoleCursorPosition GetFileAttributesW WriteConsoleW GetConsoleFontSize MultiByteToWideChar GetTempPathW LCMapStringA SetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA DnsHostnameToComputerNameA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW GetModuleHandleA GetFileAttributesExW GetCPInfoExA EndUpdateResourceA GlobalAddAtomW AddConsoleAliasA FindActCtxSectionStringW OpenFileMappingA SetFirmwareEnvironmentVariableA SetComputerNameW InterlockedIncrement IsBadStringPtrW BuildCommDCBW RemoveVectoredExceptionHandler GetConsoleOutputCP SetEndOfFile FlushFileBuffers GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind ReadFile SetHandleCount GetFileType SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA SetStdHandle GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

TransparentBlt