007eb737493994bd0ff1aaac4af0b84a[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
007eb737493994bd0ff1aaac4af0b84a.exe
Size 4.8MB
Sample230124-s511laea4t
SHA256 45982d6a7674a3ff4d2f28e95963d74729e0cb3059c08ef2e4c235182bf4591d
MD5 007eb737493994bd0ff1aaac4af0b84a
SHA1 1102431ee66cbaf78c44d6009205242da0e69dcf
SHA512 857639e78c761b8ac14ac53ef3a1e0116131c6db9d83985c2e66bed95bb51424ec8d97ae1778524b82260169ac278d716247d604272e0f13a6cb1f9f38d0fc71
SSDEEP 98304:k1oboTmOycY/HeIrAvwZRZAGthkI0XvTXbWIAv+V8FSraJBAUZLG:kDdycY/+IrAvwZRZXthkI0TVgVJVq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

007eb737493994bd0ff1aaac4af0b84a.exe

.exe 4.8MB

007eb737493994bd0ff1aaac4af0b84a.exe

IMPHASH 5dc637e0816d30dd4ba1285cb92ba0fa
SHA256 45982d6a7674a3ff4d2f28e95963d74729e0cb3059c08ef2e4c235182bf4591d
MD5 007eb737493994bd0ff1aaac4af0b84a
SHA1 1102431ee66cbaf78c44d6009205242da0e69dcf
SHA512 857639e78c761b8ac14ac53ef3a1e0116131c6db9d83985c2e66bed95bb51424ec8d97ae1778524b82260169ac278d716247d604272e0f13a6cb1f9f38d0fc71
SSDEEP 98304:k1oboTmOycY/HeIrAvwZRZAGthkI0XvTXbWIAv+V8FSraJBAUZLG:kDdycY/+IrAvwZRZXthkI0TVgVJVq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

622382

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

midiStreamOut midiOutPrepareHeader midiStreamProperty midiStreamOpen midiOutUnprepareHeader waveOutOpen waveOutPrepareHeader waveOutWrite waveOutPause waveOutReset waveOutClose waveOutGetNumDevs midiStreamStop midiOutReset midiStreamClose midiStreamRestart waveOutUnprepareHeader

ws2_32

htons WSAAsyncSelect closesocket send socket WSACleanup WSAStartup gethostbyname inet_ntoa inet_addr recvfrom ioctlsocket connect recv getpeername accept select

rasapi32

RasHangUpA RasGetConnectStatusA

kernel32

SetLastError GetTimeZoneInformation GetVersion FileTimeToSystemTime GetACP RaiseException GetLocalTime GetSystemTime RtlUnwind GetStartupInfoA GetOEMCP GetCPInfo GetProcessVersion SetErrorMode GlobalFlags GetCurrentThread GetFileTime TlsGetValue LocalReAlloc TlsSetValue TlsFree GlobalHandle TlsAlloc LocalAlloc lstrcmpA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpiA SetEndOfFile UnlockFile LockFile FlushFileBuffers DuplicateHandle lstrcpynA FileTimeToLocalFileTime LocalFree InterlockedDecrement InterlockedIncrement OpenProcess TerminateProcess GetFileSize SetFilePointer CreateToolhelp32Snapshot Process32First Process32Next GetCurrentProcess CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA WriteFile WaitForMultipleObjects CreateFileA SetEvent FindResourceA LoadResource LockResource ReadFile RemoveDirectoryA GetModuleFileNameA GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA lstrlenA WinExec lstrcpyA FindNextFileA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc MultiByteToWideChar WideCharToMultiByte GetFullPathNameA FreeLibrary LoadLibraryA GetLastError GetVersionExA GetPrivateProfileSectionNamesA WritePrivateProfileStringA GetPrivateProfileStringA CreateThread CreateEventA Sleep GlobalAlloc GlobalLock InterlockedExchange GlobalUnlock FindFirstFileA FindClose GetFileAttributesA DeleteFileA CopyFileA SetCurrentDirectoryA GetVolumeInformationA GetModuleHandleA GetProcAddress MulDiv GetCommandLineA GetTickCount CreateProcessA WaitForSingleObject CloseHandle HeapSize SetStdHandle GetFileType UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree SetEnvironmentVariableA LCMapStringA LCMapStringW VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW CompareStringA CompareStringW IsBadReadPtr IsBadCodePtr

user32

SetMenu PeekMessageA IsIconic GetSysColorBrush SystemParametersInfoA LoadImageA EnumDisplaySettingsA ClientToScreen EnableMenuItem GetSubMenu GetDlgCtrlID CreateAcceleratorTableA CreateMenu ModifyMenuA AppendMenuA CreatePopupMenu DrawIconEx CreateIconFromResource CreateIconFromResourceEx RegisterClipboardFormatA SetRectEmpty DispatchMessageA GetMessageA WindowFromPoint DrawFocusRect DrawEdge SetFocus GetActiveWindow GetWindow DestroyAcceleratorTable SetWindowRgn GetMessagePos ScreenToClient ChildWindowFromPointEx CopyRect LoadBitmapA WinHelpA KillTimer SetTimer ReleaseCapture GetCapture SetCapture GetScrollRange SetScrollRange SetScrollPos SetRect InflateRect IntersectRect DestroyIcon PtInRect LoadStringA DrawFrameControl GetMenuCheckMarkDimensions GetMenuState SetMenuItemBitmaps CheckMenuItem MoveWindow IsDialogMessageA ScrollWindowEx SendDlgItemMessageA MapWindowPoints AdjustWindowRectEx GetMenu GetScrollPos RegisterClassA GetMenuItemCount GetMenuItemID SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA UnhookWindowsHookEx GetPropA RemovePropA GetMessageTime GetLastActivePopup RegisterWindowMessageA GetWindowPlacement GetNextDlgTabItem EndDialog CreateDialogIndirectParamA OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA GetSysColor SetActiveWindow SetCursorPos LoadCursorA SetCursor GetDC FillRect IsRectEmpty ReleaseDC IsChild TrackPopupMenu DestroyMenu SetForegroundWindow GetWindowRect EqualRect UpdateWindow ValidateRect InvalidateRect GetClientRect GetFocus GetParent GetTopWindow PostMessageA IsWindow SetParent DestroyCursor SendMessageA SetWindowPos MessageBoxA GetCursorPos GetSystemMetrics EmptyClipboard SetClipboardData OpenClipboard GetClipboardData CloseClipboard wsprintfA WaitForInputIdle DeleteMenu GetSystemMenu DefWindowProcA GetClassInfoA IsZoomed PostQuitMessage CopyAcceleratorTableA TranslateMessage LoadIconA GetForegroundWindow GetDesktopWindow GetClassNameA UnregisterClassA GetWindowThreadProcessId FindWindowA GetDlgItem GetWindowTextA CallWindowProcA CreateWindowExA UnregisterHotKey SetWindowTextA GetKeyState TranslateAcceleratorA IsWindowEnabled ShowWindow RegisterHotKey GetWindowTextLengthA CharUpperA GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA DestroyWindow

gdi32

LineTo MoveToEx ExcludeClipRect GetClipBox PatBlt CombineRgn CreateRectRgn FillRgn CreateSolidBrush GetStockObject CreateFontIndirectA EndPage EndDoc DeleteDC StartDocA StartPage BitBlt CreateCompatibleDC Ellipse Rectangle LPtoDP DPtoLP GetCurrentObject RoundRect GetTextExtentPoint32A GetDeviceCaps CreatePolygonRgn GetClipRgn SetStretchBltMode CreateRectRgnIndirect SetBkColor CreateFontA ScaleWindowExtEx SetWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetTextColor SetROP2 SetPolyFillMode ExtSelectClipRgn GetViewportExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextMetricsA CreatePen GetObjectA SelectObject CreateBitmap CreateDCA CreateCompatibleBitmap SetBkMode RestoreDC SaveDC GetPolyFillMode GetStretchBltMode GetROP2 GetBkColor GetBkMode GetTextColor CreateRoundRectRgn CreateEllipticRgn PathToRegion EndPath BeginPath GetWindowOrgEx GetViewportOrgEx GetWindowExtEx GetDIBits RealizePalette SelectPalette StretchBlt CreatePalette GetSystemPaletteEntries CreateDIBitmap DeleteObject TranslateCharsetInfo SelectClipRgn

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegOpenKeyExA RegSetValueExA RegQueryValueA RegCreateKeyExA RegCloseKey

shell32

DragFinish DragQueryFileA Shell_NotifyIconA DragAcceptFiles ShellExecuteA SHGetMalloc SHGetPathFromIDListA SHBrowseForFolderA

ole32

CLSIDFromString OleInitialize OleUninitialize

oleaut32

LoadTypeLi RegisterTypeLi UnRegisterTypeLi SafeArrayPutElement SafeArrayCreate SafeArrayDestroy SysAllocString VariantInit VariantCopyInd SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound VariantChangeType VariantClear VariantCopy

comctl32

ImageList_GetImageCount ImageList_SetBkColor ImageList_Add ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_EndDrag ord17 ImageList_Read ImageList_Duplicate

wininet

InternetCanonicalizeUrlA InternetCrackUrlA HttpOpenRequestA HttpSendRequestA HttpQueryInfoA InternetConnectA InternetSetOptionA InternetOpenA InternetCloseHandle InternetReadFile

comdlg32

ChooseFontA ChooseColorA GetFileTitleA GetSaveFileNameA GetOpenFileNameA