916D53E09DA4C910F04585026F5AAB7410C391E30C0D5[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
916D53E09DA4C910F04585026F5AAB7410C391E30C0D5.exe
Size 4.1MB
Sample230129-pjba9sef76
SHA256 916d53e09da4c910f04585026f5aab7410c391e30c0d560159ad16e936272eeb
MD5 3eaf114e7d481c57147ed8b8ba3c4caa
SHA1 62ce40d8a9c47527e88dab1e3e60e8495cad6029
SHA512 0112492901fccec1f5045860b5a1093c38cd859ee3f531ae7aed7ce3c01ea2d9df05420cb93293876b68c5f9ab91b293316df0a068f059c0ba27d6d93de2b2fc
SSDEEP 98304:6gCJYcoRB/Om0t7MZwAvPcVx0qa96SQ7p1YGt4Q24DEBziWz:6gCScaB/Om0tkw2EEqh1YVV4QV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

916D53E09DA4C910F04585026F5AAB7410C391E30C0D5.exe

.exe 4.1MB

916D53E09DA4C910F04585026F5AAB7410C391E30C0D5.exe

IMPHASH 7eae418c7423834ffc3d79b4300bd6fb
SHA256 916d53e09da4c910f04585026f5aab7410c391e30c0d560159ad16e936272eeb
MD5 3eaf114e7d481c57147ed8b8ba3c4caa
SHA1 62ce40d8a9c47527e88dab1e3e60e8495cad6029
SHA512 0112492901fccec1f5045860b5a1093c38cd859ee3f531ae7aed7ce3c01ea2d9df05420cb93293876b68c5f9ab91b293316df0a068f059c0ba27d6d93de2b2fc
SSDEEP 98304:6gCJYcoRB/Om0t7MZwAvPcVx0qa96SQ7p1YGt4Q24DEBziWz:6gCScaB/Om0tkw2EEqh1YVV4QV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13252

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess MoveFileW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW lstrcmpW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc DeleteFileW FindFirstFileW FindNextFileW FindClose SetFilePointer ReadFile MulDiv lstrlenA WideCharToMultiByte MultiByteToWideChar WritePrivateProfileStringW FreeLibrary GetPrivateProfileStringW GetModuleHandleW LoadLibraryExW

user32

GetWindowRect GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu ScreenToClient EnableMenuItem GetDlgItem SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect SystemParametersInfoW EndDialog RegisterClassW DialogBoxParamW CreateWindowExW GetClassInfoW DestroyWindow CharNextW ExitWindowsEx SetWindowTextW LoadImageW SetTimer ShowWindow PostQuitMessage wsprintfW SetWindowLongW FindWindowExW IsWindow CreatePopupMenu AppendMenuW GetSystemMetrics DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectW CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

shell32

ShellExecuteExW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetFileInfoW SHFileOperationW SHBrowseForFolderW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ord17 ImageList_Destroy

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance