1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58

Sharing

Copy URL Twitter E-mail

General

Target
1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58
Size 76KB
Sample230222-c653yabd5w
SHA256 1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58
MD5 8a132d9eb16ab0a492c7858fa5d6b6fb
SHA1 bb3d3258e9207f9499f3f7dcf53442fc8ddabd45
SHA512 7f74eece1ba22e553f86c151b5364207b06b46ffb58330406021c668e2ee5fa332a8dabcf227278f10dfbc7a6d2593f5d2fb32e344c33fca174874300c9eb985
SSDEEP 1536:PaX1IbkVQJih8Ls2WZYbz+n26HNmAC6UsK4Xe:0KntKmzK2736UsK4
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58

.dll 76KB

1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58

IMPHASH 7d95f3a35d9ea92349a8e4517a4a7b5a
SHA256 1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58
MD5 8a132d9eb16ab0a492c7858fa5d6b6fb
SHA1 bb3d3258e9207f9499f3f7dcf53442fc8ddabd45
SHA512 7f74eece1ba22e553f86c151b5364207b06b46ffb58330406021c668e2ee5fa332a8dabcf227278f10dfbc7a6d2593f5d2fb32e344c33fca174874300c9eb985
SSDEEP 1536:PaX1IbkVQJih8Ls2WZYbz+n26HNmAC6UsK4Xe:0KntKmzK2736UsK4
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

27448

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ntdll

RtlGetNativeSystemInformation RtlGetVersion ZwQuerySystemInformation RtlVirtualUnwind

oleaut32

SysAllocString SysFreeString

ole32

CoInitializeSecurity CoInitializeEx CoSetProxyBlanket CoCreateInstance

shlwapi

StrStrIW StrCmpIW StrCmpNIW StrChrW StrStrIA SHRegSetUSValueW

mpr

WNetEnumResourceW WNetOpenEnumW WNetCloseEnum WNetCancelConnection2W WNetAddConnection2W

shell32

CommandLineToArgvW ord680

msvcrt

fgetws memset _getch _wfopen fclose _vsnwprintf feof

kernel32

SetConsoleCursorPosition GetConsoleScreenBufferInfo WriteConsoleW AllocConsole DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetStdHandle CopyFileW DeleteFileW GetComputerNameW GlobalMemoryStatus GetSystemInfo CreateProcessW GetTempPathW HeapAlloc GetProcessHeap lstrcpyW lstrcatW lstrlenW FindClose FindFirstFileW FindNextFileW GetVolumeInformationW GetLastError HeapFree CreateFileW WriteFile CloseHandle SetLastError HeapReAlloc GetCurrentProcessId WideCharToMultiByte Sleep GetTickCount QueryPerformanceCounter QueryPerformanceFrequency GetCurrentProcess SetEvent ReleaseSemaphore WaitForSingleObject CreateEventA CreateThread GetTickCount64 CreateSemaphoreA SetFileAttributesW DeviceIoControl lstrcmpiW ResetEvent TerminateThread GetFileSizeEx ReadFile SetEndOfFile SetFileInformationByHandle SetFilePointerEx TlsGetValue TlsSetValue GetDriveTypeW GetCommandLineW ExitProcess SetErrorMode TlsAlloc lstrlenA GetComputerNameA TerminateProcess OpenProcess lstrcmpiA GetModuleFileNameW

user32

wsprintfW

advapi32

CryptReleaseContext GetUserNameW LookupAccountSidW GetTokenInformation LookupPrivilegeValueA AdjustTokenPrivileges OpenProcessToken StartServiceW QueryServiceStatusEx OpenServiceA OpenSCManagerW OpenSCManagerA EnumServicesStatusA DeleteService CreateServiceW ControlService CloseServiceHandle CryptEncrypt CryptImportKey CryptDestroyKey CryptAcquireContextW

netapi32

NetGetJoinInformation NetShareEnum NetApiBufferFree NetGetDCName

activeds

ord9

Name

.text

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

356B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ