0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2

Resubmissions

15/02/2024, 19:20

240215-x15v7sed3x

22/02/2023, 03:33

230222-d4e96shf6710

Sharing

Copy URL Twitter E-mail

General

Target
0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2
Size 75KB
Sample230222-d4e96shf67
SHA256 0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2
MD5 78f011f6196ab070e05e7e363a0c02f1
SHA1 8d31d3e523d1e11631d05f01c410340cef780bfc
SHA512 a4122de0328bd4f42ccb47b70eb444eac0b63e3f736223dbfca9e43169ee28c542f768ef7a35daf3f50def72a07c579a01241fd162fb0a00d184a270c7617706
SSDEEP 768:FbzkUtPX9DUetap1YOc8tmmSuDsCHJexou+nPp18vjILhussGdamRv5qmppQHUd:SaX1LGfDpRRuI0PuvtOuSG4z
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2

.exe 75KB

0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2

IMPHASH 200928216c27c7644c19b0beec4e3fd5
SHA256 0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2
MD5 78f011f6196ab070e05e7e363a0c02f1
SHA1 8d31d3e523d1e11631d05f01c410340cef780bfc
SHA512 a4122de0328bd4f42ccb47b70eb444eac0b63e3f736223dbfca9e43169ee28c542f768ef7a35daf3f50def72a07c579a01241fd162fb0a00d184a270c7617706
SSDEEP 768:FbzkUtPX9DUetap1YOc8tmmSuDsCHJexou+nPp18vjILhussGdamRv5qmppQHUd:SaX1LGfDpRRuI0PuvtOuSG4z
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

18768

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

oleaut32

SysAllocString SysFreeString

mpr

WNetCancelConnection2W WNetOpenEnumW WNetEnumResourceW WNetCloseEnum WNetAddConnection2W

ole32

CoCreateInstance CoSetProxyBlanket CoInitializeEx CoInitializeSecurity

user32

wsprintfW

netapi32

NetApiBufferFree NetShareEnum NetGetJoinInformation NetGetDCName

ntdll

RtlGetNativeSystemInformation RtlVirtualUnwind RtlGetVersion ZwQuerySystemInformation

advapi32

GetUserNameW LookupAccountSidW GetTokenInformation LookupPrivilegeValueA AdjustTokenPrivileges OpenProcessToken StartServiceW QueryServiceStatusEx OpenServiceA OpenSCManagerW OpenSCManagerA EnumServicesStatusA DeleteService CreateServiceW ControlService CloseServiceHandle CryptEncrypt CryptImportKey CryptDestroyKey CryptReleaseContext CryptAcquireContextW

activeds

ord9

msvcrt

feof fgetws _getch fclose _vsnwprintf memset _wfopen

shell32

CommandLineToArgvW ord680

shlwapi

StrStrIW SHRegSetUSValueW StrChrW StrCmpIW StrStrIA StrCmpNIW

kernel32

DeleteFileW GlobalMemoryStatus CopyFileW GetStdHandle WaitForSingleObject CreateEventA CreateThread GetTickCount64 CreateSemaphoreA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection AllocConsole WriteConsoleW GetConsoleScreenBufferInfo SetFileAttributesW DeviceIoControl lstrcmpiW ResetEvent TerminateThread GetFileSizeEx ReadFile SetConsoleCursorPosition GetComputerNameW lstrcmpiA GetSystemInfo CreateProcessW GetTempPathW GetModuleFileNameW SetEndOfFile OpenProcess TerminateProcess GetComputerNameA lstrlenA TlsAlloc SetErrorMode ExitProcess ReleaseSemaphore SetEvent GetCommandLineW GetDriveTypeW TlsSetValue TlsGetValue SetFilePointerEx SetFileInformationByHandle GetCurrentProcess HeapAlloc GetProcessHeap lstrcpyW lstrcatW lstrlenW FindClose FindFirstFileW FindNextFileW GetVolumeInformationW GetLastError HeapFree CreateFileW WriteFile CloseHandle SetLastError HeapReAlloc GetCurrentProcessId WideCharToMultiByte Sleep GetTickCount QueryPerformanceCounter QueryPerformanceFrequency

Name

.text

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ