HDD Regenerator 2011[.]exe

Resubmissions

02/03/2024, 17:16

240302-vs5jcsfc7z

02/03/2024, 17:12

240302-vrcrysfc6z7

Sharing

Copy URL Twitter E-mail

General

Target
HDD Regenerator 2011.exe
Size 6.5MB
Sample240302-vs5jcsfc7z
SHA256 08d95e46cac1a5e1ecd1db39127a01f6351016bc24d11e2c3d6fddd7e0b78183
MD5 c2a112ee6b86cb98b0bfbd6ae2f8fd06
SHA1 b396891d09416fc58930193dc594ed774d8f17f7
SHA512 638ea573d48aeacccb80ed8cb00475ad336a6b522235418ddb2e3637458119dc2c0d3420e11c410f6c74cbc22a7d721f4f68333da405e0884f8a0a0b1b340ede
SSDEEP 98304:IEyiP7N0bjKAyu4vjMplwU+Xzrism4CHhp+DqfE+40XmjV4XqTz1ThtjqFGqW+UW:I4BGmAyXixJpdosBXuSXS1TGFojjM/lj
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

HDD Regenerator 2011.exe

.exe 6.5MB

HDD Regenerator 2011.exe

IMPHASH 0595e27a8c715e966f1f2dcc2d3b8adc
SHA256 08d95e46cac1a5e1ecd1db39127a01f6351016bc24d11e2c3d6fddd7e0b78183
MD5 c2a112ee6b86cb98b0bfbd6ae2f8fd06
SHA1 b396891d09416fc58930193dc594ed774d8f17f7
SHA512 638ea573d48aeacccb80ed8cb00475ad336a6b522235418ddb2e3637458119dc2c0d3420e11c410f6c74cbc22a7d721f4f68333da405e0884f8a0a0b1b340ede
SSDEEP 98304:IEyiP7N0bjKAyu4vjMplwU+Xzrism4CHhp+DqfE+40XmjV4XqTz1ThtjqFGqW+UW:I4BGmAyXixJpdosBXuSXS1TGFojjM/lj
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

4d:7d:eb:ee:df:1d:0d:2b:a2:0d:bb:d6:07:e6:72:38:64:8f:43:88

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Abstradrome,O=Abstradrome,POSTALCODE=129347,STREET=Prohodchikov 16\, 224,L=Moscow,ST=Moscow,C=RU

Chains

Feb 29, 2024

Minor OS version

Major OS version

Entry point

226105

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHFileOperationW ShellExecuteExW SHGetSpecialFolderLocation ShellExecuteW CommandLineToArgvW SHGetMalloc

comctl32

ord17

kernel32

lstrcpyW GetWindowsDirectoryW SetErrorMode GetTempPathW ExpandEnvironmentStringsW LockResource SizeofResource LoadResource FindResourceW GetTickCount GetExitCodeThread CreateThread CopyFileW InterlockedIncrement InterlockedDecrement QueryPerformanceFrequency CreateEventW lstrcatW GetTempFileNameW CompareStringA CompareStringW GetVersionExW LoadLibraryW FreeLibrary GetProcAddress lstrcmpW lstrcmpiW GetSystemDefaultLCID GlobalHandle VerLanguageNameW MoveFileW SetCurrentDirectoryW FindClose FindNextFileW CompareFileTime FindFirstFileW GetSystemTimeAsFileTime SetFileAttributesW LocalFree FormatMessageW GetSystemInfo MulDiv IsValidCodePage GetVersion GetModuleHandleW GetCommandLineW GetFileAttributesW IsBadReadPtr VirtualQuery lstrcmpiA lstrcpyA FlushFileBuffers SetEndOfFile GetDiskFreeSpaceW GetDriveTypeW CreateDirectoryW GetExitCodeProcess GetCurrentThread GetLocaleInfoW QueryPerformanceCounter SetEvent ResetEvent VirtualProtect GetCurrentProcessId CreateProcessW MultiByteToWideChar GetDateFormatW GetTimeFormatW GetLocalTime GetProcessTimes OpenProcess lstrlenW SetEnvironmentVariableA GetOEMCP GetACP GetTimeZoneInformation SetStdHandle SetConsoleCtrlHandler LoadLibraryA GetUserDefaultLCID EnumSystemLocalesA GetLocaleInfoA IsValidLocale GetCPInfo GetStringTypeW GetStringTypeA IsBadCodePtr GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetCommandLineA GetEnvironmentStrings GetEnvironmentStringsW FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter SetUnhandledExceptionFilter LCMapStringW LCMapStringA IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy GetVersionExA GetEnvironmentVariableA GetModuleFileNameA FatalAppExitA TlsGetValue GetDateFormatA TlsFree TlsAlloc TlsSetValue GetCurrentThreadId HeapSize HeapReAlloc GetStartupInfoW GetModuleHandleA TerminateProcess RaiseException RtlUnwind LeaveCriticalSection DeleteCriticalSection InterlockedExchange InitializeCriticalSection EnterCriticalSection lstrcmpA GetTimeFormatA CreateFileA WaitForSingleObject ExitProcess GetCurrentProcess DuplicateHandle GetThreadContext VirtualProtectEx WriteProcessMemory FlushInstructionCache SetThreadContext ResumeThread DeleteFileW Sleep RemoveDirectoryW SetFilePointer GetProcessHeap HeapAlloc HeapFree WriteFile lstrcpynW FindResourceExW GetModuleFileNameW CreateFileMappingW MapViewOfFile UnmapViewOfFile lstrlenA CreateFileW GetFileSize GlobalAlloc CloseHandle GlobalLock ReadFile GlobalUnlock GlobalFree GetLastError SetLastError SearchPathW WideCharToMultiByte SystemTimeToFileTime lstrcpynA LocalAlloc LoadLibraryExW

user32

GetClassInfoW UpdateWindow SetCursor GetWindow GetDlgItemTextW SetFocus EnableWindow GetParent GetWindowTextLengthW GetWindowTextW MoveWindow SetWindowTextW GetWindowPlacement DestroyIcon GetDlgCtrlID FillRect GetSysColor GetSysColorBrush IsDialogMessageW SendMessageW GetWindowRect GetSystemMetrics SetRect FindWindowW IntersectRect SubtractRect IsWindow DestroyWindow wvsprintfW WaitForInputIdle GetWindowLongW BeginPaint EndPaint SetWindowLongW GetClientRect ClientToScreen SetWindowPos GetWindowDC EndDialog GetDlgItem ShowWindow GetDesktopWindow wsprintfW MsgWaitForMultipleObjects PeekMessageW MessageBoxW CreateDialogIndirectParamW CreateDialogParamW DialogBoxIndirectParamW DialogBoxParamW DefWindowProcW PostMessageW KillTimer PostQuitMessage SetTimer LoadIconW LoadCursorW RegisterClassW CreateWindowExW GetMessageW TranslateMessage DispatchMessageW GetDC ReleaseDC LoadStringW CharPrevW ExitWindowsEx SendDlgItemMessageW CharNextW SetDlgItemTextW CharUpperW DrawIcon

gdi32

CreateFontW GetTextExtentPoint32W SetBkMode SetTextColor GetObjectW CreateFontIndirectW CreateSolidBrush CreateCompatibleDC SelectObject BitBlt DeleteDC DeleteObject GetStockObject GetSystemPaletteEntries CreatePalette GetDeviceCaps SelectPalette RealizePalette CreateDIBitmap TranslateCharsetInfo

advapi32

RegDeleteKeyW RegEnumKeyW RegOpenKeyW RegCreateKeyW RegQueryValueExA RegOpenKeyExA OpenThreadToken GetTokenInformation AllocateAndInitializeSid EqualSid FreeSid OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges InitializeSecurityDescriptor SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl RegEnumValueW RegCreateKeyExW RegSetValueExW RegDeleteValueW RegOpenKeyExW RegQueryValueExW RegCloseKey RegEnumKeyExW

ole32

CLSIDFromProgID CoCreateInstance StringFromCLSID CoTaskMemFree CoInitializeSecurity CreateItemMoniker GetRunningObjectTable ProgIDFromCLSID StringFromGUID2 CoUninitialize CoInitialize CoCreateGuid

oleaut32

VariantChangeType VariantClear SysAllocString SysStringLen SysReAllocStringLen CreateErrorInfo RegisterTypeLi LoadTypeLi SetErrorInfo GetErrorInfo SysFreeString SysAllocStringLen

rpcrt4

UuidFromStringW RpcStringFreeW UuidToStringW UuidCreate