efe5918fa8bd24bdfb7bb1dcc581c7b8

General

Target
efe5918fa8bd24bdfb7bb1dcc581c7b8
Size 255KB
Sample220119-2pzbhadgcj
SHA256 ede12e010ddaffd96dbc21854ff8a5f24d75cd9766d6eb41fce18824c5c18889
MD5 efe5918fa8bd24bdfb7bb1dcc581c7b8
SHA1 00cf4d6741a628f200914d191ae5cdadf03b3d60
SHA512 a457a025967baa05814fe46e4a9b9eb86961782aea900dc784f51b3e0e4b86db53d6acf482b03c1873a43f5b3b145c211ed26e9f22bbe88ae81cd005f34621cb
SSDEEP 3072:pm6SLLI6JpCuxddMWerQMmkahL5ebLP3pJvTzM/h3:pm6SLL5PCuxdijrQlkaaTHn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

efe5918fa8bd24bdfb7bb1dcc581c7b8

.exe 255KB

efe5918fa8bd24bdfb7bb1dcc581c7b8

IMPHASH 125adc129c50285a2cd4524417d3fdd8
SHA256 ede12e010ddaffd96dbc21854ff8a5f24d75cd9766d6eb41fce18824c5c18889
MD5 efe5918fa8bd24bdfb7bb1dcc581c7b8
SHA1 00cf4d6741a628f200914d191ae5cdadf03b3d60
SHA512 a457a025967baa05814fe46e4a9b9eb86961782aea900dc784f51b3e0e4b86db53d6acf482b03c1873a43f5b3b145c211ed26e9f22bbe88ae81cd005f34621cb
SSDEEP 3072:pm6SLLI6JpCuxddMWerQMmkahL5ebLP3pJvTzM/h3:pm6SLL5PCuxdijrQlkaaTHn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

10207

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA InterlockedDecrement SetMailslotInfo GetComputerNameW GetTimeFormatA SetEvent SleepEx GetModuleHandleW GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleW CreateRemoteThread FindActCtxSectionStringA ReadConsoleInputA GetStringTypeExW GetFileAttributesW GetOverlappedResult SetLocaleInfoA LCMapStringA GetLongPathNameW GetProcAddress VirtualAlloc SetStdHandle GetAtomNameA UnhandledExceptionFilter LocalAlloc DnsHostnameToComputerNameA GetModuleFileNameA GetModuleHandleA GetConsoleTitleW WriteProfileStringW GetFileTime GetProfileSectionW lstrcpyW CreateThread SetUnhandledExceptionFilter GetLastError HeapReAlloc HeapAlloc GetStartupInfoW EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind Sleep ExitProcess WriteFile SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapFree CloseHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount CreateFileA ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetEndOfFile GetProcessHeap LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RaiseException

advapi32

ReportEventA

winhttp

WinHttpSetDefaultProxyConfiguration

Sharing

General

Malware Config

Signatures

File Explorer

efe5918fa8bd24bdfb7bb1dcc581c7b8

kernel32

advapi32

winhttp