dd7c20843584693c36f9134acb464df4

General

Target
dd7c20843584693c36f9134acb464df4
Size 328KB
Sample220121-nna1maggc2
SHA256 9ad3050367fc8aab3996eedb6bd086731288c5401b587cce63fda64f6732fa93
MD5 dd7c20843584693c36f9134acb464df4
SHA1 fa8a11198d9232e58c9853fd609e956be3e0be14
SHA512 e0a6d981b3e75c7f095888fdce1205d421213411bcf7bdd3692ed04830228548c95334c524c5881d2bf9771c635f5d8ec7e5ab7b895c8c2a20be65cfae7321be
SSDEEP 6144:6l+eNN4FnCauGJJd53Ts/nScL2By2XTLOJLeDtDe/4lERw:6l/IBdJj3TanScKA2XnOJqDtC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

dd7c20843584693c36f9134acb464df4

.exe 328KB

dd7c20843584693c36f9134acb464df4

IMPHASH 475f7058e090be99fd15edb6d2e40c10
SHA256 9ad3050367fc8aab3996eedb6bd086731288c5401b587cce63fda64f6732fa93
MD5 dd7c20843584693c36f9134acb464df4
SHA1 fa8a11198d9232e58c9853fd609e956be3e0be14
SHA512 e0a6d981b3e75c7f095888fdce1205d421213411bcf7bdd3692ed04830228548c95334c524c5881d2bf9771c635f5d8ec7e5ab7b895c8c2a20be65cfae7321be
SSDEEP 6144:6l+eNN4FnCauGJJd53Ts/nScL2By2XTLOJLeDtDe/4lERw:6l/IBdJj3TanScKA2XnOJqDtC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

73408

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapLock CreateNamedPipeW TerminateThread DeactivateActCtx GetVersionExW GetConsoleCP GetConsoleAliasesLengthA GetDefaultCommConfigA FindFirstFileExW GetDriveTypeW FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA SetCurrentDirectoryW GetLongPathNameA CopyFileW TlsGetValue LoadResource SetComputerNameExW SystemTimeToTzSpecificLocalTime FindAtomA ReleaseMutex CallNamedPipeW CreateMailslotW BuildCommDCBAndTimeoutsA VirtualProtect LoadLibraryA GlobalAlloc TryEnterCriticalSection TlsSetValue GetCommandLineA InterlockedDecrement GetCalendarInfoA DeleteFileA CreateActCtxW OutputDebugStringA GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeaps GlobalUnWire GetProcessHeap GetStartupInfoW GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetLastError GetProfileStringA WriteProfileSectionA GetProfileStringW GetConsoleCursorInfo SetLastError DeleteVolumeMountPointW DebugBreak GetPrivateProfileSectionW lstrcmpA ReadFileScatter SetConsoleMode GetSystemWindowsDirectoryA TerminateProcess GlobalFindAtomA FindCloseChangeNotification SetMailslotInfo InterlockedExchange DefineDosDeviceA FindVolumeMountPointClose EndUpdateResourceW WriteConsoleA GetPrivateProfileSectionA WritePrivateProfileSectionA GetPrivateProfileStructA GetDriveTypeA GetFileAttributesExA FileTimeToLocalFileTime MoveFileA GetVolumePathNameW HeapUnlock lstrcmpW SetDefaultCommConfigA FindActCtxSectionGuid SetThreadContext MoveFileExA GlobalUnlock UnregisterWait BuildCommDCBA GlobalDeleteAtom OpenEventW TransmitCommChar WaitNamedPipeA GetPrivateProfileSectionNamesW FindResourceExW GetLocalTime SetLocalTime OpenSemaphoreA GetProcAddress CreateIoCompletionPort SetFileShortNameW lstrcpyW VerLanguageNameW GetThreadSelectorEntry SetSystemTime GetConsoleAliasW FlushConsoleInputBuffer AllocConsole GetAtomNameA WriteConsoleInputA TransactNamedPipe GetCommState LockFile _lopen ResetWriteWatch GetConsoleOutputCP GetModuleHandleA WriteConsoleOutputCharacterW EnumDateFormatsW GetConsoleAliasExesLengthA HeapReAlloc GetCommMask SetFilePointer FindClose PostQueuedCompletionStatus SetFileApisToANSI CancelWaitableTimer GetCurrentProcess SetNamedPipeHandleState GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameW WriteProfileStringW DeleteAtom GlobalAddAtomA AssignProcessToJobObject QueryDosDeviceW InitializeCriticalSection SetFirmwareEnvironmentVariableW GetBinaryTypeA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetStartupInfoA WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetCPInfo HeapValidate IsBadReadPtr GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW GetFileType OutputDebugStringW ExitProcess LoadLibraryW GetModuleFileNameA SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapAlloc HeapSize VirtualAlloc IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode InitializeCriticalSectionAndSpinCount GetLocaleInfoW SetStdHandle CloseHandle CreateFileA

user32

OemToCharW

Sharing

General

Malware Config

Signatures

File Explorer

dd7c20843584693c36f9134acb464df4

kernel32

user32