2b5c1f4495e220401f03e1b31c83b33a

General

Target
2b5c1f4495e220401f03e1b31c83b33a
Size 328KB
Sample220121-nnapvshafq
SHA256 669247f973870da293e534e1dfad8ca9327cf2623cc5dc108fca05b7e0d701b2
MD5 2b5c1f4495e220401f03e1b31c83b33a
SHA1 892fbfea232384e2cc12890d0823a41b6c2f5850
SHA512 530f8e943f7ba74a4cc4b6b6aa3aaff0537f6474de0f05a6fd725efe35828bd5c9969359dfd7e841a567beb4a1f1cc18e92d9b9057adcd48d7c42d418b173910
SSDEEP 6144:mGAnrZrnCHCnv1Uyg/XFzVSv4qSQ2lfc8WvLetnI9J:mGEZco9Dg/RVSvWQ2RXyD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2b5c1f4495e220401f03e1b31c83b33a

.exe 328KB

2b5c1f4495e220401f03e1b31c83b33a

IMPHASH 0152c21ced523378d45e83b1b3a1fdf0
SHA256 669247f973870da293e534e1dfad8ca9327cf2623cc5dc108fca05b7e0d701b2
MD5 2b5c1f4495e220401f03e1b31c83b33a
SHA1 892fbfea232384e2cc12890d0823a41b6c2f5850
SHA512 530f8e943f7ba74a4cc4b6b6aa3aaff0537f6474de0f05a6fd725efe35828bd5c9969359dfd7e841a567beb4a1f1cc18e92d9b9057adcd48d7c42d418b173910
SSDEEP 6144:mGAnrZrnCHCnv1Uyg/XFzVSv4qSQ2lfc8WvLetnI9J:mGEZco9Dg/RVSvWQ2RXyD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

73536

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapLock CreateNamedPipeW GetExitCodeProcess DeactivateActCtx GetVersionExW GetConsoleCP GetConsoleAliasesLengthA GetDefaultCommConfigA FindFirstFileExA GetDriveTypeW FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA SetCurrentDirectoryW GetLongPathNameA CopyFileW TlsGetValue LoadResource SetComputerNameExW SystemTimeToTzSpecificLocalTime FindAtomA ReleaseSemaphore CallNamedPipeW CreateMailslotW BuildCommDCBAndTimeoutsA VirtualProtect LoadLibraryA GlobalAlloc TryEnterCriticalSection GetCommandLineA InterlockedDecrement GetCalendarInfoA DeleteFileA CreateActCtxW OutputDebugStringA GetSystemTimeAdjustment SetPriorityClass WritePrivateProfileStringW GetProcessHeaps GlobalUnWire GetProcessHeap GetStartupInfoW GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetLastError GetProfileStringA WriteProfileSectionA GetProfileStringW GetConsoleCursorInfo SetLastError DeleteVolumeMountPointW DebugBreak GetPrivateProfileSectionW lstrcmpA ReadFileScatter SetConsoleMode GetSystemWindowsDirectoryA TerminateProcess GlobalFindAtomW FindCloseChangeNotification SetTapeParameters SetMailslotInfo InterlockedExchange DefineDosDeviceA FindVolumeMountPointClose EndUpdateResourceW WriteConsoleA GetPrivateProfileSectionA WritePrivateProfileSectionA GetPrivateProfileStructW GetDriveTypeA GetFileAttributesExA FileTimeToLocalFileTime MoveFileA GetVolumePathNameW HeapUnlock lstrcmpW SetDefaultCommConfigA FindActCtxSectionGuid SetThreadContext MoveFileExW GlobalUnlock UnregisterWait BuildCommDCBA GlobalDeleteAtom OpenEventW TransmitCommChar WaitNamedPipeA GetPrivateProfileSectionNamesW FindResourceExW GetLocalTime SetLocalTime OpenSemaphoreA GetProcAddress SetFileShortNameW lstrcpyW VerLanguageNameW GetThreadSelectorEntry SetSystemTime GetConsoleAliasW FlushConsoleInputBuffer AllocConsole GetAtomNameW WriteConsoleInputA TransactNamedPipe GetCommState LockFile _lopen GetConsoleAliasExesLengthA ResetWriteWatch GetConsoleOutputCP GetModuleHandleA WriteConsoleOutputCharacterW EnumDateFormatsW HeapReAlloc GetCommMask SetFilePointer FindClose SetFileApisToANSI CancelWaitableTimer GetCurrentProcessId SetNamedPipeHandleState GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameW WriteProfileStringW DeleteAtom GlobalAddAtomA AssignProcessToJobObject QueryDosDeviceW InitializeCriticalSection SetFirmwareEnvironmentVariableW GetBinaryTypeA CreateIoCompletionPort InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetStartupInfoA WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetCPInfo HeapValidate IsBadReadPtr GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW GetFileType OutputDebugStringW ExitProcess LoadLibraryW GetModuleFileNameA SetHandleCount QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapAlloc HeapSize VirtualAlloc IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode InitializeCriticalSectionAndSpinCount GetLocaleInfoW SetStdHandle CloseHandle CreateFileA

user32

OemToCharW

Sharing

General

Malware Config

Signatures

File Explorer

2b5c1f4495e220401f03e1b31c83b33a

kernel32

user32