0d15a75fc279a0ad6f905a573de511a4

General

Target
0d15a75fc279a0ad6f905a573de511a4
Size 328KB
Sample220121-rwaxdaaagm
SHA256 beefc504a33cac82813bd5372c4276d1a2b3d9141cfad907dbc41c7fdbdf7598
MD5 0d15a75fc279a0ad6f905a573de511a4
SHA1 38a0ff438fa05ccc89cea3e96db1d8f063659bcc
SHA512 70d0b7e1c989ae5d6fc0dc589e3615f9b641623eac488d8e5af643be328fdc5e6b3bb11906dcd004e2d78e53dcd995f76f06c3a8b7596819fc4f54047ba6112b
SSDEEP 6144:6/BwHjwAnECqHTEt4kIJQ8YaYCT8IRvUucbzmpGa/Txd:6/+HjOlzE4kIm8Y55cUuGKprT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0d15a75fc279a0ad6f905a573de511a4

.exe 328KB

0d15a75fc279a0ad6f905a573de511a4

IMPHASH b4892f1130d31e71dc6b3341892a29cb
SHA256 beefc504a33cac82813bd5372c4276d1a2b3d9141cfad907dbc41c7fdbdf7598
MD5 0d15a75fc279a0ad6f905a573de511a4
SHA1 38a0ff438fa05ccc89cea3e96db1d8f063659bcc
SHA512 70d0b7e1c989ae5d6fc0dc589e3615f9b641623eac488d8e5af643be328fdc5e6b3bb11906dcd004e2d78e53dcd995f76f06c3a8b7596819fc4f54047ba6112b
SSDEEP 6144:6/BwHjwAnECqHTEt4kIJQ8YaYCT8IRvUucbzmpGa/Txd:6/+HjOlzE4kIm8Y55cUuGKprT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

73456

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapLock CreateNamedPipeW TerminateThread DeactivateActCtx GetVersionExW GetConsoleCP GetConsoleAliasesLengthA GetDefaultCommConfigA FindFirstFileExW GetDriveTypeW FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA SetCurrentDirectoryW GetLongPathNameA CopyFileW TlsGetValue LoadResource SetComputerNameExA SystemTimeToTzSpecificLocalTime FindAtomA ReleaseMutex CallNamedPipeW CreateMailslotW BuildCommDCBAndTimeoutsA VirtualProtect LoadLibraryA GlobalAlloc TryEnterCriticalSection TlsSetValue GetCommandLineA InterlockedDecrement GetCalendarInfoA DeleteFileA CreateActCtxW OutputDebugStringA GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeaps GlobalUnWire GetProcessHeap GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetLastError GetProfileStringA WriteProfileSectionA GetProfileStringW GetConsoleCursorInfo SetLastError DeleteVolumeMountPointW DebugBreak GetPrivateProfileSectionW lstrcmpA ReadFileScatter GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryA TerminateProcess GlobalFindAtomA FindCloseChangeNotification SetMailslotInfo InterlockedExchange DefineDosDeviceA FindVolumeMountPointClose EndUpdateResourceW WriteConsoleA GetPrivateProfileSectionA WritePrivateProfileSectionW GetPrivateProfileStructA GetDriveTypeA GetFileAttributesExA FileTimeToLocalFileTime MoveFileA GetVolumePathNameW HeapUnlock lstrcmpW SetDefaultCommConfigA FindActCtxSectionStringA SetThreadContext MoveFileExA GlobalUnlock UnregisterWait BuildCommDCBA GlobalDeleteAtom GetBinaryTypeA OpenEventW SetCommTimeouts WaitNamedPipeA GetPrivateProfileSectionNamesW FindResourceExW GetSystemTimeAsFileTime GetSystemInfo SetLocalTime OpenSemaphoreA GetProcAddress CreateIoCompletionPort SetFileShortNameW lstrcpyW VerLanguageNameW GetThreadSelectorEntry SetSystemTime GetConsoleAliasW SetConsoleScreenBufferSize AllocConsole GetAtomNameA WriteConsoleInputA TransactNamedPipe GetCommState LockFile _lopen ResetWriteWatch GetConsoleOutputCP GetModuleHandleA WriteConsoleOutputCharacterW EnumDateFormatsW GetConsoleAliasExesLengthA HeapReAlloc GetCommMask SetFilePointer FindClose PostQueuedCompletionStatus SetFileApisToANSI CancelWaitableTimer GetCurrentProcess SetNamedPipeHandleState GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameW WriteProfileStringW DeleteAtom GlobalAddAtomA AssignProcessToJobObject QueryDosDeviceW InitializeCriticalSection SetFirmwareEnvironmentVariableW GetBinaryTypeW InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetCPInfo HeapValidate IsBadReadPtr GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW GetFileType OutputDebugStringW ExitProcess LoadLibraryW GetModuleFileNameA SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapAlloc HeapSize VirtualAlloc IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode InitializeCriticalSectionAndSpinCount GetLocaleInfoW SetStdHandle CloseHandle CreateFileA

user32

OemToCharW

Sharing

General

Malware Config

Signatures

File Explorer

0d15a75fc279a0ad6f905a573de511a4

kernel32

user32