0daca42454265a66cdc6b1ef4e44d315

General

Target
0daca42454265a66cdc6b1ef4e44d315
Size 329KB
Sample220121-rwaxdaaagn
SHA256 56a366fbe2babfa88e0e073d2c07e357ec4998d6d33077d53c222099ba8b97fb
MD5 0daca42454265a66cdc6b1ef4e44d315
SHA1 84e3a8c23289d811a507523c376777d5b34f6115
SHA512 3a3547b4c0ab5bc36e1cba2a7c31eca8e2622622b23effadbce7533b56a92b7913d8e9477407f9058d16fb863113e298d586b85382ee84845404eb0784988859
SSDEEP 6144:C7Uzdbm8CoCTTKKstQW32SBHRWODcbW4BzcV+cC:C7Adb/yGKsyW3LXFcNlY+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0daca42454265a66cdc6b1ef4e44d315

.exe 329KB

0daca42454265a66cdc6b1ef4e44d315

IMPHASH b4892f1130d31e71dc6b3341892a29cb
SHA256 56a366fbe2babfa88e0e073d2c07e357ec4998d6d33077d53c222099ba8b97fb
MD5 0daca42454265a66cdc6b1ef4e44d315
SHA1 84e3a8c23289d811a507523c376777d5b34f6115
SHA512 3a3547b4c0ab5bc36e1cba2a7c31eca8e2622622b23effadbce7533b56a92b7913d8e9477407f9058d16fb863113e298d586b85382ee84845404eb0784988859
SSDEEP 6144:C7Uzdbm8CoCTTKKstQW32SBHRWODcbW4BzcV+cC:C7Adb/yGKsyW3LXFcNlY+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

73456

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapLock CreateNamedPipeW TerminateThread DeactivateActCtx GetVersionExW GetConsoleCP GetConsoleAliasesLengthA GetDefaultCommConfigA FindFirstFileExW GetDriveTypeW FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA SetCurrentDirectoryW GetLongPathNameA CopyFileW TlsGetValue LoadResource SetComputerNameExA SystemTimeToTzSpecificLocalTime FindAtomA ReleaseMutex CallNamedPipeW CreateMailslotW BuildCommDCBAndTimeoutsA VirtualProtect LoadLibraryA GlobalAlloc TryEnterCriticalSection TlsSetValue GetCommandLineA InterlockedDecrement GetCalendarInfoA DeleteFileA CreateActCtxW OutputDebugStringA GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeaps GlobalUnWire GetProcessHeap GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetLastError GetProfileStringA WriteProfileSectionA GetProfileStringW GetConsoleCursorInfo SetLastError DeleteVolumeMountPointW DebugBreak GetPrivateProfileSectionW lstrcmpA ReadFileScatter GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryA TerminateProcess GlobalFindAtomA FindCloseChangeNotification SetMailslotInfo InterlockedExchange DefineDosDeviceA FindVolumeMountPointClose EndUpdateResourceW WriteConsoleA GetPrivateProfileSectionA WritePrivateProfileSectionW GetPrivateProfileStructA GetDriveTypeA GetFileAttributesExA FileTimeToLocalFileTime MoveFileA GetVolumePathNameW HeapUnlock lstrcmpW SetDefaultCommConfigA FindActCtxSectionStringA SetThreadContext MoveFileExA GlobalUnlock UnregisterWait BuildCommDCBA GlobalDeleteAtom GetBinaryTypeA OpenEventW SetCommTimeouts WaitNamedPipeA GetPrivateProfileSectionNamesW FindResourceExW GetSystemTimeAsFileTime GetSystemInfo SetLocalTime OpenSemaphoreA GetProcAddress CreateIoCompletionPort SetFileShortNameW lstrcpyW VerLanguageNameW GetThreadSelectorEntry SetSystemTime GetConsoleAliasW SetConsoleScreenBufferSize AllocConsole GetAtomNameA WriteConsoleInputA TransactNamedPipe GetCommState LockFile _lopen ResetWriteWatch GetConsoleOutputCP GetModuleHandleA WriteConsoleOutputCharacterW EnumDateFormatsW GetConsoleAliasExesLengthA HeapReAlloc GetCommMask SetFilePointer FindClose PostQueuedCompletionStatus SetFileApisToANSI CancelWaitableTimer GetCurrentProcess SetNamedPipeHandleState GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameW WriteProfileStringW DeleteAtom GlobalAddAtomA AssignProcessToJobObject QueryDosDeviceW InitializeCriticalSection SetFirmwareEnvironmentVariableW GetBinaryTypeW InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetCPInfo HeapValidate IsBadReadPtr GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW GetFileType OutputDebugStringW ExitProcess LoadLibraryW GetModuleFileNameA SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapAlloc HeapSize VirtualAlloc IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode InitializeCriticalSectionAndSpinCount GetLocaleInfoW SetStdHandle CloseHandle CreateFileA

user32

OemToCharW

Sharing

General

Malware Config

Signatures

File Explorer

0daca42454265a66cdc6b1ef4e44d315

kernel32

user32