1f0b449499b8811d74e99726d337fb91

General

Target
1f0b449499b8811d74e99726d337fb91
Size 614KB
Sample220122-rdbe7abfer
SHA256 e438f74e71aa80712289eaac851a59a481b24e46ba5d607e3cd42aeea6129bd8
MD5 1f0b449499b8811d74e99726d337fb91
SHA1 b8e6bbbfcff72b0e0fadc2f15504590b1c46afe9
SHA512 3a9d71ae604acf31ebb173f1f34afb359bbac37b6cc92051cf21652b85367969424b9e2466398e0c74bb5adc986992ab58dd466fcfd95cdb51022c449edbbbbc
SSDEEP 12288:xLF9cPbIqSDV788wpGu/R2Cpe0LgoL1BH4bu5BySdKsV2J8h30y9cZNJN:Z0jYD58bGu/JU0LgovHJBywVqHy9cZP
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1f0b449499b8811d74e99726d337fb91

.exe 614KB

1f0b449499b8811d74e99726d337fb91

IMPHASH 1c3e601327e38fd1865e47bf98f54632
SHA256 e438f74e71aa80712289eaac851a59a481b24e46ba5d607e3cd42aeea6129bd8
MD5 1f0b449499b8811d74e99726d337fb91
SHA1 b8e6bbbfcff72b0e0fadc2f15504590b1c46afe9
SHA512 3a9d71ae604acf31ebb173f1f34afb359bbac37b6cc92051cf21652b85367969424b9e2466398e0c74bb5adc986992ab58dd466fcfd95cdb51022c449edbbbbc
SSDEEP 12288:xLF9cPbIqSDV788wpGu/R2Cpe0LgoL1BH4bu5BySdKsV2J8h30y9cZNJN:Z0jYD58bGu/JU0LgovHJBywVqHy9cZP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

8862

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GetDateFormatW GetNativeSystemInfo SetLocaleInfoA FindActCtxSectionGuid InterlockedDecrement GetProfileSectionA SetEvent SleepEx GetCurrentThread GetConsoleAliasesLengthA SwitchToFiber GetStringTypeExW DnsHostnameToComputerNameW lstrcpynW GetMailslotInfo GetStdHandle GetProcAddress VirtualAlloc PeekConsoleInputW SetFileAttributesA GetAtomNameA UnhandledExceptionFilter LocalAlloc GetModuleFileNameA GetModuleHandleA GetConsoleTitleW GetFileTime ReadConsoleInputW GetConsoleProcessList lstrcpyW LCMapStringW SetUnhandledExceptionFilter GetStartupInfoW EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetModuleHandleW Sleep ExitProcess GetLastError WriteFile SetFilePointer HeapFree CloseHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind HeapReAlloc ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

winhttp

WinHttpCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

1f0b449499b8811d74e99726d337fb91

kernel32

winhttp