0f56c703e9b7ddeb90646927bac05a5c6d95308c8e13b88e5d4f4b572423e036

Resubmissions

10/08/2026, 19:25

260810-x47h7swepf10

24/01/2022, 04:27

220124-e24qesbhd51

Sharing

Copy URL Twitter E-mail

General

Target
0f56c703e9b7ddeb90646927bac05a5c6d95308c8e13b88e5d4f4b572423e036
Size 339KB
Sample220124-e24qesbhd5
SHA256 0f56c703e9b7ddeb90646927bac05a5c6d95308c8e13b88e5d4f4b572423e036
MD5 808502752ca0492aca995e9b620d507b
SHA1 668c40bb6c792b3502b4eefd0916febc8dbd5182
SHA512 9a35ea626bb411531efe905a4a81c3dfdebf86b222d3005e846c87f9501b3d91a6164ef44c2ca72070fe8c33f2bfbfb58b4f96353be1aa8c2c6f9390827a5afa
SSDEEP 6144:1fuJYaRk/qxEuUPAVHKZxgHb95dL2f552yxhMsxEc8d7:1fGFRw3+P/PuiX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0f56c703e9b7ddeb90646927bac05a5c6d95308c8e13b88e5d4f4b572423e036

.exe 339KB

0f56c703e9b7ddeb90646927bac05a5c6d95308c8e13b88e5d4f4b572423e036

IMPHASH 23867a89c2b8fc733be6cf5ef902f2d1
SHA256 0f56c703e9b7ddeb90646927bac05a5c6d95308c8e13b88e5d4f4b572423e036
MD5 808502752ca0492aca995e9b620d507b
SHA1 668c40bb6c792b3502b4eefd0916febc8dbd5182
SHA512 9a35ea626bb411531efe905a4a81c3dfdebf86b222d3005e846c87f9501b3d91a6164ef44c2ca72070fe8c33f2bfbfb58b4f96353be1aa8c2c6f9390827a5afa
SSDEEP 6144:1fuJYaRk/qxEuUPAVHKZxgHb95dL2f552yxhMsxEc8d7:1fGFRw3+P/PuiX
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

14984

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

secur32

AcquireCredentialsHandleW QuerySecurityContextToken AcceptSecurityContext

kernel32

Sleep WTSGetActiveConsoleSessionId GetLastError GetCurrentProcess CreateThread LoadLibraryW LoadLibraryExW UnregisterWaitEx QueryDepthSList InterlockedPopEntrySList ReleaseSemaphore DuplicateHandle VirtualProtect VirtualFree VirtualAlloc GetVersionExW GetModuleHandleA FreeLibraryAndExitThread GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SetThreadPriority RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection WideCharToMultiByte SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount GetProcAddress RtlPcToFileHeader EncodePointer RaiseException RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList FreeLibrary DecodePointer ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar GetCommandLineA GetCommandLineW GetACP HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType GetCurrentThread FlushFileBuffers GetConsoleCP GetConsoleMode CloseHandle WaitForSingleObjectEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap SetFilePointerEx WriteConsoleW HeapSize HeapReAlloc CreateFileW CreateTimerQueue SetEvent SignalObjectAndWait SwitchToThread

advapi32

GetTokenInformation CreateProcessAsUserW CreateProcessWithTokenW DuplicateTokenEx OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW LookupAccountSidW CopySid GetLengthSid

ole32

CoTaskMemAlloc CLSIDFromString StgCreateDocfileOnILockBytes CoGetInstanceFromIStorage CoInitialize CreateILockBytesOnHGlobal

ws2_32

freeaddrinfo setsockopt shutdown recv send closesocket bind WSAGetLastError socket WSACleanup getaddrinfo WSAStartup accept select listen __WSAFDIsSet connect

Name

.text

Size

219KB

Virtual Size

218KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

89KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ