104f89105ef08c142b992dcc9915d4e0284529bfb6f07f522bd0d805800e690b

General

Target
104f89105ef08c142b992dcc9915d4e0284529bfb6f07f522bd0d805800e690b
Size 333KB
Sample220126-azsg6aahbl
SHA256 104f89105ef08c142b992dcc9915d4e0284529bfb6f07f522bd0d805800e690b
MD5 8a22d0c2ca9db6d58495bb87df521949
SHA1 294e946b60efc3ed1283e6aa576906e833abc0c3
SHA512 cccc593cbb92f3cd1055825d50012368f406bfeb19d9a4ce566999ef09518d728adfb0aed12047e3b376a47058d9afdea126a09fcc70ab022ed50c7e3f6518c6
SSDEEP 6144:9liK7Lp57e5/DIIcqB7LzHIqwcAdRbLAJsdWvhqUplcxpqecwItzBS:9lnbmbJr1noqwddtLDYpwWebT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

104f89105ef08c142b992dcc9915d4e0284529bfb6f07f522bd0d805800e690b

.exe 333KB

104f89105ef08c142b992dcc9915d4e0284529bfb6f07f522bd0d805800e690b

IMPHASH 04a163d3ee35887696fe3625c3dbe935
SHA256 104f89105ef08c142b992dcc9915d4e0284529bfb6f07f522bd0d805800e690b
MD5 8a22d0c2ca9db6d58495bb87df521949
SHA1 294e946b60efc3ed1283e6aa576906e833abc0c3
SHA512 cccc593cbb92f3cd1055825d50012368f406bfeb19d9a4ce566999ef09518d728adfb0aed12047e3b376a47058d9afdea126a09fcc70ab022ed50c7e3f6518c6
SSDEEP 6144:9liK7Lp57e5/DIIcqB7LzHIqwcAdRbLAJsdWvhqUplcxpqecwItzBS:9lnbmbJr1noqwddtLDYpwWebT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

78832

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapLock CreateNamedPipeW TerminateThread DeactivateActCtx GetConsoleAliasesLengthA GetVersionExW GetConsoleCP GetDefaultCommConfigA FindFirstFileExW GetDriveTypeW FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA SetCurrentDirectoryW GetLongPathNameA TlsGetValue SetComputerNameExA FindAtomA BuildCommDCBAndTimeoutsW VirtualProtect LoadLibraryA GlobalAlloc TryEnterCriticalSection TlsSetValue GetCommandLineA InterlockedDecrement GetCalendarInfoA DeleteFileA ZombifyActCtx OutputDebugStringA GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeaps GlobalUnWire GetProcessHeap GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetLastError GetProfileStringA WriteProfileSectionA GetProfileStringW GetConsoleCursorInfo SetLastError DeleteVolumeMountPointA DebugBreak GetPrivateProfileSectionW ReadFileScatter GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryA TerminateProcess GlobalFindAtomA FindCloseChangeNotification CreateActCtxW SetMailslotInfo InterlockedExchange DefineDosDeviceA FindVolumeMountPointClose EndUpdateResourceA WriteConsoleA GetPrivateProfileSectionA WritePrivateProfileSectionW GetPrivateProfileStructA GetPrivateProfileSectionNamesA GetFileAttributesExA FileTimeToLocalFileTime MoveFileA GetVolumePathNameW HeapUnlock SetDefaultCommConfigA FindActCtxSectionStringA SetThreadContext MoveFileExA GlobalUnlock UnregisterWait BuildCommDCBA GlobalDeleteAtom GetBinaryTypeA OpenEventW SetCommTimeouts WaitNamedPipeA GetPrivateProfileSectionNamesW FindResourceExW GetSystemTimeAsFileTime GetSystemInfo SetLocalTime OpenSemaphoreA lstrcmpW GetProcAddress CreateIoCompletionPort SetFileShortNameW lstrcpyW VerLanguageNameW GetThreadSelectorEntry SetSystemTime GetConsoleAliasW SetConsoleScreenBufferSize AllocConsole GetAtomNameA WriteConsoleInputA TransactNamedPipe GetCommState _lopen ResetWriteWatch GetConsoleOutputCP GetModuleHandleA EnumDateFormatsW LockFile GetConsoleAliasExesLengthA WriteConsoleOutputCharacterW HeapReAlloc SetFilePointer PostQueuedCompletionStatus SetFileApisToANSI CancelWaitableTimer GetCurrentProcess SetNamedPipeHandleState GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameW WriteProfileStringW DeleteAtom GlobalAddAtomA TerminateJobObject QueryDosDeviceW InitializeCriticalSection SetFirmwareEnvironmentVariableW GetBinaryTypeW InterlockedIncrement WideCharToMultiByte MultiByteToWideChar InterlockedCompareExchange Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW LCMapStringA LCMapStringW GetCPInfo HeapValidate IsBadReadPtr GetStringTypeW GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW GetFileType OutputDebugStringW ExitProcess LoadLibraryW GetModuleFileNameA SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapAlloc HeapSize VirtualAlloc IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode InitializeCriticalSectionAndSpinCount GetLocaleInfoW SetStdHandle CloseHandle CreateFileA

user32

OemToCharA

Sharing

General

Malware Config

Signatures

File Explorer

104f89105ef08c142b992dcc9915d4e0284529bfb6f07f522bd0d805800e690b

kernel32

user32