56e3dccb8e118dc3a7e764fcd10300d04b02cd09d3b3b8c33a002772dafea04c

General

Target
56e3dccb8e118dc3a7e764fcd10300d04b02cd09d3b3b8c33a002772dafea04c
Size 351KB
Sample220129-qgca8abbej
SHA256 56e3dccb8e118dc3a7e764fcd10300d04b02cd09d3b3b8c33a002772dafea04c
MD5 a482325e7854f5ac816c9d894b1d662f
SHA1 be3383f6bc92281b5cade90c25177696c1439ed7
SHA512 252b8270b8503253fc21918c49e4437627c04a4f09a278af95bf4a9b1ca9988f8ee53bcfdcc75048e0f7749daf99edfc31363284ee3e214cff65b8bb41c6cda2
SSDEEP 6144:dpCimAq2rUM05NzJnOEGsOwaJSPxwr7ITsqYigavwVfG:dpCzAqdTfnOEXlaJgGr7u7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

56e3dccb8e118dc3a7e764fcd10300d04b02cd09d3b3b8c33a002772dafea04c

.exe 351KB

56e3dccb8e118dc3a7e764fcd10300d04b02cd09d3b3b8c33a002772dafea04c

IMPHASH 63af0ddc50c5938712eb9f53c26debe6
SHA256 56e3dccb8e118dc3a7e764fcd10300d04b02cd09d3b3b8c33a002772dafea04c
MD5 a482325e7854f5ac816c9d894b1d662f
SHA1 be3383f6bc92281b5cade90c25177696c1439ed7
SHA512 252b8270b8503253fc21918c49e4437627c04a4f09a278af95bf4a9b1ca9988f8ee53bcfdcc75048e0f7749daf99edfc31363284ee3e214cff65b8bb41c6cda2
SSDEEP 6144:dpCimAq2rUM05NzJnOEGsOwaJSPxwr7ITsqYigavwVfG:dpCzAqdTfnOEXlaJgGr7u7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

10110

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW AllocConsole GetDefaultCommConfigW InterlockedIncrement InterlockedDecrement GetComputerNameW SetEvent FindActCtxSectionStringA GlobalAlloc GetLocaleInfoW Sleep GetCalendarInfoW DnsHostnameToComputerNameW GetMailslotInfo SetConsoleTitleA RaiseException GetStringTypeExA GetProcAddress VirtualAlloc SetStdHandle SetFileAttributesA GetAtomNameA LoadLibraryA LocalAlloc FoldStringA GetSystemInfo GetModuleFileNameA GetModuleHandleA UpdateResourceW CreateMailslotA GetConsoleTitleW GetFileTime PeekConsoleInputA DeleteCriticalSection DeleteFileW GetConsoleProcessList LCMapStringW SwitchToThread WriteConsoleW GetConsoleOutputCP MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetLastError EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind ReadFile ExitProcess WriteFile GetStdHandle SetHandleCount GetFileType HeapFree CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer CreateFileA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetEndOfFile GetProcessHeap HeapSize WriteConsoleA

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

56e3dccb8e118dc3a7e764fcd10300d04b02cd09d3b3b8c33a002772dafea04c

kernel32

winhttp

msimg32