a4641d2acd74a7d949aa8ce0a525fc3d1b9fe612c0642ba776e4a1f6e3b0e98d

General

Target
a4641d2acd74a7d949aa8ce0a525fc3d1b9fe612c0642ba776e4a1f6e3b0e98d
Size 350KB
Sample220129-vvnzdsfae2
SHA256 a4641d2acd74a7d949aa8ce0a525fc3d1b9fe612c0642ba776e4a1f6e3b0e98d
MD5 4f628543526dec2aea88f0ecbb8aac8b
SHA1 4ddc84b4f7f8a8ac4431239274ef5162649a7616
SHA512 11e882c7fdde4583b59b81e961bce82b41158f6056f7d6aa805d0f2c7b6e5532afbf2f13849391bf7d13f852c730a522f8817c72a64917f5359bedefa17e5da7
SSDEEP 6144:t5yzLoYSnku7CkcWadKRXU7ITsqYigavwVfG:t5yz8YSnz7pcARXU7u7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a4641d2acd74a7d949aa8ce0a525fc3d1b9fe612c0642ba776e4a1f6e3b0e98d

.exe 350KB

a4641d2acd74a7d949aa8ce0a525fc3d1b9fe612c0642ba776e4a1f6e3b0e98d

IMPHASH 660a691eaabe7c347823873c7d326c89
SHA256 a4641d2acd74a7d949aa8ce0a525fc3d1b9fe612c0642ba776e4a1f6e3b0e98d
MD5 4f628543526dec2aea88f0ecbb8aac8b
SHA1 4ddc84b4f7f8a8ac4431239274ef5162649a7616
SHA512 11e882c7fdde4583b59b81e961bce82b41158f6056f7d6aa805d0f2c7b6e5532afbf2f13849391bf7d13f852c730a522f8817c72a64917f5359bedefa17e5da7
SSDEEP 6144:t5yzLoYSnku7CkcWadKRXU7ITsqYigavwVfG:t5yz8YSnz7pcARXU7u7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

9883

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW VirtualQuery InterlockedIncrement InterlockedDecrement GetComputerNameW SetEvent FindResourceExA GetLocaleInfoW Sleep GetCalendarInfoW GetVersionExW DnsHostnameToComputerNameW GetMailslotInfo SetConsoleTitleA RaiseException GetStringTypeExA GetProcAddress VirtualAlloc PeekConsoleInputW SetStdHandle SetFileAttributesA GetAtomNameA LoadLibraryA LocalAlloc FoldStringA GetSystemInfo GetModuleFileNameA GetDefaultCommConfigA GetModuleHandleA UpdateResourceW GetConsoleTitleW GetFileTime DeleteCriticalSection DeleteFileW GetConsoleProcessList LCMapStringW SwitchToThread HeapSize GetProcessHeap MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetLastError RtlUnwind ReadFile ExitProcess WriteFile HeapFree CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile

winhttp

WinHttpCloseHandle

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

a4641d2acd74a7d949aa8ce0a525fc3d1b9fe612c0642ba776e4a1f6e3b0e98d

kernel32

winhttp

msimg32