931d5204f4ecb12169b298e0e61c63c4f8282c3775f9270044e9be8ede19abcc

General

Target
931d5204f4ecb12169b298e0e61c63c4f8282c3775f9270044e9be8ede19abcc
Size 300KB
Sample220130-mb5h2aafb6
SHA256 931d5204f4ecb12169b298e0e61c63c4f8282c3775f9270044e9be8ede19abcc
MD5 1803701bd6993d368e773d642685b50d
SHA1 6b1cd4eda9872b024b366750f37efac0e6faaa90
SHA512 5124973050b4096b6b96eeec3af00bca8e5883136090df908bba4b186f07feed8752d144df84fcfb1c67e9a55271b2eb80b65ae2aa650671571fc29605d5b3ca
SSDEEP 3072:tTwDV12MmJ45Zneaw69q0eJcrU9g00hKJTjsFbim45SVggjcGkNIVqIGpZa9uD6:tCV11wAeJM8JvsB745K7ITsq9wVfG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

931d5204f4ecb12169b298e0e61c63c4f8282c3775f9270044e9be8ede19abcc

.exe 300KB

931d5204f4ecb12169b298e0e61c63c4f8282c3775f9270044e9be8ede19abcc

IMPHASH 0ec2c89c6a88255f4d3cc69aff16c453
SHA256 931d5204f4ecb12169b298e0e61c63c4f8282c3775f9270044e9be8ede19abcc
MD5 1803701bd6993d368e773d642685b50d
SHA1 6b1cd4eda9872b024b366750f37efac0e6faaa90
SHA512 5124973050b4096b6b96eeec3af00bca8e5883136090df908bba4b186f07feed8752d144df84fcfb1c67e9a55271b2eb80b65ae2aa650671571fc29605d5b3ca
SSDEEP 3072:tTwDV12MmJ45Zneaw69q0eJcrU9g00hKJTjsFbim45SVggjcGkNIVqIGpZa9uD6:tCV11wAeJM8JvsB745K7ITsq9wVfG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

8915

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GetConsoleAliasesLengthW VirtualQuery InterlockedIncrement InterlockedDecrement SetEvent GetModuleHandleW SetFileTime FindResourceExA GetLocaleInfoW Sleep GetCalendarInfoW GetVersionExW GetStringTypeExW DnsHostnameToComputerNameW GetMailslotInfo SetConsoleTitleA RaiseException LCMapStringA GetProcAddress VirtualAlloc PeekConsoleInputW SetStdHandle SetFileAttributesA GetAtomNameA LoadLibraryA LocalAlloc FoldStringA GetSystemInfo GetModuleFileNameA GetDefaultCommConfigA GetModuleHandleA UpdateResourceW GetConsoleTitleW DeleteFileW GetConsoleProcessList SwitchToThread HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar GetLastError ReadFile ExitProcess WriteFile HeapFree CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CreateFileA HeapAlloc HeapReAlloc FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap

winhttp

WinHttpCloseHandle

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

931d5204f4ecb12169b298e0e61c63c4f8282c3775f9270044e9be8ede19abcc

kernel32

winhttp

msimg32