b179fb0514a15397b24605b401d20caa1def0ead75f21055342add8a76cd2ed2

General

Target
b179fb0514a15397b24605b401d20caa1def0ead75f21055342add8a76cd2ed2
Size 266KB
Sample220131-f18tesgbe3
SHA256 b179fb0514a15397b24605b401d20caa1def0ead75f21055342add8a76cd2ed2
MD5 055b3acba4a9d6c5a862418c0fd5ece1
SHA1 116d5ba797b39b6a57f0163be88927ed5ca74820
SHA512 069f0662b7130808731ac4f38d9f624c5c7b3c6c01557f933bf254e73f3ee0dea6e90ffefae246207229f0e965ad101eb5a3b45d07ec651da7f254a3fc9e2e15
SSDEEP 3072:WXXH4VfbaTLcs5NlD8bFy0/rFb2o8PTazf6PilncVjItVggjcGkNIVqI:WX3G0nlk40/rFbJ8b1Pqncq7ITsq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b179fb0514a15397b24605b401d20caa1def0ead75f21055342add8a76cd2ed2

.exe 266KB

b179fb0514a15397b24605b401d20caa1def0ead75f21055342add8a76cd2ed2

IMPHASH b54f072419f24418258899aa1cee7821
SHA256 b179fb0514a15397b24605b401d20caa1def0ead75f21055342add8a76cd2ed2
MD5 055b3acba4a9d6c5a862418c0fd5ece1
SHA1 116d5ba797b39b6a57f0163be88927ed5ca74820
SHA512 069f0662b7130808731ac4f38d9f624c5c7b3c6c01557f933bf254e73f3ee0dea6e90ffefae246207229f0e965ad101eb5a3b45d07ec651da7f254a3fc9e2e15
SSDEEP 3072:WXXH4VfbaTLcs5NlD8bFy0/rFb2o8PTazf6PilncVjItVggjcGkNIVqI:WX3G0nlk40/rFbJ8b1Pqncq7ITsq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

9758

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceA GetConsoleAliasesLengthW VirtualQuery GetDefaultCommConfigW InterlockedIncrement InterlockedDecrement GetComputerNameW SetEvent SleepEx GetModuleHandleW ConvertFiberToThread CreateRemoteThread SetFileTime GetLocaleInfoW GetCalendarInfoW GetVersionExW DnsHostnameToComputerNameW GetMailslotInfo RaiseException GetStringTypeExA LCMapStringA GetStdHandle GetProcAddress VirtualAlloc GetAtomNameA LoadLibraryA LocalAlloc FoldStringW GetModuleFileNameA SetConsoleTitleW GetModuleHandleA UpdateResourceW GetConsoleTitleW PeekConsoleInputA DeleteFileW GetConsoleProcessList SetFileAttributesW GetProcessHeap UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetCommandLineA GetStartupInfoA EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar GetLastError ReadFile WriteFile HeapFree CloseHandle TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage CreateFileA SetStdHandle HeapAlloc HeapReAlloc FlushFileBuffers HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

b179fb0514a15397b24605b401d20caa1def0ead75f21055342add8a76cd2ed2

kernel32

winhttp

msimg32