e396a39a8305b5815cbf04ed134d2eb49299d4cadf62e993e16b13a82870c4dc

General

Target
e396a39a8305b5815cbf04ed134d2eb49299d4cadf62e993e16b13a82870c4dc
Size 310KB
Sample220201-lsxdbacddr
SHA256 e396a39a8305b5815cbf04ed134d2eb49299d4cadf62e993e16b13a82870c4dc
MD5 496c2dd6dac1396461f891d5d5d7ccd8
SHA1 d6a5272045224990b033bf9353e6ff4702e657ec
SHA512 b200a4a1cec2b5e2d9b921a16cc034c4633f657c612446b7fce58ea8fb5c45dd9e984378ab8147bd23f6b7fd2df9d9d3e792c3370d4616d4067c581d6bb98317
SSDEEP 6144:BoSK59ghPqjfrNjVupuv34IfUbXtpm2Xku8IkZgptEn1KPXqLgLKaP09lE79:BdY0PgfrNJu2IIfUbXtpmg8IkemQXi6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e396a39a8305b5815cbf04ed134d2eb49299d4cadf62e993e16b13a82870c4dc

.exe 310KB

e396a39a8305b5815cbf04ed134d2eb49299d4cadf62e993e16b13a82870c4dc

IMPHASH 7b6d6cf404065cc0908a78aad9aa1788
SHA256 e396a39a8305b5815cbf04ed134d2eb49299d4cadf62e993e16b13a82870c4dc
MD5 496c2dd6dac1396461f891d5d5d7ccd8
SHA1 d6a5272045224990b033bf9353e6ff4702e657ec
SHA512 b200a4a1cec2b5e2d9b921a16cc034c4633f657c612446b7fce58ea8fb5c45dd9e984378ab8147bd23f6b7fd2df9d9d3e792c3370d4616d4067c581d6bb98317
SSDEEP 6144:BoSK59ghPqjfrNjVupuv34IfUbXtpm2Xku8IkZgptEn1KPXqLgLKaP09lE79:BdY0PgfrNJu2IIfUbXtpmg8IkemQXi6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

56128

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigW FindFirstFileExA GetDriveTypeA FreeEnvironmentStringsW SetProcessPriorityBoost FindNextVolumeW SetCurrentDirectoryA GetLongPathNameA TlsGetValue SetComputerNameExW FindAtomW BuildCommDCBAndTimeoutsA VirtualProtect GetModuleHandleA GlobalAlloc InitializeCriticalSection GetCommandLineW InterlockedDecrement GetCalendarInfoA CopyFileW ZombifyActCtx OutputDebugStringW SetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringA GetProcessHeap GlobalWire HeapCompact GetStartupInfoA GetDiskFreeSpaceExA GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryA SetLastError WriteProfileSectionW GetCalendarInfoW GetProfileStringA SetConsoleCursorPosition GetLastError DeleteVolumeMountPointA ContinueDebugEvent ReadFileScatter GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryA GlobalFindAtomA FindNextChangeNotification CreateActCtxA GetMailslotInfo GetPrivateProfileIntA _lread InterlockedExchange DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceA WriteConsoleW GetPrivateProfileSectionA WritePrivateProfileSectionA GetPrivateProfileStructA TryEnterCriticalSection GetPrivateProfileSectionNamesW GetFileAttributesExW LocalFileTimeToFileTime MoveFileW GetVolumePathNameA TerminateProcess lstrcmpW GetComputerNameA FindActCtxSectionStringA GetThreadContext MoveFileExA GetProcAddress GlobalCompact UnregisterWait BuildCommDCBW GlobalDeleteAtom GetShortPathNameA OpenEventA SetCommTimeouts WaitNamedPipeW CreateIoCompletionPort GetPrivateProfileSectionNamesA FindResourceExW GetSystemTimeAsFileTime GetSystemInfo FreeEnvironmentStringsA OpenSemaphoreA GetLocalTime WriteProfileStringA SetFileShortNameW lstrcpyW VerLanguageNameA GetThreadSelectorEntry GetSystemTime UnlockFile GetConsoleCP GetConsoleAliasA SetConsoleScreenBufferSize GetAtomNameA GetConsoleAliasExesLengthA WriteConsoleInputW CreateMailslotA SetCommState SetHandleCount _lopen GetConsoleAliasExesLengthW ResetWriteWatch ClearCommBreak GetOverlappedResult EnumDateFormatsA GetModuleHandleW WriteConsoleOutputCharacterA HeapFree OpenMutexW GetStringTypeW SetFilePointer PostQueuedCompletionStatus AreFileApisANSI OpenWaitableTimerW GetCurrentProcess PeekNamedPipe GetCompressedFileSizeW FindNextVolumeMountPointA GetFullPathNameA WriteProfileStringW InitAtomTable GlobalAddAtomW TerminateJobObject SetFirmwareEnvironmentVariableA GetBinaryTypeW QueryDosDeviceA LeaveCriticalSection HeapSetInformation CreateNamedPipeA CreateFileA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind MoveFileA GetCommandLineA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW IsDebuggerPresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree CloseHandle GetACP GetOEMCP GetCPInfo IsValidCodePage ExitProcess GetStdHandle GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc FlushFileBuffers GetConsoleMode DebugBreak OutputDebugStringA LoadLibraryW InitializeCriticalSectionAndSpinCount SetStdHandle MultiByteToWideChar GetStringTypeA LCMapStringA LCMapStringW GetLocaleInfoA LoadLibraryA WriteConsoleA

user32

OemToCharA

advapi32

GetFileSecurityW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

e396a39a8305b5815cbf04ed134d2eb49299d4cadf62e993e16b13a82870c4dc

kernel32

user32

advapi32

msimg32