b75c5359656516c8ce89cbd040ebf6f3094b1a62685b3ec5d309acdcab6f3fcb

General

Target
b75c5359656516c8ce89cbd040ebf6f3094b1a62685b3ec5d309acdcab6f3fcb
Size 310KB
Sample220201-qmnansfcc3
SHA256 b75c5359656516c8ce89cbd040ebf6f3094b1a62685b3ec5d309acdcab6f3fcb
MD5 d5836a8c77052d2cb956cdd64f48bed6
SHA1 411254df2b28a7d9ac944eae7e12568f001c0b96
SHA512 29c37ee3849512e549bb14e0aa193f826e8084f696b9f1c6d12822bf2bef24c56b87d3bcc85593620eb3d6d416e36dc41cb03034a6a8a795badc52afb24b7d3f
SSDEEP 6144:BGDGd/ZQl/Ilj0KD0ijMtfjTQT2BlQTWrgwhhFRlbth/YyD4c:BuQZ4/UbIgMhTQTGQwhh7lbth/D
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b75c5359656516c8ce89cbd040ebf6f3094b1a62685b3ec5d309acdcab6f3fcb

.exe 310KB

b75c5359656516c8ce89cbd040ebf6f3094b1a62685b3ec5d309acdcab6f3fcb

IMPHASH 02b8c0715a2ee9075227bc28cc3779b2
SHA256 b75c5359656516c8ce89cbd040ebf6f3094b1a62685b3ec5d309acdcab6f3fcb
MD5 d5836a8c77052d2cb956cdd64f48bed6
SHA1 411254df2b28a7d9ac944eae7e12568f001c0b96
SHA512 29c37ee3849512e549bb14e0aa193f826e8084f696b9f1c6d12822bf2bef24c56b87d3bcc85593620eb3d6d416e36dc41cb03034a6a8a795badc52afb24b7d3f
SSDEEP 6144:BGDGd/ZQl/Ilj0KD0ijMtfjTQT2BlQTWrgwhhFRlbth/YyD4c:BuQZ4/UbIgMhTQTGQwhh7lbth/D
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

56112

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ZombifyActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigA FindFirstFileExA GetDriveTypeW FreeEnvironmentStringsW SetProcessPriorityBoost FindNextVolumeA SetCurrentDirectoryA GetLongPathNameA TlsSetValue SetComputerNameExA FindAtomW BuildCommDCBAndTimeoutsA VirtualProtect GetModuleHandleA GlobalAlloc InitializeCriticalSection TlsGetValue GetCommandLineW InterlockedDecrement GetCalendarInfoA CopyFileA OutputDebugStringW SetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeaps GlobalWire HeapCompact GetStartupInfoA GetDiskFreeSpaceExA GetCPInfoExA GetWindowsDirectoryW GetSystemWow64DirectoryA SetLastError WriteProfileSectionW GetCalendarInfoW GetProfileStringA SetConsoleCursorPosition GetLastError DeleteVolumeMountPointW ContinueDebugEvent WriteFile GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryW GlobalFindAtomA FindNextChangeNotification CreateActCtxA GetMailslotInfo GetPrivateProfileIntA _lread DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceA WriteConsoleW GetPrivateProfileSectionA WritePrivateProfileSectionA GetPrivateProfileStructA TryEnterCriticalSection GetPrivateProfileSectionNamesW GetFileAttributesExW LocalFileTimeToFileTime MoveFileW GetVolumePathNameA TerminateProcess lstrcmpW GetComputerNameA FindActCtxSectionStringA GetThreadContext MoveFileExA GetProcAddress GlobalCompact UnregisterWait BuildCommDCBW GlobalDeleteAtom GetShortPathNameW OpenEventA SetCommTimeouts WaitNamedPipeW CreateIoCompletionPort GetPrivateProfileSectionNamesA FindResourceExW GetSystemTimeAsFileTime GetSystemInfo FreeEnvironmentStringsA GetLocalTime OpenSemaphoreA WriteProfileStringA SetFileShortNameW lstrcpyW VerLanguageNameW GetThreadSelectorEntry GetSystemTime UnlockFile GetConsoleCP GetConsoleAliasA SetConsoleScreenBufferSize GetAtomNameA WriteConsoleInputW CreateMailslotA SetCommState SetHandleCount _lopen ResetWriteWatch ClearCommBreak GetModuleHandleW GetOverlappedResult EnumDateFormatsA GetConsoleAliasExesLengthW WriteConsoleOutputCharacterA HeapFree OpenMutexW GetStringTypeW SetFilePointer PostQueuedCompletionStatus AreFileApisANSI OpenWaitableTimerW GetCurrentProcess PeekNamedPipe GetCompressedFileSizeW FindNextVolumeMountPointA GetFullPathNameA WriteProfileStringW InitAtomTable GlobalAddAtomW TerminateJobObject SetFirmwareEnvironmentVariableA GetBinaryTypeW LeaveCriticalSection QueryDosDeviceW HeapSetInformation CreateNamedPipeA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind MoveFileA GetCommandLineA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW IsDebuggerPresent TlsAlloc GetCurrentThreadId TlsFree CloseHandle GetACP GetOEMCP GetCPInfo IsValidCodePage ExitProcess GetStdHandle GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc FlushFileBuffers GetConsoleMode DebugBreak OutputDebugStringA LoadLibraryW InitializeCriticalSectionAndSpinCount SetStdHandle MultiByteToWideChar GetStringTypeA LCMapStringA LCMapStringW GetLocaleInfoA LoadLibraryA WriteConsoleA CreateFileA

user32

OemToCharA

advapi32

GetFileSecurityW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

b75c5359656516c8ce89cbd040ebf6f3094b1a62685b3ec5d309acdcab6f3fcb

kernel32

user32

advapi32

msimg32