31b92a2a2a6fcd58fefa3bf7471911851284cb34e5ff668b99f724c653e3d77c

Sharing

Copy URL Twitter E-mail

General

Target
31b92a2a2a6fcd58fefa3bf7471911851284cb34e5ff668b99f724c653e3d77c
Size 592KB
Sample220201-s8stdshaaj
SHA256 31b92a2a2a6fcd58fefa3bf7471911851284cb34e5ff668b99f724c653e3d77c
MD5 0febdea9572d614806a0400344694036
SHA1 f8183db409a49712d8bc4b0200c187e0531d2b76
SHA512 6573b7d6798a70d057c47bed1631ab9e95950cc36a4df72ce80c9956d590e4e9042ab1ca92bbf66beb16fffaefb95b3dc8f648f904d7049ade1fbf51440ffad1
SSDEEP 12288:45a+QFNb+h5T4KS9O2h8QvSRaFGih4xa9icU0:UaLFNb+h5T4KSN8Qvq0h4xWicU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

31b92a2a2a6fcd58fefa3bf7471911851284cb34e5ff668b99f724c653e3d77c

.exe 592KB

31b92a2a2a6fcd58fefa3bf7471911851284cb34e5ff668b99f724c653e3d77c

IMPHASH 431a18a58dd9d353ff792490702d63c9
SHA256 31b92a2a2a6fcd58fefa3bf7471911851284cb34e5ff668b99f724c653e3d77c
MD5 0febdea9572d614806a0400344694036
SHA1 f8183db409a49712d8bc4b0200c187e0531d2b76
SHA512 6573b7d6798a70d057c47bed1631ab9e95950cc36a4df72ce80c9956d590e4e9042ab1ca92bbf66beb16fffaefb95b3dc8f648f904d7049ade1fbf51440ffad1
SSDEEP 12288:45a+QFNb+h5T4KS9O2h8QvSRaFGih4xa9icU0:UaLFNb+h5T4KSN8Qvq0h4xWicU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

228641

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapSize OpenMutexW CreateProcessW WaitForSingleObject CreateMutexW GetModuleFileNameW Sleep GetProcessHeap HeapAlloc GetLastError HeapFree GetLogicalDrives MoveFileExW SetFilePointerEx GetConsoleMode GetConsoleCP SetFileAttributesW GetFileAttributesW FlushFileBuffers SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetFileSizeEx ReadFile CloseHandle CreateFileW WriteFile GetCommandLineA GetOEMCP MultiByteToWideChar WideCharToMultiByte FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW FormatMessageW EncodePointer DecodePointer RaiseException GetCurrentThreadId IsProcessorFeaturePresent QueueUserWorkItem GetModuleHandleExW EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection QueryPerformanceCounter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW GetProcAddress DuplicateHandle WaitForSingleObjectEx GetCurrentProcess GetCurrentThread GetStringTypeW CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess SetEvent ResetEvent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead CreateTimerQueue SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes FreeLibrary FreeLibraryAndExitThread GetModuleHandleA LoadLibraryExW GetVersionExW VirtualAlloc VirtualProtect VirtualFree ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx LoadLibraryW RtlUnwind SetEnvironmentVariableW ExitProcess GetStdHandle GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetFileType GetTimeZoneInformation IsValidCodePage GetACP WriteConsoleW

advapi32

CryptImportKey CryptEncrypt CryptDuplicateKey CryptReleaseContext CryptGenKey CryptExportKey CryptAcquireContextW RegOpenKeyExW RegDeleteValueW RegCreateKeyA RegCloseKey RegQueryValueExA RegSetValueExW RegSetValueExA RegOpenKeyExA CryptDestroyKey

shell32

SHEmptyRecycleBinW

crypt32

CryptStringToBinaryA

mpr

WNetGetConnectionW

netapi32

NetApiBufferFree NetShareEnum

iphlpapi

IcmpCloseHandle GetAdaptersInfo IcmpCreateFile IcmpSendEcho

ws2_32

inet_addr