94b04d09877f0b705a7ecf6ef6d92e9ee500b0e4f94a5a9b2061a98ceb8b6a77

General

Target
94b04d09877f0b705a7ecf6ef6d92e9ee500b0e4f94a5a9b2061a98ceb8b6a77
Size 310KB
Sample220201-y1wszabcap
SHA256 94b04d09877f0b705a7ecf6ef6d92e9ee500b0e4f94a5a9b2061a98ceb8b6a77
MD5 e1b5338fada02367c85ba98dc531130f
SHA1 7857c48f2c6607ab1753445e705d0301976e1dc3
SHA512 475c8fbf989328d18de3d84f520480a3f17d497e90f71c6bf380c149a11eb610782d03b0fb1d332f18eb348ac7b713919f1e6d921a7b919c61a96259bf5436f6
SSDEEP 6144:v+IJRc8cKrjnwsZn+7mqP6UNgGZsF/8rFkOLlxj9BC2:vF08LDVFMmqP6Uut/8rFkO722
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

94b04d09877f0b705a7ecf6ef6d92e9ee500b0e4f94a5a9b2061a98ceb8b6a77

.exe 310KB

94b04d09877f0b705a7ecf6ef6d92e9ee500b0e4f94a5a9b2061a98ceb8b6a77

IMPHASH ef5e0b667b13bc73d1458953ca9050bb
SHA256 94b04d09877f0b705a7ecf6ef6d92e9ee500b0e4f94a5a9b2061a98ceb8b6a77
MD5 e1b5338fada02367c85ba98dc531130f
SHA1 7857c48f2c6607ab1753445e705d0301976e1dc3
SHA512 475c8fbf989328d18de3d84f520480a3f17d497e90f71c6bf380c149a11eb610782d03b0fb1d332f18eb348ac7b713919f1e6d921a7b919c61a96259bf5436f6
SSDEEP 6144:v+IJRc8cKrjnwsZn+7mqP6UNgGZsF/8rFkOLlxj9BC2:vF08LDVFMmqP6Uut/8rFkO722
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

56096

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ZombifyActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigA FindFirstFileExA GetDriveTypeW FreeEnvironmentStringsW SetProcessPriorityBoost FindNextVolumeA SetCurrentDirectoryA GetLongPathNameA TlsSetValue SetComputerNameExA FindAtomW BuildCommDCBAndTimeoutsA VirtualProtect GetModuleHandleA GlobalAlloc InitializeCriticalSection TlsGetValue GetCommandLineW InterlockedDecrement GetCalendarInfoA CopyFileA OutputDebugStringW SetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeaps GlobalWire HeapCompact GetStartupInfoA GetDiskFreeSpaceExA GetCPInfoExA GetWindowsDirectoryW GetSystemWow64DirectoryA SetLastError WriteProfileSectionW GetCalendarInfoW GetProfileStringA SetConsoleCursorPosition GetLastError ContinueDebugEvent WriteFile GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryW GlobalFindAtomA FindNextChangeNotification CreateActCtxA GetMailslotInfo GetPrivateProfileIntA _lread DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceA WriteConsoleW GetPrivateProfileSectionA WritePrivateProfileSectionA GetPrivateProfileStructA TryEnterCriticalSection GetPrivateProfileSectionNamesW GetFileAttributesExW LocalFileTimeToFileTime MoveFileW GetVolumePathNameA TerminateProcess lstrcmpW GetComputerNameA FindActCtxSectionStringA GetThreadContext MoveFileExA GetProcAddress GlobalCompact UnregisterWait BuildCommDCBW GlobalDeleteAtom GetShortPathNameW OpenEventA SetCommTimeouts WaitNamedPipeW CreateIoCompletionPort GetPrivateProfileSectionNamesA FindResourceExW GetSystemTimeAsFileTime GetSystemInfo FreeEnvironmentStringsA GetLocalTime OpenSemaphoreA WriteProfileStringA lstrcpyW VerLanguageNameW GetThreadSelectorEntry GetSystemTime UnlockFile GetConsoleCP GetConsoleAliasA SetConsoleScreenBufferSize GetAtomNameA WriteConsoleInputW CreateMailslotA SetCommState SetHandleCount _lopen ResetWriteWatch ClearCommBreak GetModuleHandleW GetOverlappedResult EnumDateFormatsA GetConsoleAliasExesLengthW WriteConsoleOutputCharacterA HeapFree OpenMutexW GetStringTypeW SetFilePointer PostQueuedCompletionStatus AreFileApisANSI OpenWaitableTimerW GetCurrentProcess PeekNamedPipe GetCompressedFileSizeW FindNextVolumeMountPointA GetFullPathNameA WriteProfileStringW InitAtomTable GlobalAddAtomW TerminateJobObject SetFirmwareEnvironmentVariableA GetBinaryTypeW LeaveCriticalSection QueryDosDeviceW HeapSetInformation CreateNamedPipeA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind MoveFileA GetCommandLineA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW IsDebuggerPresent TlsAlloc GetCurrentThreadId TlsFree CloseHandle GetACP GetOEMCP GetCPInfo IsValidCodePage ExitProcess GetStdHandle GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc FlushFileBuffers GetConsoleMode DebugBreak OutputDebugStringA LoadLibraryW InitializeCriticalSectionAndSpinCount SetStdHandle MultiByteToWideChar GetStringTypeA LCMapStringA LCMapStringW GetLocaleInfoA LoadLibraryA WriteConsoleA CreateFileA

user32

OemToCharA

advapi32

GetFileSecurityW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

94b04d09877f0b705a7ecf6ef6d92e9ee500b0e4f94a5a9b2061a98ceb8b6a77

kernel32

user32

advapi32

msimg32