df8e055e2119ec713d20a71e240e6e3fcb81b286687acf3b41abe270c2b4585f

General

Target
df8e055e2119ec713d20a71e240e6e3fcb81b286687acf3b41abe270c2b4585f
Size 311KB
Sample220203-mverqagac5
SHA256 df8e055e2119ec713d20a71e240e6e3fcb81b286687acf3b41abe270c2b4585f
MD5 664d128640d74892135fcc469985204b
SHA1 4b7d720dc68a0c5877743c83f86dbe8d860fa62a
SHA512 6cd944431d0e26e5950b9498b7d71892636c8c8770931d64dbdb30db2df0927b2ccc540bfe802149616ecfc96b3d4f62c1c2816f8c3a98ec12118f7e15236287
SSDEEP 6144:FpWvGJM2ZycoLLoAWL58hNX6KMCd7kJRPmP7/UfKo/p:fYA5onpWL5+NiCd7kLPmo/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

df8e055e2119ec713d20a71e240e6e3fcb81b286687acf3b41abe270c2b4585f

.exe 311KB

df8e055e2119ec713d20a71e240e6e3fcb81b286687acf3b41abe270c2b4585f

IMPHASH d3e95b450bf99e0e3abca06689e7f7d8
SHA256 df8e055e2119ec713d20a71e240e6e3fcb81b286687acf3b41abe270c2b4585f
MD5 664d128640d74892135fcc469985204b
SHA1 4b7d720dc68a0c5877743c83f86dbe8d860fa62a
SHA512 6cd944431d0e26e5950b9498b7d71892636c8c8770931d64dbdb30db2df0927b2ccc540bfe802149616ecfc96b3d4f62c1c2816f8c3a98ec12118f7e15236287
SSDEEP 6144:FpWvGJM2ZycoLLoAWL58hNX6KMCd7kJRPmP7/UfKo/p:fYA5onpWL5+NiCd7kLPmo/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

55344

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ZombifyActCtx GetConsoleAliasesLengthA GetVersionExW GetConsoleOutputCP GetDefaultCommConfigA SetCommConfig GetDriveTypeW FreeEnvironmentStringsW CreateTimerQueue FindNextVolumeA InitializeCriticalSectionAndSpinCount ReadConsoleInputW TlsSetValue SetComputerNameExA FindAtomW BuildCommDCBAndTimeoutsW VirtualProtect GetModuleHandleA LocalAlloc InitializeCriticalSection TlsGetValue GetCommandLineA InterlockedIncrement GetCalendarInfoA CopyFileA OutputDebugStringA GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW ExitThread GlobalWire HeapCompact GetStartupInfoA CreatePipe GetCPInfoExA GetWindowsDirectoryW GetSystemWow64DirectoryA WriteProfileSectionW GetCalendarInfoW IsDebuggerPresent SetConsoleCursorPosition GetLastError ContinueDebugEvent WriteFile GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryW CopyFileW FindNextChangeNotification CreateActCtxA GetPrivateProfileIntA _lread OutputDebugStringW InterlockedDecrement DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceW WriteConsoleA InterlockedPushEntrySList WritePrivateProfileSectionA DeleteCriticalSection GetPrivateProfileSectionNamesA GetFileAttributesExW FileTimeToSystemTime MoveFileW GetVolumePathNameA TerminateProcess lstrcmpW GetComputerNameW FindActCtxSectionStringA SetThreadContext MoveFileExA GetProcAddress GlobalCompact UnregisterWait WriteConsoleInputA FormatMessageA FatalExit SetCommTimeouts WaitNamedPipeW CreateIoCompletionPort FindResourceExA GetSystemInfo EnumCalendarInfoExW OpenSemaphoreA FreeEnvironmentStringsA GetPrivateProfileStructA GetMailslotInfo lstrcpyW VerLanguageNameW SetThreadExecutionState GetSystemTime GetFileInformationByHandle GetConsoleCP GetConsoleAliasA SetConsoleScreenBufferSize GetAtomNameW WriteConsoleInputW CreateMailslotA GetCommState SetHandleCount _lopen GetConsoleAliasExesLengthW GetWriteWatch ClearCommBreak ChangeTimerQueueTimer GetOverlappedResult EnumDateFormatsA GlobalDeleteAtom HeapSize GetConsoleWindow GetStringTypeA SetFilePointer PostQueuedCompletionStatus SetFileApisToANSI OpenWaitableTimerW GetCurrentProcessId PeekNamedPipe FillConsoleOutputCharacterW FindNextVolumeMountPointA WriteProfileStringW InitAtomTable GlobalAddAtomA WriteConsoleOutputCharacterA TerminateJobObject VirtualAlloc GetBinaryTypeW QueryDosDeviceW LeaveCriticalSection HeapSetInformation FileTimeToDosDateTime Sleep EnterCriticalSection RaiseException RtlUnwind MoveFileA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW GetCurrentProcess GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError CloseHandle GetACP GetOEMCP GetCPInfo IsValidCodePage ExitProcess GetStdHandle GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapReAlloc FlushFileBuffers GetConsoleMode DebugBreak WriteConsoleW LoadLibraryW SetStdHandle MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoA LoadLibraryA CreateFileA

user32

OemToCharA

advapi32

GetFileSecurityW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

df8e055e2119ec713d20a71e240e6e3fcb81b286687acf3b41abe270c2b4585f

kernel32

user32

advapi32

msimg32