e70a5e9914839c1e78c02c39ef366762f6d3df3a3686a09359e7922ba6913964

General

Target
e70a5e9914839c1e78c02c39ef366762f6d3df3a3686a09359e7922ba6913964
Size 645KB
Sample220205-kkt3jshfb7
SHA256 e70a5e9914839c1e78c02c39ef366762f6d3df3a3686a09359e7922ba6913964
MD5 773508ddf0184cf2cb086bd9e9f441fd
SHA1 4602f57303c39520aa52fdf97032536f2fb283d6
SHA512 df36c5bb776aef14b6d660f59bd58877f9b80ace15f9edc9c859b86feaf5059f0d363280192a1d4f1fee1b0ea2b63bf544e3c702eac92796cf40672f0b0e1efe
SSDEEP 12288:TO/iSQWM1dA/IkCds5otVs4nKpfWeGAX9sEEyC:TaiSQbogkus+tVs4nKpuer9sE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e70a5e9914839c1e78c02c39ef366762f6d3df3a3686a09359e7922ba6913964

.exe 645KB

e70a5e9914839c1e78c02c39ef366762f6d3df3a3686a09359e7922ba6913964

IMPHASH 77641b1a9a74689e5f33d94db11cc4e1
SHA256 e70a5e9914839c1e78c02c39ef366762f6d3df3a3686a09359e7922ba6913964
MD5 773508ddf0184cf2cb086bd9e9f441fd
SHA1 4602f57303c39520aa52fdf97032536f2fb283d6
SHA512 df36c5bb776aef14b6d660f59bd58877f9b80ace15f9edc9c859b86feaf5059f0d363280192a1d4f1fee1b0ea2b63bf544e3c702eac92796cf40672f0b0e1efe
SSDEEP 12288:TO/iSQWM1dA/IkCds5otVs4nKpfWeGAX9sEEyC:TaiSQbogkus+tVs4nKpuer9sE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

117747

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

crypt32

CryptStringToBinaryA

kernel32

GetModuleHandleA LoadLibraryW QueryPerformanceFrequency SetThreadAffinityMask GetCurrentThread CompareStringW CompareStringA GetTimeZoneInformation FlushFileBuffers CloseHandle CreateFileA LoadLibraryA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA QueryPerformanceCounter GetLocaleInfoW GetLastError HeapFree HeapAlloc RaiseException RtlUnwind GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection VirtualAlloc HeapReAlloc GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount SetConsoleCtrlHandler FreeLibrary InterlockedExchange HeapSize SetStdHandle SetEnvironmentVariableA

user32

GetMessageW DispatchMessageW TranslateMessage LoadIconW LoadCursorW RegisterClassExW CreateWindowExW ShowWindow UpdateWindow DefWindowProcW BeginPaint EndPaint PostQuitMessage SetTimer InvalidateRect GetDesktopWindow FillRect DrawTextW KillTimer

gdi32

GetStockObject

Sharing

General

Malware Config

Signatures

File Explorer

e70a5e9914839c1e78c02c39ef366762f6d3df3a3686a09359e7922ba6913964

crypt32

kernel32

user32

gdi32