bd27fe96b334c81e8b62bda3121306619ca317dad8a971daf0639cb896953006

General

Target
bd27fe96b334c81e8b62bda3121306619ca317dad8a971daf0639cb896953006
Size 217KB
Sample220205-msxvhsaeg2
SHA256 bd27fe96b334c81e8b62bda3121306619ca317dad8a971daf0639cb896953006
MD5 9eae0b7cdeee4c07443f80b8bae7e56c
SHA1 9a8e284bba018192052da78f94554779d52515b2
SHA512 eb2faea0b94adad7a05a3cfdcb75868f4f252856661220b3683ac7968c6c87d2e086ba01e95b9803c2864da87ab3e7e61e6924ea724321fd013191c053cfeeb6
SSDEEP 3072:KsWac8UsTvI2bfaMqX2j1Eh7g6ZTmwWRq+PTyRBdIxW:gacITQ2erXOENzwNRq+b4Bew
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bd27fe96b334c81e8b62bda3121306619ca317dad8a971daf0639cb896953006

.exe 217KB

bd27fe96b334c81e8b62bda3121306619ca317dad8a971daf0639cb896953006

IMPHASH 2263472b67159610390dfeafca561b19
SHA256 bd27fe96b334c81e8b62bda3121306619ca317dad8a971daf0639cb896953006
MD5 9eae0b7cdeee4c07443f80b8bae7e56c
SHA1 9a8e284bba018192052da78f94554779d52515b2
SHA512 eb2faea0b94adad7a05a3cfdcb75868f4f252856661220b3683ac7968c6c87d2e086ba01e95b9803c2864da87ab3e7e61e6924ea724321fd013191c053cfeeb6
SSDEEP 3072:KsWac8UsTvI2bfaMqX2j1Eh7g6ZTmwWRq+PTyRBdIxW:gacITQ2erXOENzwNRq+b4Bew
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

33896

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc ClearCommError GetConsoleAliasA SetConsoleScreenBufferSize FindFirstFileExW _lclose GetProcessPriorityBoost GetModuleHandleW GetTickCount GetWindowsDirectoryA GetPriorityClass GetVolumePathNameW OpenProcess EnumSystemCodePagesA EnumResourceLanguagesA MultiByteToWideChar DisconnectNamedPipe GetLongPathNameA PeekConsoleInputW BuildCommDCBAndTimeoutsA GetAtomNameA ProcessIdToSessionId LocalAlloc IsWow64Process SetConsoleCtrlHandler SetConsoleOutputCP SetProcessWorkingSetSize GetCommMask FindFirstVolumeMountPointA CreateMailslotA VirtualProtect EnumDateFormatsW FatalAppExitA SetCalendarInfoA FindAtomW FindNextVolumeA lstrcpyA WriteConsoleW LoadLibraryW GetDefaultCommConfigW lstrlenA WriteConsoleOutputCharacterW SetVolumeLabelA SetFileApisToOEM GetVolumeNameForVolumeMountPointA InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW GetCPInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType SetFilePointer CloseHandle GetProcAddress ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers CreateFileW

user32

GetCaretPos

advapi32

RevertToSelf EnumServicesStatusW BackupEventLogA RegQueryMultipleValuesW QueryServiceLockStatusW

Sharing

General

Malware Config

Signatures

File Explorer

bd27fe96b334c81e8b62bda3121306619ca317dad8a971daf0639cb896953006

kernel32

user32

advapi32