acfc2a0c6eaf9209bc6036bd385b70fc6971b51ea9dab0eaefb5ac99b674b658

General

Target
acfc2a0c6eaf9209bc6036bd385b70fc6971b51ea9dab0eaefb5ac99b674b658
Size 222KB
Sample220205-nh5caaahb4
SHA256 acfc2a0c6eaf9209bc6036bd385b70fc6971b51ea9dab0eaefb5ac99b674b658
MD5 b50ac3b459168feafc89f9c87e4d4bcd
SHA1 82526fe2f6509d41b4d5487e20a7fde29ee44a71
SHA512 207d51556b26155e5e4427415335e7b49f6fccafa6f50c881c5e0d9af27fad6701dd92393f77a1b19ee35fe751003b2ac160f1b75d4fdbeb0f1d48b371085ba9
SSDEEP 3072:pPy9YR4M8UJ5izzl2e+v2rbq66Elmx5PZjKBdIxWG:pPymRkUCzUpv2rVQ3ZWBewG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

acfc2a0c6eaf9209bc6036bd385b70fc6971b51ea9dab0eaefb5ac99b674b658

.exe 222KB

acfc2a0c6eaf9209bc6036bd385b70fc6971b51ea9dab0eaefb5ac99b674b658

IMPHASH 413cb8a15811be93b35a5653a33962b9
SHA256 acfc2a0c6eaf9209bc6036bd385b70fc6971b51ea9dab0eaefb5ac99b674b658
MD5 b50ac3b459168feafc89f9c87e4d4bcd
SHA1 82526fe2f6509d41b4d5487e20a7fde29ee44a71
SHA512 207d51556b26155e5e4427415335e7b49f6fccafa6f50c881c5e0d9af27fad6701dd92393f77a1b19ee35fe751003b2ac160f1b75d4fdbeb0f1d48b371085ba9
SSDEEP 3072:pPy9YR4M8UJ5izzl2e+v2rbq66Elmx5PZjKBdIxWG:pPymRkUCzUpv2rVQ3ZWBewG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

33512

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

BuildCommDCBAndTimeoutsA HeapAlloc ClearCommError SetConsoleScreenBufferSize FlushViewOfFile _lclose GetProcessPriorityBoost GetModuleHandleW GetTickCount GetPriorityClass EnumResourceLanguagesA MultiByteToWideChar GetVolumePathNameA FindFirstFileExA GetProcAddress lstrlenA GetAtomNameA ProcessIdToSessionId LocalAlloc IsWow64Process SetConsoleCtrlHandler SetConsoleOutputCP GetDefaultCommConfigA FindFirstVolumeMountPointA FatalAppExitA PeekConsoleInputA FindAtomW FindNextVolumeA lstrcpyA WriteConsoleW LoadLibraryW WriteConsoleOutputCharacterW SetFileApisToOEM GetVolumeNameForVolumeMountPointA FlushFileBuffers InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW GetCPInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType SetFilePointer CloseHandle ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode CreateFileW

user32

GetCaretPos

advapi32

BackupEventLogA RevertToSelf

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

acfc2a0c6eaf9209bc6036bd385b70fc6971b51ea9dab0eaefb5ac99b674b658

kernel32

user32

advapi32

msimg32