8faef49d64b36052e6648a0426fb2f71af70d9b434be548841a4707fada2410a

General

Target
8faef49d64b36052e6648a0426fb2f71af70d9b434be548841a4707fada2410a
Size 137KB
Sample220205-p5wt4abgcl
SHA256 8faef49d64b36052e6648a0426fb2f71af70d9b434be548841a4707fada2410a
MD5 d268e5ccab3b71001ad2aa5ac14811da
SHA1 c297a92e980b9f333435d3656c89ef2debe46c83
SHA512 8479d2db4d6252c3002be8099f24004963e400348d08ef2f65a842a41eed6097e83ab46546930a62251d074357aa65938405521b2b89ac81065df39c1e04dd88
SSDEEP 3072:NSAi8GOjPaCB1GZIx5DxaXze8k86GKNliWG:NSH8vjPaq1GZIxnaq13pG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

8faef49d64b36052e6648a0426fb2f71af70d9b434be548841a4707fada2410a

.exe 137KB

8faef49d64b36052e6648a0426fb2f71af70d9b434be548841a4707fada2410a

IMPHASH 450b52e89a2ecb4601fdbebeae7d5a40
SHA256 8faef49d64b36052e6648a0426fb2f71af70d9b434be548841a4707fada2410a
MD5 d268e5ccab3b71001ad2aa5ac14811da
SHA1 c297a92e980b9f333435d3656c89ef2debe46c83
SHA512 8479d2db4d6252c3002be8099f24004963e400348d08ef2f65a842a41eed6097e83ab46546930a62251d074357aa65938405521b2b89ac81065df39c1e04dd88
SSDEEP 3072:NSAi8GOjPaCB1GZIx5DxaXze8k86GKNliWG:NSH8vjPaq1GZIxnaq13pG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

9860

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

_lclose GetModuleHandleW GetTickCount GetCommConfig GetWindowsDirectoryA OpenProcess EnumSystemCodePagesA GetConsoleAliasW SetSystemPowerState GetAtomNameW GetModuleFileNameW MultiByteToWideChar GetVolumePathNameA GetConsoleOutputCP FindFirstFileExA GetLastError GetLongPathNameW GetProcAddress SetVolumeLabelW FlushConsoleInputBuffer LocalAlloc SetCalendarInfoW IsWow64Process SetFileApisToANSI RtlCaptureStackBackTrace SetNamedPipeHandleState GetDefaultCommConfigA RequestWakeupLatency EnumDateFormatsW FatalAppExitA PeekConsoleInputA FindAtomW GetVolumeNameForVolumeMountPointW EnumResourceLanguagesW lstrcpyW lstrcpyA SetConsoleTextAttribute ClearCommError HeapAlloc BuildCommDCBAndTimeoutsA RtlCaptureContext GetProcessWorkingSetSize lstrlenA GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount EncodePointer DecodePointer RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer HeapFree CloseHandle ExitProcess WriteFile FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep CreateFileA SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc SetEndOfFile GetProcessHeap ReadFile IsProcessorFeaturePresent WriteConsoleW HeapSize LCMapStringW GetStringTypeW CreateFileW

user32

GetCaretPos

advapi32

EnumServicesStatusW RegQueryMultipleValuesA DeregisterEventSource QueryServiceLockStatusA SetThreadToken BackupEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

8faef49d64b36052e6648a0426fb2f71af70d9b434be548841a4707fada2410a

kernel32

user32

advapi32