744f341a285a15647220b1dda12600c38b754a5d810f0fc5240a96a9ee44714d

General

Target
744f341a285a15647220b1dda12600c38b754a5d810f0fc5240a96a9ee44714d
Size 268KB
Sample220205-rmj4pacbc7
SHA256 744f341a285a15647220b1dda12600c38b754a5d810f0fc5240a96a9ee44714d
MD5 0d59b4b5e9ec8d475a6a9b5d6ad0e241
SHA1 9306a0d5172c53aa25519de8dceb95f9f48464ee
SHA512 ca0b74d6e07f8694c5a77e28b7247d21f2a92a60b1bbd29f67add8dd26969b2348e39b8096b8e545cbbfb66bef0e713b3fcea1f7ec9367ad818f22807c6b985a
SSDEEP 3072:BgVNacMxSPzo/yyOMn8MfePyZ6VLl4HhfocM6vBxhoQOWL8YuDx+pCsFa3vN1rM:B0NGxSk/tnFfeqgR65xhoaLQ8H0r/E
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

744f341a285a15647220b1dda12600c38b754a5d810f0fc5240a96a9ee44714d

.exe 268KB

744f341a285a15647220b1dda12600c38b754a5d810f0fc5240a96a9ee44714d

IMPHASH 0c4b03ebde7b830ee20f9da1349d4efc
SHA256 744f341a285a15647220b1dda12600c38b754a5d810f0fc5240a96a9ee44714d
MD5 0d59b4b5e9ec8d475a6a9b5d6ad0e241
SHA1 9306a0d5172c53aa25519de8dceb95f9f48464ee
SHA512 ca0b74d6e07f8694c5a77e28b7247d21f2a92a60b1bbd29f67add8dd26969b2348e39b8096b8e545cbbfb66bef0e713b3fcea1f7ec9367ad818f22807c6b985a
SSDEEP 3072:BgVNacMxSPzo/yyOMn8MfePyZ6VLl4HhfocM6vBxhoQOWL8YuDx+pCsFa3vN1rM:B0NGxSk/tnFfeqgR65xhoaLQ8H0r/E
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37096

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileExW ConnectNamedPipe GetModuleHandleW GetTickCount SetProcessPriorityBoost GetPriorityClass GetVolumePathNameW OpenProcess GlobalAlloc EnumSystemCodePagesA GetConsoleAliasW SetConsoleCursorPosition EnumResourceLanguagesA MultiByteToWideChar lstrlenW DisconnectNamedPipe GetLongPathNameW SetVolumeLabelW GetAtomNameA ProcessIdToSessionId ClearCommError SetConsoleCtrlHandler SetConsoleOutputCP SetFileApisToANSI SetProcessWorkingSetSize GetCommMask CreatePipe FindFirstVolumeMountPointA EnumDateFormatsA CreateMailslotA VirtualProtect FatalAppExitA SetCalendarInfoA _lopen FindAtomW GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW GetVolumeInformationW lstrcpyA WriteConsoleW LoadLibraryW HeapAlloc BuildCommDCBAndTimeoutsA GetProcessIoCounters GetDefaultCommConfigW IsWow64Process WriteConsoleOutputCharacterW InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW GetCPInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType SetFilePointer CloseHandle GetProcAddress ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers CreateFileW

user32

GetCaretPos

advapi32

EnumServicesStatusW InitializeAcl RegQueryMultipleValuesA SetAclInformation QueryServiceLockStatusW

Sharing

General

Malware Config

Signatures

File Explorer

744f341a285a15647220b1dda12600c38b754a5d810f0fc5240a96a9ee44714d

kernel32

user32

advapi32