51710ac663a6fd3bc7f166045d4cb38b1e1796195b4aab057b4133df8db9ef8b

General

Target
51710ac663a6fd3bc7f166045d4cb38b1e1796195b4aab057b4133df8db9ef8b
Size 222KB
Sample220205-tclwmsdcbj
SHA256 51710ac663a6fd3bc7f166045d4cb38b1e1796195b4aab057b4133df8db9ef8b
MD5 88c736232fb454d269f854e9f16558cf
SHA1 e16871e6a6c51b39b43461c996d5146ec56b51d6
SHA512 4f4da89dbc370714e16d06b742ecdde06b21c860b20d0690470842e856fd96ee75e81de519e1b3d072d081aa75e3897935b5ba7c010f3fdf7700fd64e6ae0a02
SSDEEP 3072:3Py9YRUM8pJ5iczl2e+vA70Oh1GBROrKa/ZOnQImj9v4QBdIxWG:3PymRgpCcUpvu0CGAKa/QQ95v4QBewG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

51710ac663a6fd3bc7f166045d4cb38b1e1796195b4aab057b4133df8db9ef8b

.exe 222KB

51710ac663a6fd3bc7f166045d4cb38b1e1796195b4aab057b4133df8db9ef8b

IMPHASH 413cb8a15811be93b35a5653a33962b9
SHA256 51710ac663a6fd3bc7f166045d4cb38b1e1796195b4aab057b4133df8db9ef8b
MD5 88c736232fb454d269f854e9f16558cf
SHA1 e16871e6a6c51b39b43461c996d5146ec56b51d6
SHA512 4f4da89dbc370714e16d06b742ecdde06b21c860b20d0690470842e856fd96ee75e81de519e1b3d072d081aa75e3897935b5ba7c010f3fdf7700fd64e6ae0a02
SSDEEP 3072:3Py9YRUM8pJ5iczl2e+vA70Oh1GBROrKa/ZOnQImj9v4QBdIxWG:3PymRgpCcUpvu0CGAKa/QQ95v4QBewG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

33512

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

BuildCommDCBAndTimeoutsA HeapAlloc ClearCommError SetConsoleScreenBufferSize FlushViewOfFile _lclose GetProcessPriorityBoost GetModuleHandleW GetTickCount GetPriorityClass EnumResourceLanguagesA MultiByteToWideChar GetVolumePathNameA FindFirstFileExA GetProcAddress lstrlenA GetAtomNameA ProcessIdToSessionId LocalAlloc IsWow64Process SetConsoleCtrlHandler SetConsoleOutputCP GetDefaultCommConfigA FindFirstVolumeMountPointA FatalAppExitA PeekConsoleInputA FindAtomW FindNextVolumeA lstrcpyA WriteConsoleW LoadLibraryW WriteConsoleOutputCharacterW SetFileApisToOEM GetVolumeNameForVolumeMountPointA FlushFileBuffers InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW GetCPInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType SetFilePointer CloseHandle ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode CreateFileW

user32

GetCaretPos

advapi32

BackupEventLogA RevertToSelf

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

51710ac663a6fd3bc7f166045d4cb38b1e1796195b4aab057b4133df8db9ef8b

kernel32

user32

advapi32

msimg32