64e24330e1a566038556f5319d5880ab

General

Target
64e24330e1a566038556f5319d5880ab
Size 271KB
Sample220207-spl7hadegj
SHA256 cd91470ac009105cbf0026c1b942b5e554024b2af93035ea80b71cc00c23022a
MD5 64e24330e1a566038556f5319d5880ab
SHA1 f2d26b39c55aa9bbd9176e95b95144c1fb56d548
SHA512 2bf89819e07dd9e2c9f38cbb9ac8189e317f86944247b6fe11b2085a70c035ad422ce9cd74a779af54f98224d5d126781282a22767ceb0221a002a021966155a
SSDEEP 6144:I4QvxiaaHbTgk4yhzC6NjE6lBgv/gKZb1K2g:I9iasMFytC36lBgvdZb
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

64e24330e1a566038556f5319d5880ab

.exe 271KB

64e24330e1a566038556f5319d5880ab

IMPHASH 059e939bc149cd78a08e6bfa706a4e4a
SHA256 cd91470ac009105cbf0026c1b942b5e554024b2af93035ea80b71cc00c23022a
MD5 64e24330e1a566038556f5319d5880ab
SHA1 f2d26b39c55aa9bbd9176e95b95144c1fb56d548
SHA512 2bf89819e07dd9e2c9f38cbb9ac8189e317f86944247b6fe11b2085a70c035ad422ce9cd74a779af54f98224d5d126781282a22767ceb0221a002a021966155a
SSDEEP 6144:I4QvxiaaHbTgk4yhzC6NjE6lBgv/gKZb1K2g:I9iasMFytC36lBgvdZb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

46752

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToDosDateTime TerminateProcess ZombifyActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigW SetCommConfig GetDriveTypeA FreeEnvironmentStringsW CreateTimerQueue FindNextVolumeW InitializeCriticalSectionAndSpinCount ReadConsoleInputW TlsGetValue SetComputerNameExW FindAtomW BuildCommDCBAndTimeoutsA LoadLibraryA GlobalAlloc InitializeCriticalSection GetCommandLineA InterlockedIncrement CopyFileA OutputDebugStringW FormatMessageA GetPriorityClass WritePrivateProfileStringA ExitThread GlobalUnfix HeapCompact GetStartupInfoW CreatePipe GetCPInfoExA GetWindowsDirectoryW GetSystemWow64DirectoryA SetLastError WriteProfileSectionW GetCalendarInfoW ResumeThread SetConsoleCursorInfo GetLastError DebugActiveProcess lstrcmpA WriteFile GetNumberOfConsoleInputEvents GetProcAddress GetSystemWindowsDirectoryW FindNextChangeNotification CreateActCtxA GetPrivateProfileIntW _lread InterlockedDecrement DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceW WriteConsoleA VirtualProtect InterlockedPushEntrySList DeleteCriticalSection GetFileAttributesExW FileTimeToSystemTime GetVolumePathNameA GetConsoleMode HeapSetInformation FindActCtxSectionStringA WriteProcessMemory MoveFileExA DisableThreadLibraryCalls GlobalCompact UnregisterWait DeleteAtom FatalExit InterlockedCompareExchange WaitNamedPipeW FindResourceExA EnumDateFormatsA GetSystemTime GetSystemInfo EnumCalendarInfoExW GetPrivateProfileStructA OpenSemaphoreA GetMailslotInfo lstrcpyA VerLanguageNameA SetThreadExecutionState SetSystemTime GetFileInformationByHandle GetConsoleCP GetConsoleAliasA GetLargestConsoleWindowSize CreateMailslotA EnumDateFormatsW SetCommState LockFile _lopen GetConsoleAliasExesLengthW ResetWriteWatch CreateConsoleScreenBuffer ClearCommBreak ChangeTimerQueueTimer GetOverlappedResult WriteConsoleInputW HeapSize GetConsoleDisplayMode GetStringTypeA SetFilePointer PostQueuedCompletionStatus SetFileApisToOEM OpenWaitableTimerW GetProcessId PeekNamedPipe FillConsoleOutputCharacterW FindNextVolumeMountPointA WriteProfileStringA GlobalAddAtomA WriteConsoleOutputCharacterW TerminateJobObject QueryDosDeviceA VirtualAlloc GetBinaryTypeA InitAtomTable LeaveCriticalSection CreateFileA MoveFileA RaiseException HeapValidate IsBadReadPtr EnterCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetHandleCount GetStdHandle GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc HeapReAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW LoadLibraryW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle CloseHandle

user32

OemToCharA

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

64e24330e1a566038556f5319d5880ab

kernel32

user32

winhttp