68ee03ab15e22934ed61dab828c9fb4d504746d3798d2f95311628c3594e47ed

Sharing

Copy URL Twitter E-mail

General

Target
68ee03ab15e22934ed61dab828c9fb4d504746d3798d2f95311628c3594e47ed
Size 108KB
Sample220213-pjs63sbgcj
SHA256 68ee03ab15e22934ed61dab828c9fb4d504746d3798d2f95311628c3594e47ed
MD5 3891f28b03951612f08d1bfd59ca56ea
SHA1 fcb3fdec404bbf5c0ff087c8efb2c82da1e724a4
SHA512 11cb504e9d15f8d8cd56fe31cf8d34d300bc68921769aa533bb5adfc8481fd203a8236fe259541158c05621dffce6d40e0a7429cae5dd7cd7fa8f3b888a4b219
SSDEEP 768:m9NJK3qZRhxXHIQBsLL16BKc+bBQZ/UMc2:gXzXol6cc+lQZMMc2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

68ee03ab15e22934ed61dab828c9fb4d504746d3798d2f95311628c3594e47ed

.exe 108KB

68ee03ab15e22934ed61dab828c9fb4d504746d3798d2f95311628c3594e47ed

IMPHASH d99e35e9d4559cb6df0e1eb507b928cc
SHA256 68ee03ab15e22934ed61dab828c9fb4d504746d3798d2f95311628c3594e47ed
MD5 3891f28b03951612f08d1bfd59ca56ea
SHA1 fcb3fdec404bbf5c0ff087c8efb2c82da1e724a4
SHA512 11cb504e9d15f8d8cd56fe31cf8d34d300bc68921769aa533bb5adfc8481fd203a8236fe259541158c05621dffce6d40e0a7429cae5dd7cd7fa8f3b888a4b219
SSDEEP 768:m9NJK3qZRhxXHIQBsLL16BKc+bBQZ/UMc2:gXzXol6cc+lQZMMc2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21536

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

ntdll

RtlGetNtVersionNumbers strrchr wcsncmp wcstombs _vsnwprintf wcsstr wcsrchr NtQueryInformationProcess RtlGetCurrentPeb NtYieldExecution vsprintf mbstowcs sprintf _stricmp _chkstk memset memcpy _allrem RtlUnwind

msvcrt

??3@YAXPAX@Z free ??2@YAPAXI@Z malloc

kernel32

GetTempPathW SwitchToThread ExpandEnvironmentStringsW CreateThread DeleteFileA SetFileAttributesW ResumeThread WriteProcessMemory LocalFree DeleteFileW GetWindowsDirectoryW CloseHandle GetFullPathNameW ExitProcess GetCommandLineW GetComputerNameA CreateFileA GetFileSize SetPriorityClass FindFirstFileW SetFilePointer GetLocaleInfoA MapViewOfFile UnmapViewOfFile GetDriveTypeW FreeLibrary HeapAlloc SetUnhandledExceptionFilter InterlockedIncrement MoveFileExW InterlockedDecrement GetCurrentProcess GetLogicalDriveStringsW HeapFree WaitForSingleObject GetSystemDefaultLCID OutputDebugStringW GetTickCount GetProcessHeap FormatMessageA WriteFile InitializeCriticalSection GetSystemDirectoryW Sleep CopyFileW LeaveCriticalSection HeapCreate CreateProcessA ReadFile CreateFileW SetThreadPriority FlushFileBuffers OutputDebugStringA GetFileSizeEx GetLastError GetProcAddress QueueUserAPC MoveFileW EnterCriticalSection VirtualAllocEx FindClose GetLocalTime LoadLibraryA CreateFileMappingA LocalAlloc DeviceIoControl WaitForMultipleObjects GetModuleFileNameA GetModuleHandleA FindNextFileW GetShortPathNameW

mpr

WNetOpenEnumW WNetEnumResourceW WNetCloseEnum

ws2_32

WSAStartup connect send gethostbyname closesocket socket htons

user32

MessageBoxA wsprintfW

advapi32

GetUserNameA RegSetValueExW RegCloseKey GetCurrentHwProfileW RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegQueryValueExA

shell32

CommandLineToArgvW