5766bffa91f87cd08582fac05209c5d8d9356ad88e15499038dc624c0ccbc468

General

Target
5766bffa91f87cd08582fac05209c5d8d9356ad88e15499038dc624c0ccbc468
Size 286KB
Sample220219-2lh54sead3
SHA256 5766bffa91f87cd08582fac05209c5d8d9356ad88e15499038dc624c0ccbc468
MD5 350c0b08ec0452a070bbed6fc730b17c
SHA1 15d23e2d535bf6540491fdaae6ef8d617ec47930
SHA512 725cd3062b4aa68eb93a7bc1a3f7318f84cf003a296e2bfe11b884579ea8a0f6e25d86821fce3c4c40ae0e5fb67ab167aafafb65e9d7451c9923327eb9123a3c
SSDEEP 6144:BPMFNxNdI3M8vhT9EfS9mG4LZnIkp7LffVwwKfT8a:1CATpBgGWDfqwKfTh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5766bffa91f87cd08582fac05209c5d8d9356ad88e15499038dc624c0ccbc468

.exe 286KB

5766bffa91f87cd08582fac05209c5d8d9356ad88e15499038dc624c0ccbc468

IMPHASH 31bb56aeabedaccf3eee59aab202a5d0
SHA256 5766bffa91f87cd08582fac05209c5d8d9356ad88e15499038dc624c0ccbc468
MD5 350c0b08ec0452a070bbed6fc730b17c
SHA1 15d23e2d535bf6540491fdaae6ef8d617ec47930
SHA512 725cd3062b4aa68eb93a7bc1a3f7318f84cf003a296e2bfe11b884579ea8a0f6e25d86821fce3c4c40ae0e5fb67ab167aafafb65e9d7451c9923327eb9123a3c
SSDEEP 6144:BPMFNxNdI3M8vhT9EfS9mG4LZnIkp7LffVwwKfT8a:1CATpBgGWDfqwKfTh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

180553

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_AGGRESIVE_WS_TRIM IMAGE_FILE_32BIT_MACHINE

PDB paths

winscard

SCardControl

user32

ReleaseCapture OffsetRect GetMenuStringW LoadStringW MoveWindow UnregisterClassA GetMenu LoadIconA SetActiveWindow GetClientRect SetWindowTextW DestroyIcon PostMessageW RegisterClassW GetSubMenu GetCursorPos MessageBeep DefWindowProcW ReleaseDC SetWindowPos CheckMenuItem DrawFocusRect SendMessageW SetWindowLongW PtInRect CreateWindowExA GetActiveWindow SetTimer DestroyMenu CreateWindowExW

kernel32

TlsGetValue CompareStringW CompareStringA VirtualQuery GetSystemInfo VirtualProtect GetTimeZoneInformation GetLocaleInfoW LCMapStringW WideCharToMultiByte LCMapStringA GetStringTypeW GetStringTypeA IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA HeapReAlloc HeapAlloc InitializeCriticalSection LoadLibraryExA InterlockedExchange FreeLibrary SetConsoleCtrlHandler OutputDebugStringA Sleep GetACP GetCPInfo EnterCriticalSection FatalAppExitA VirtualAlloc GetCurrentThread IsDebuggerPresent GetCommandLineA GetTickCount GetEnvironmentStringsW GetEnvironmentStrings GetVersionExA GetLastError GetProcAddress LoadLibraryW ExitProcess GetOEMCP SetEvent lstrlenW GetCurrentProcess FormatMessageW CloseHandle LeaveCriticalSection RaiseException GetSystemTimeAsFileTime GetCurrentProcessId RtlUnwind GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW SetEnvironmentVariableA TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCurrentThreadId GetModuleHandleA WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsA MultiByteToWideChar FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapDestroy HeapCreate VirtualFree HeapFree QueryPerformanceCounter

ole32

OleCreate OleInitialize CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

5766bffa91f87cd08582fac05209c5d8d9356ad88e15499038dc624c0ccbc468

winscard

user32

kernel32

ole32