d4b8cbfa94bac3dbd58452fcc6c4e0b56b65a54a671a2184d9fb6e3694a0266f

Sharing

Copy URL Twitter E-mail

General

Target
d4b8cbfa94bac3dbd58452fcc6c4e0b56b65a54a671a2184d9fb6e3694a0266f
Size 192KB
Sample220220-bxhevafdd3
SHA256 d4b8cbfa94bac3dbd58452fcc6c4e0b56b65a54a671a2184d9fb6e3694a0266f
MD5 9c2f2398a853063303817e181b7cd140
SHA1 f0c032844d33537e7f270374f1f1c28ef7670683
SHA512 4ad5d989e5e50c7cd9a5f65de4312fe63e53c97ceddd9b33a4a026c1b2fccdc27ac7406f3ec38132fb6da6c5439396bed2fee482775f55e265934fdc80425319
SSDEEP 3072:GBssapTKKjA8cVIneLIHKzTBKisI5cFXGx7O24Lc:5saMH30HkTBKXXfXc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d4b8cbfa94bac3dbd58452fcc6c4e0b56b65a54a671a2184d9fb6e3694a0266f

.exe 192KB

d4b8cbfa94bac3dbd58452fcc6c4e0b56b65a54a671a2184d9fb6e3694a0266f

IMPHASH 04fbb09ac34d8c7a063eebe1646f11cf
SHA256 d4b8cbfa94bac3dbd58452fcc6c4e0b56b65a54a671a2184d9fb6e3694a0266f
MD5 9c2f2398a853063303817e181b7cd140
SHA1 f0c032844d33537e7f270374f1f1c28ef7670683
SHA512 4ad5d989e5e50c7cd9a5f65de4312fe63e53c97ceddd9b33a4a026c1b2fccdc27ac7406f3ec38132fb6da6c5439396bed2fee482775f55e265934fdc80425319
SSDEEP 3072:GBssapTKKjA8cVIneLIHKzTBKisI5cFXGx7O24Lc:5saMH30HkTBKXXfXc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32739

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

iphlpapi

IcmpCloseHandle IcmpCreateFile GetAdaptersAddresses IcmpSendEcho GetIpNetTable

kernel32

SetLastError WriteProcessMemory WaitForMultipleObjects Sleep SetFilePointer CloseHandle GetTickCount GetLastError GetModuleFileNameW GetModuleHandleA GetCommandLineW GetTempPathW GetWindowsDirectoryW CreateFileW DeleteFileW CopyFileW GetVersionExW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCurrentThread CreateRemoteThread CreateThread ExitProcess GetCurrentProcess OpenProcess GetProcessHeap HeapFree HeapAlloc VirtualFreeEx VirtualAllocEx VirtualFree VirtualAlloc LocalFree GlobalFree GlobalAlloc GetProcAddress FreeLibrary LoadLibraryA WriteConsoleW SetFilePointerEx HeapReAlloc HeapSize GetConsoleMode GetConsoleCP DecodePointer FlushFileBuffers SetStdHandle FreeEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RaiseException RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte GetACP GetStringTypeW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW

advapi32

OpenProcessToken OpenThreadToken GetTokenInformation AdjustTokenPrivileges LookupAccountSidW OpenSCManagerW EnumServicesStatusW LookupPrivilegeValueW ImpersonateSelf

shell32

ShellExecuteW CommandLineToArgvW

ws2_32

socket setsockopt sendto WSAStartup htonl closesocket bind WSACleanup htons inet_addr