d7b324dfead641207c85cb18cdfc00bbfd37932f27f41c3af441d6912f235849

Sharing

Copy URL Twitter E-mail

General

Target
d7b324dfead641207c85cb18cdfc00bbfd37932f27f41c3af441d6912f235849
Size 193KB
Sample220220-cc8a7sfeg6
SHA256 d7b324dfead641207c85cb18cdfc00bbfd37932f27f41c3af441d6912f235849
MD5 12147c94f3211733f893d31d587d4ad6
SHA1 708199a9a86894f464ec5a5d607ffb1093c096f4
SHA512 3ef68160f44d16e3a305899d537773fdaace5ae6534eb185f3741bc2917f84457674a8bd1ad7db0c4b707a308f101cb3d49f7906bde7732dd26ed08cf9f6b1af
SSDEEP 3072:+1gI8hDs3m4dxAWe4m3VLAWlJcdjKE+275dxGMI4Ue:3IgorgomB9Jc+e
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d7b324dfead641207c85cb18cdfc00bbfd37932f27f41c3af441d6912f235849

.exe 193KB

d7b324dfead641207c85cb18cdfc00bbfd37932f27f41c3af441d6912f235849

IMPHASH 04fbb09ac34d8c7a063eebe1646f11cf
SHA256 d7b324dfead641207c85cb18cdfc00bbfd37932f27f41c3af441d6912f235849
MD5 12147c94f3211733f893d31d587d4ad6
SHA1 708199a9a86894f464ec5a5d607ffb1093c096f4
SHA512 3ef68160f44d16e3a305899d537773fdaace5ae6534eb185f3741bc2917f84457674a8bd1ad7db0c4b707a308f101cb3d49f7906bde7732dd26ed08cf9f6b1af
SSDEEP 3072:+1gI8hDs3m4dxAWe4m3VLAWlJcdjKE+275dxGMI4Ue:3IgorgomB9Jc+e
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32243

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

iphlpapi

IcmpCloseHandle IcmpCreateFile GetAdaptersAddresses IcmpSendEcho GetIpNetTable

kernel32

SetLastError WriteProcessMemory WaitForMultipleObjects Sleep SetFilePointer CloseHandle GetTickCount GetLastError GetModuleFileNameW GetModuleHandleA GetCommandLineW GetTempPathW GetWindowsDirectoryW CreateFileW DeleteFileW CopyFileW GetVersionExW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCurrentThread CreateRemoteThread CreateThread ExitProcess GetCurrentProcess OpenProcess GetProcessHeap HeapFree HeapAlloc VirtualFreeEx VirtualAllocEx VirtualFree VirtualAlloc LocalFree GlobalFree GlobalAlloc GetProcAddress FreeLibrary LoadLibraryA WriteConsoleW SetFilePointerEx HeapReAlloc HeapSize GetConsoleMode GetConsoleCP DecodePointer FlushFileBuffers SetStdHandle FreeEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RaiseException RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte GetACP GetStringTypeW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW

advapi32

OpenProcessToken OpenThreadToken GetTokenInformation AdjustTokenPrivileges LookupAccountSidW OpenSCManagerW EnumServicesStatusW LookupPrivilegeValueW ImpersonateSelf

shell32

ShellExecuteW CommandLineToArgvW

ws2_32

socket setsockopt sendto WSAStartup htonl closesocket bind WSACleanup htons inet_addr