a90285e58fd49c1ae1cbf50f7f37438b12aa08b61e52a1f612e6cf9863d18672

General

Target
a90285e58fd49c1ae1cbf50f7f37438b12aa08b61e52a1f612e6cf9863d18672
Size 168KB
Sample220220-d3zx7agce2
SHA256 a90285e58fd49c1ae1cbf50f7f37438b12aa08b61e52a1f612e6cf9863d18672
MD5 966251a415b5abbf2d4b9699abde3fe8
SHA1 e63c35c79badc0a6846ed33a9f30eeda66698350
SHA512 d47b1ab889550af3bb826fefedb9164f6670269897bb02f01f970fb6e8b32d26c464fa3e0a2771257b2dd3cc5652665796c3aa5a2f326dc528fa30d89f244886
SSDEEP 1536:LMF3yMOaDcnicDtJk7TdUPLkjchkyXRT9gCVbIPH3yLMah104EQXsVTsW+t8cd7:40icakojNyXRTiCVbIv+pEzMrcjqt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a90285e58fd49c1ae1cbf50f7f37438b12aa08b61e52a1f612e6cf9863d18672

.exe 168KB

a90285e58fd49c1ae1cbf50f7f37438b12aa08b61e52a1f612e6cf9863d18672

IMPHASH 01d4b8b92a8773177c920859f8f839a5
SHA256 a90285e58fd49c1ae1cbf50f7f37438b12aa08b61e52a1f612e6cf9863d18672
MD5 966251a415b5abbf2d4b9699abde3fe8
SHA1 e63c35c79badc0a6846ed33a9f30eeda66698350
SHA512 d47b1ab889550af3bb826fefedb9164f6670269897bb02f01f970fb6e8b32d26c464fa3e0a2771257b2dd3cc5652665796c3aa5a2f326dc528fa30d89f244886
SSDEEP 1536:LMF3yMOaDcnicDtJk7TdUPLkjchkyXRT9gCVbIPH3yLMah104EQXsVTsW+t8cd7:40icakojNyXRTiCVbIv+pEzMrcjqt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15979

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

iphlpapi

GetIpNetTable

kernel32

Sleep SetFilePointer CloseHandle LoadLibraryA SetLastError GetTempPathW CreateFileW GetVersionExW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetLastError GetCurrentThread CreateThread ExitProcess GetCurrentProcess GetProcessHeap HeapFree HeapAlloc VirtualFree VirtualAlloc GlobalAlloc GetProcAddress FreeLibrary WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RaiseException RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte GetACP GetStringTypeW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize HeapReAlloc SetFilePointerEx DecodePointer

advapi32

OpenSCManagerW EnumServicesStatusW LookupPrivilegeValueW AdjustTokenPrivileges OpenThreadToken ImpersonateSelf

shell32

ShellExecuteW

Sharing

General

Malware Config

Signatures

File Explorer

a90285e58fd49c1ae1cbf50f7f37438b12aa08b61e52a1f612e6cf9863d18672

iphlpapi

kernel32

advapi32

shell32