b7dbb846d30fbd8d2d35171ae1e5df9eb7c8b5ad53e6cfaf4f6b5c08e3d5cc32

General

Target
b7dbb846d30fbd8d2d35171ae1e5df9eb7c8b5ad53e6cfaf4f6b5c08e3d5cc32
Size 168KB
Sample220220-dcevbsghgr
SHA256 b7dbb846d30fbd8d2d35171ae1e5df9eb7c8b5ad53e6cfaf4f6b5c08e3d5cc32
MD5 26ffd8020e1ce334c259ff92457c8d66
SHA1 c62df79f5e481720ecd3d835d476f246759e6149
SHA512 9731d30073c293f20d50f9202c1b5266bbd13f6a2c77794b0e5fbb3765a01bd807a327063edf36533c880b0da4d57e4b8d99518e34f559453f83889ec21f6de5
SSDEEP 3072:W0c9mIc0BPGt/52wREp/C4zshEIcNEWW:W0czpU240/7G
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b7dbb846d30fbd8d2d35171ae1e5df9eb7c8b5ad53e6cfaf4f6b5c08e3d5cc32

.exe 168KB

b7dbb846d30fbd8d2d35171ae1e5df9eb7c8b5ad53e6cfaf4f6b5c08e3d5cc32

IMPHASH 75e66d9b1cc33bbd00fe257dfde456d6
SHA256 b7dbb846d30fbd8d2d35171ae1e5df9eb7c8b5ad53e6cfaf4f6b5c08e3d5cc32
MD5 26ffd8020e1ce334c259ff92457c8d66
SHA1 c62df79f5e481720ecd3d835d476f246759e6149
SHA512 9731d30073c293f20d50f9202c1b5266bbd13f6a2c77794b0e5fbb3765a01bd807a327063edf36533c880b0da4d57e4b8d99518e34f559453f83889ec21f6de5
SSDEEP 3072:W0c9mIc0BPGt/52wREp/C4zshEIcNEWW:W0czpU240/7G
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17731

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

iphlpapi

GetIpNetTable

kernel32

WriteProcessMemory Sleep SetFilePointer CloseHandle LoadLibraryA GetModuleFileNameW GetModuleHandleA SetLastError GetTempPathW GetWindowsDirectoryW CreateFileW DeleteFileW GetVersionExW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetLastError GetCurrentThread CreateRemoteThread CreateThread GetCurrentProcess OpenProcess GetProcessHeap HeapFree HeapAlloc VirtualFreeEx VirtualAllocEx VirtualFree VirtualAlloc LocalFree GlobalFree GlobalAlloc GetProcAddress FreeLibrary GetCommandLineW WriteConsoleW SetFilePointerEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RaiseException RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte GetACP GetStringTypeW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize HeapReAlloc DecodePointer

advapi32

OpenProcessToken OpenSCManagerW EnumServicesStatusW LookupPrivilegeValueW LookupAccountSidW AdjustTokenPrivileges GetTokenInformation OpenThreadToken ImpersonateSelf

shell32

ShellExecuteW CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

b7dbb846d30fbd8d2d35171ae1e5df9eb7c8b5ad53e6cfaf4f6b5c08e3d5cc32

iphlpapi

kernel32

advapi32

shell32