92815ba6471287eb405fe74ee85ed000821d4d6f8c9a0154b289be8b2e7c7e5d

Sharing

Copy URL Twitter E-mail

General

Target
92815ba6471287eb405fe74ee85ed000821d4d6f8c9a0154b289be8b2e7c7e5d
Size 192KB
Sample220220-e5fg1ahgbk
SHA256 92815ba6471287eb405fe74ee85ed000821d4d6f8c9a0154b289be8b2e7c7e5d
MD5 038fecb750d14f0a31fa83f3f95b7e88
SHA1 b5e793997283f6706d89f3f9f05389bd786c63b4
SHA512 79263ae2f6489382995a9baab87aec46b91665221b6a837b642143587c095d8cf4a6f03c8f8a2883405ba16a750d987c374f88623d83fdd1d3d7467cf77c82ed
SSDEEP 3072:sIeAkeA3z0B7WuirFoXmW/BqDrlh4x+j8TYQWuminRBcSN:YAmj81EoXBBUr4dT0scSN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

92815ba6471287eb405fe74ee85ed000821d4d6f8c9a0154b289be8b2e7c7e5d

.exe 192KB

92815ba6471287eb405fe74ee85ed000821d4d6f8c9a0154b289be8b2e7c7e5d

IMPHASH 04fbb09ac34d8c7a063eebe1646f11cf
SHA256 92815ba6471287eb405fe74ee85ed000821d4d6f8c9a0154b289be8b2e7c7e5d
MD5 038fecb750d14f0a31fa83f3f95b7e88
SHA1 b5e793997283f6706d89f3f9f05389bd786c63b4
SHA512 79263ae2f6489382995a9baab87aec46b91665221b6a837b642143587c095d8cf4a6f03c8f8a2883405ba16a750d987c374f88623d83fdd1d3d7467cf77c82ed
SSDEEP 3072:sIeAkeA3z0B7WuirFoXmW/BqDrlh4x+j8TYQWuminRBcSN:YAmj81EoXBBUr4dT0scSN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32291

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

iphlpapi

IcmpCloseHandle IcmpCreateFile GetAdaptersAddresses IcmpSendEcho GetIpNetTable

kernel32

SetLastError WriteProcessMemory WaitForMultipleObjects Sleep SetFilePointer CloseHandle GetTickCount GetLastError GetModuleFileNameW GetModuleHandleA GetCommandLineW GetTempPathW GetWindowsDirectoryW CreateFileW DeleteFileW CopyFileW GetVersionExW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCurrentThread CreateRemoteThread CreateThread ExitProcess GetCurrentProcess OpenProcess GetProcessHeap HeapFree HeapAlloc VirtualFreeEx VirtualAllocEx VirtualFree VirtualAlloc LocalFree GlobalFree GlobalAlloc GetProcAddress FreeLibrary LoadLibraryA WriteConsoleW SetFilePointerEx HeapReAlloc HeapSize GetConsoleMode GetConsoleCP DecodePointer FlushFileBuffers SetStdHandle FreeEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RaiseException RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte GetACP GetStringTypeW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW

advapi32

OpenProcessToken OpenThreadToken GetTokenInformation AdjustTokenPrivileges LookupAccountSidW OpenSCManagerW EnumServicesStatusW LookupPrivilegeValueW ImpersonateSelf

shell32

ShellExecuteW CommandLineToArgvW

ws2_32

socket setsockopt sendto WSAStartup htonl closesocket bind WSACleanup htons inet_addr