a1c2e6660cff8d87a924ed0079f94374d04602433014c46ae6c52700c45ddc10

General

Target
a1c2e6660cff8d87a924ed0079f94374d04602433014c46ae6c52700c45ddc10
Size 202KB
Sample220220-efb4aahdfq
SHA256 a1c2e6660cff8d87a924ed0079f94374d04602433014c46ae6c52700c45ddc10
MD5 fd1f7a77ea9efd1f2e291c031f441c74
SHA1 c5fdb9dc74560446c9404e01ce176b02899e89e4
SHA512 b4d93fbde71c50f62bedd5ff4d1c81ad7e925ea4bed0df3bf562cdf97b60691ae6d668f9f45615de5eaf8ef2e28dea9a28b197146857223b3d2d9a0c9d436282
SSDEEP 1536:EruBbfLRCttNnHI3EoEZiyV5BENfp4CNuVe7iDVKSisgU5sWqd7B9dlfn3PwWjwR:xBQpHI3rEMQsxNuciDcSxJUVxnfxujN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a1c2e6660cff8d87a924ed0079f94374d04602433014c46ae6c52700c45ddc10

.exe 202KB

a1c2e6660cff8d87a924ed0079f94374d04602433014c46ae6c52700c45ddc10

IMPHASH 5b1ecf2ee51e54d0924cb67b07891d10
SHA256 a1c2e6660cff8d87a924ed0079f94374d04602433014c46ae6c52700c45ddc10
MD5 fd1f7a77ea9efd1f2e291c031f441c74
SHA1 c5fdb9dc74560446c9404e01ce176b02899e89e4
SHA512 b4d93fbde71c50f62bedd5ff4d1c81ad7e925ea4bed0df3bf562cdf97b60691ae6d668f9f45615de5eaf8ef2e28dea9a28b197146857223b3d2d9a0c9d436282
SSDEEP 1536:EruBbfLRCttNnHI3EoEZiyV5BENfp4CNuVe7iDVKSisgU5sWqd7B9dlfn3PwWjwR:xBQpHI3rEMQsxNuciDcSxJUVxnfxujN
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

33096

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

iphlpapi

GetIpNetTable

kernel32

GetCurrentThread LoadLibraryA GlobalAlloc DeleteFileW Process32FirstW GlobalFree CloseHandle CreateThread HeapAlloc GetWindowsDirectoryW GetProcAddress VirtualAllocEx LocalFree GetProcessHeap FreeLibrary CreateRemoteThread VirtualFreeEx Process32NextW GetLastError Sleep CreateToolhelp32Snapshot OpenProcess GetModuleHandleA GetVersionExW CreateFileW GetTempPathW SetFilePointer GetModuleFileNameW VirtualAlloc GetCurrentProcess GetCommandLineW VirtualFree SetLastError HeapFree WriteConsoleW SetFilePointerEx HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead WriteProcessMemory RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx RaiseException InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection ExitProcess TerminateProcess GetModuleHandleExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW GetStringTypeW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize RtlCaptureContext

advapi32

SystemFunction036 LookupAccountSidW LookupPrivilegeValueW AdjustTokenPrivileges OpenSCManagerW ImpersonateSelf OpenProcessToken EnumServicesStatusW OpenThreadToken GetTokenInformation

shell32

ShellExecuteW CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

a1c2e6660cff8d87a924ed0079f94374d04602433014c46ae6c52700c45ddc10

iphlpapi

kernel32

advapi32

shell32