3af6d8ae486dc533fdbb81ca77b33765b9652d173c490862b9b7ea9d42f46794

General

Target
3af6d8ae486dc533fdbb81ca77b33765b9652d173c490862b9b7ea9d42f46794
Size 385KB
Sample220220-j9bf3abefl
SHA256 3af6d8ae486dc533fdbb81ca77b33765b9652d173c490862b9b7ea9d42f46794
MD5 ab9efa39a5aecf383c095401c1b6c658
SHA1 f72409d3048d4c62cc12ceee280750f44e7eb3fc
SHA512 f4ff7547104c9de4c018daa36e7d60612691c4e07573a2bfe7fdf7dbdad9380251dad76a44a97d4c1eb81c1cc4584ce8c41888c892cd4b947061b5fc90964bb2
SSDEEP 6144:V5yaXtrA/WSo1rl3ALrlHQpn0BwK3SBDmhYfFQu:VTX6WSofcZ+KCIGH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

3af6d8ae486dc533fdbb81ca77b33765b9652d173c490862b9b7ea9d42f46794

.exe 385KB

3af6d8ae486dc533fdbb81ca77b33765b9652d173c490862b9b7ea9d42f46794

IMPHASH dc5733c013378fa418d13773f5bfe6f1
SHA256 3af6d8ae486dc533fdbb81ca77b33765b9652d173c490862b9b7ea9d42f46794
MD5 ab9efa39a5aecf383c095401c1b6c658
SHA1 f72409d3048d4c62cc12ceee280750f44e7eb3fc
SHA512 f4ff7547104c9de4c018daa36e7d60612691c4e07573a2bfe7fdf7dbdad9380251dad76a44a97d4c1eb81c1cc4584ce8c41888c892cd4b947061b5fc90964bb2
SSDEEP 6144:V5yaXtrA/WSo1rl3ALrlHQpn0BwK3SBDmhYfFQu:VTX6WSofcZ+KCIGH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

5947

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameW CreateFileW GetVersionExW LoadLibraryA WriteFile GetWindowsDirectoryW GetProcAddress FreeLibrary GetTickCount CloseHandle RaiseException QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess GetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW DecodePointer GetCurrentProcess

shell32

ShellExecuteW

advapi32

SystemFunction036

Sharing

General

Malware Config

Signatures

File Explorer

3af6d8ae486dc533fdbb81ca77b33765b9652d173c490862b9b7ea9d42f46794

kernel32

shell32

advapi32