4b5b08346e369b59cae2120fcdc16b720bf2f2ec74115045cfafc24eecccb539

Sharing

Copy URL Twitter E-mail

General

Target
4b5b08346e369b59cae2120fcdc16b720bf2f2ec74115045cfafc24eecccb539
Size 188KB
Sample220220-jgx5csabe2
SHA256 4b5b08346e369b59cae2120fcdc16b720bf2f2ec74115045cfafc24eecccb539
MD5 d2d3d877e06b0181b67c6e610b40c44c
SHA1 6a0dd2ab04d5b0b6869d5b7d9b4eb591087bace9
SHA512 320cc4f1862425d706c4d369fa5f13a62cc9f3454dae91b239a28440c14dd92972b8d1cfa4fea699dc996e67c3a4db49b4c4ed6e63329492ee6cf8f4f7059cf0
SSDEEP 3072:0V2m40Jzazt8NOeWM445mWw3gMorn+275vA/8:/m4sWOLa45O3gw/8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4b5b08346e369b59cae2120fcdc16b720bf2f2ec74115045cfafc24eecccb539

.exe 188KB

4b5b08346e369b59cae2120fcdc16b720bf2f2ec74115045cfafc24eecccb539

IMPHASH 04fbb09ac34d8c7a063eebe1646f11cf
SHA256 4b5b08346e369b59cae2120fcdc16b720bf2f2ec74115045cfafc24eecccb539
MD5 d2d3d877e06b0181b67c6e610b40c44c
SHA1 6a0dd2ab04d5b0b6869d5b7d9b4eb591087bace9
SHA512 320cc4f1862425d706c4d369fa5f13a62cc9f3454dae91b239a28440c14dd92972b8d1cfa4fea699dc996e67c3a4db49b4c4ed6e63329492ee6cf8f4f7059cf0
SSDEEP 3072:0V2m40Jzazt8NOeWM445mWw3gMorn+275vA/8:/m4sWOLa45O3gw/8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32243

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

iphlpapi

IcmpCloseHandle IcmpCreateFile GetAdaptersAddresses IcmpSendEcho GetIpNetTable

kernel32

SetLastError WriteProcessMemory WaitForMultipleObjects Sleep SetFilePointer CloseHandle GetTickCount GetLastError GetModuleFileNameW GetModuleHandleA GetCommandLineW GetTempPathW GetWindowsDirectoryW CreateFileW DeleteFileW CopyFileW GetVersionExW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCurrentThread CreateRemoteThread CreateThread ExitProcess GetCurrentProcess OpenProcess GetProcessHeap HeapFree HeapAlloc VirtualFreeEx VirtualAllocEx VirtualFree VirtualAlloc LocalFree GlobalFree GlobalAlloc GetProcAddress FreeLibrary LoadLibraryA WriteConsoleW SetFilePointerEx HeapReAlloc HeapSize GetConsoleMode GetConsoleCP DecodePointer FlushFileBuffers SetStdHandle FreeEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RaiseException RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte GetACP GetStringTypeW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW

advapi32

OpenProcessToken OpenThreadToken GetTokenInformation AdjustTokenPrivileges LookupAccountSidW OpenSCManagerW EnumServicesStatusW LookupPrivilegeValueW ImpersonateSelf

shell32

ShellExecuteW CommandLineToArgvW

ws2_32

socket setsockopt sendto WSAStartup htonl closesocket bind WSACleanup htons inet_addr