eufive_20220223-141225

General

Target
eufive_20220223-141225
Size 659KB
Sample220223-tjsb1aaga4
SHA256 5881b4236ed90b61498c527b0798c7d8591de80ff64bc9b9ec993ca712497b00
MD5 7e86d9fc6b1cf08b82b692d893c05f36
SHA1 5af950b7706ca6e7158d5ef486e20c5609fd14d0
SHA512 584ec431354cc901f184c4105338005f0d67f14d7c5cfe1935f0de556c60ddf4e0d9fa68e2a61b519c97cd73acbb02dbfdd6d48de20978eaed00a1efe85095a4
SSDEEP 12288:czpmL9nFvnQiKPTKqaUin+mjmOQfQXfk9w365fqWyiRzHE:FFvnQd7Za/PjMOfkwIzFE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

eufive_20220223-141225

.exe 659KB

eufive_20220223-141225

IMPHASH 32f2c538eab8007c123c6eaeceead9e9
SHA256 5881b4236ed90b61498c527b0798c7d8591de80ff64bc9b9ec993ca712497b00
MD5 7e86d9fc6b1cf08b82b692d893c05f36
SHA1 5af950b7706ca6e7158d5ef486e20c5609fd14d0
SHA512 584ec431354cc901f184c4105338005f0d67f14d7c5cfe1935f0de556c60ddf4e0d9fa68e2a61b519c97cd73acbb02dbfdd6d48de20978eaed00a1efe85095a4
SSDEEP 12288:czpmL9nFvnQiKPTKqaUin+mjmOQfQXfk9w365fqWyiRzHE:FFvnQd7Za/PjMOfkwIzFE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45472

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetComputerNameExA WriteProfileSectionA GetNumaProcessorNode FindFirstVolumeA SetConsoleCursorInfo HeapUnlock FindFirstChangeNotificationA WaitForSingleObject GetNamedPipeHandleStateW FileTimeToDosDateTime EnumResourceTypesW EnumResourceNamesW ExitProcess TerminateProcess ActivateActCtx GetVersionExA VerifyVersionInfoW SetConsoleOutputCP ResetEvent FindNextFileW GetCompressedFileSizeW CopyFileExA ReadConsoleOutputCharacterA GetDefaultCommConfigW VerLanguageNameA _hread SetCommConfig WritePrivateProfileStructA FreeEnvironmentStringsW CreateTimerQueueTimer FindVolumeClose LeaveCriticalSection WriteConsoleInputA TlsGetValue SetComputerNameExW FindAtomA ReleaseMutex LocalUnlock CallNamedPipeW BuildCommDCBAndTimeoutsA LocalAlloc GetCommandLineA InterlockedIncrement CopyFileW AddRefActCtx OutputDebugStringW FormatMessageW GetPriorityClass WritePrivateProfileStringW GetSystemDefaultLangID TerminateThread GlobalUnfix GetVersionExW HeapValidate _hwrite GetWindowsDirectoryW GetStartupInfoA CreatePipe GetCPInfoExW GetSystemWindowsDirectoryW GetSystemWow64DirectoryA GetLastError GetCalendarInfoW WaitForDebugEvent GetTickCount DeleteVolumeMountPointW OpenFileMappingA CopyFileA CreateActCtxW SetMailslotInfo AddConsoleAliasW GetPrivateProfileIntW ReadConsoleInputW InterlockedDecrement DefineDosDeviceA SetVolumeMountPointA SetThreadIdealProcessor SetConsoleActiveScreenBuffer SetProcessAffinityMask SetThreadContext GetLongPathNameW SetConsoleTextAttribute EndUpdateResourceW ContinueDebugEvent MoveFileW ReadConsoleA WriteConsoleA VirtualProtect InterlockedFlushSList WritePrivateProfileSectionA DeleteCriticalSection GetPrivateProfileSectionNamesA GetDriveTypeA GetFileAttributesExA LocalFileTimeToFileTime GetVolumePathNameW GetConsoleMode HeapSetInformation GetComputerNameW FindActCtxSectionStringA ReadProcessMemory MoveFileExW GetProcAddress GlobalFix WriteConsoleInputW GlobalDeleteAtom GetEnvironmentStrings InterlockedCompareExchange WaitNamedPipeW GetExitCodeProcess GetSystemTime GetLocalTime EnumCalendarInfoExA OpenSemaphoreW FreeEnvironmentStringsA CreateIoCompletionPort GetPrivateProfileStringA GetPrivateProfileStructW GetMailslotInfo GetCommModemStatus lstrcpyA HeapWalk LockFile EndUpdateResourceA VerSetConditionMask GetConsoleCP GetConsoleAliasW GetNumberOfConsoleInputEvents GetProfileStringA GetQueuedCompletionStatus AllocConsole FindAtomW GetNumaNodeProcessorMask GetConsoleAliasExesLengthA CreateMailslotA EnumDateFormatsW SetCommState FileTimeToLocalFileTime IsDebuggerPresent GetSystemTimeAdjustment _lread GetConsoleAliasExesLengthW GetWriteWatch LoadLibraryW GetPrivateProfileStringW GetModuleHandleA ReadConsoleOutputAttribute GetFileInformationByHandle GetProfileStringW MoveFileA CreateActCtxA SetCommMask SetMessageWaitingIndicator AreFileApisANSI OpenWaitableTimerW GetProcessShutdownParameters PeekNamedPipe FillConsoleOutputCharacterA FindNextVolumeMountPointA GetThreadPriority DeleteAtom AddAtomW WriteConsoleOutputCharacterA QueryDosDeviceW GetConsoleAliasExesW GetBinaryTypeA DeleteFileA RaiseException IsBadReadPtr EnterCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter CloseHandle GetModuleHandleW Sleep TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW SetStdHandle FlushFileBuffers MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP ReadFile CreateFileA

user32

OemToCharW

Sharing

General

Malware Config

Signatures

File Explorer

eufive_20220223-141225

kernel32

user32