9917c962b7e0a36592c4740d193adbd31bc1eae748d2b441e77817d648487cff

General

Target
9917c962b7e0a36592c4740d193adbd31bc1eae748d2b441e77817d648487cff
Size 695KB
Sample220228-ds9dwaedhm
SHA256 9917c962b7e0a36592c4740d193adbd31bc1eae748d2b441e77817d648487cff
MD5 a718ba0edee0b2108aad0ce0fd7fdd0f
SHA1 711b27ab368a13ccda3c279a8645a77c8e9fbf4e
SHA512 d4f9ed746f1b4faccc121c6faf74a5672222832b555265038c307076211bc93a46a7d800bbbd141ad2c1d879e6b614f134e72814d641c205ed5f5f3293fc7646
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

9917c962b7e0a36592c4740d193adbd31bc1eae748d2b441e77817d648487cff

.exe 695KB

9917c962b7e0a36592c4740d193adbd31bc1eae748d2b441e77817d648487cff

IMPHASH e0290227f727d0a7160e968f2b926460
SHA256 9917c962b7e0a36592c4740d193adbd31bc1eae748d2b441e77817d648487cff
MD5 a718ba0edee0b2108aad0ce0fd7fdd0f
SHA1 711b27ab368a13ccda3c279a8645a77c8e9fbf4e
SHA512 d4f9ed746f1b4faccc121c6faf74a5672222832b555265038c307076211bc93a46a7d800bbbd141ad2c1d879e6b614f134e72814d641c205ed5f5f3293fc7646
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

10710

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RemoveVectoredExceptionHandler FindResourceA GetModuleHandleExA FindResourceExW WriteConsoleOutputCharacterA LoadResource SystemTimeToTzSpecificLocalTime SetWaitableTimer InterlockedIncrement SetConsoleTextAttribute GetCurrentProcess ConnectNamedPipe SetFileTime GetCompressedFileSizeW GlobalFindAtomA GetLocaleInfoW GetSystemTimeAdjustment GetFileAttributesA GetExitCodeProcess SetTimeZoneInformation TerminateProcess GetAtomNameW FileTimeToSystemTime lstrcatA GetEnvironmentVariableA GlobalUnlock SetLastError OpenWaitableTimerW LocalAlloc SetConsoleOutputCP AddAtomA GetTapeParameters GlobalWire VirtualProtect LocalFree SetFileAttributesW SetEnvironmentVariableA CompareStringW GetStartupInfoW RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage FatalAppExitA VirtualAlloc HeapReAlloc HeapSize SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CreateFileA CloseHandle FlushFileBuffers GetTimeZoneInformation CompareStringA GetModuleHandleA

user32

GetMonitorInfoA

Name

.text

Size

639KB

Virtual Size

638KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

5.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.moxak

Size

512B

Virtual Size

1B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xojem

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.new

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

9917c962b7e0a36592c4740d193adbd31bc1eae748d2b441e77817d648487cff

kernel32

user32