56731c777896837782beff4432330486a941e4f3af44b4d24be7c62c16e96256

General

Target
56731c777896837782beff4432330486a941e4f3af44b4d24be7c62c16e96256
Size 697KB
Sample220228-dtcfjaedhp
SHA256 56731c777896837782beff4432330486a941e4f3af44b4d24be7c62c16e96256
MD5 a31cb445d3131bf567720c43f2a74484
SHA1 29e763a59424f9bb147df11a7b2ebfe9373a451f
SHA512 ca8d1c63ababcb662922d4e91c3f599579ce324881ca4ce6effe942b91037012fc959060eab730d62b07330c17bd4ac49458b52c224c5e615ee55ae469ae0ae0
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

56731c777896837782beff4432330486a941e4f3af44b4d24be7c62c16e96256

.exe 697KB

56731c777896837782beff4432330486a941e4f3af44b4d24be7c62c16e96256

IMPHASH f847d6bb62efaafc938bc2759abeffb6
SHA256 56731c777896837782beff4432330486a941e4f3af44b4d24be7c62c16e96256
MD5 a31cb445d3131bf567720c43f2a74484
SHA1 29e763a59424f9bb147df11a7b2ebfe9373a451f
SHA512 ca8d1c63ababcb662922d4e91c3f599579ce324881ca4ce6effe942b91037012fc959060eab730d62b07330c17bd4ac49458b52c224c5e615ee55ae469ae0ae0
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

9435

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW FindResourceW LoadResource SystemTimeToTzSpecificLocalTime InterlockedIncrement SetConsoleTextAttribute GetCurrentProcess GetModuleHandleExW CancelWaitableTimer ConnectNamedPipe SetFileTime GlobalAlloc GlobalFindAtomA SetSystemTimeAdjustment GetFileAttributesA TerminateProcess FileTimeToSystemTime GetLocaleInfoA GetTimeZoneInformation GlobalUnlock GetConsoleOutputCP SetLastError SetFileAttributesA GetAtomNameA OpenWaitableTimerW AddVectoredExceptionHandler AddAtomW GetTapeParameters GlobalUnWire VirtualProtect LocalFree lstrcpyW CompareStringW CompareStringA WriteConsoleOutputCharacterW GetCompressedFileSizeA GetEnvironmentVariableW GetStartupInfoW RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage FatalAppExitA VirtualAlloc HeapReAlloc HeapSize SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleHandleA SetStdHandle WriteConsoleA WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW CreateFileA CloseHandle FlushFileBuffers SetEnvironmentVariableA

user32

GetMonitorInfoA

advapi32

EnumDependentServicesW ObjectPrivilegeAuditAlarmA

Name

.text

Size

640KB

Virtual Size

640KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

5.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gul

Size

512B

Virtual Size

1B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vomudol

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.new

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

56731c777896837782beff4432330486a941e4f3af44b4d24be7c62c16e96256

kernel32

user32

advapi32