9528a97d8d73b0dbed2ac496991f0a2eecc5a857d22e994d227ae7c3bef7296f

General

Target
9528a97d8d73b0dbed2ac496991f0a2eecc5a857d22e994d227ae7c3bef7296f
Size 666KB
Sample220228-dvmynaeeam
SHA256 9528a97d8d73b0dbed2ac496991f0a2eecc5a857d22e994d227ae7c3bef7296f
MD5 7910a78498cb7953b1c0db2ef4f8db27
SHA1 8f61608330261c1d5214f5d19f98b4d64f51ac12
SHA512 fd60d2c922c58906065816d347faf484a7ebfde81e354ca387dffbaf40f07c2ffae7884b702cf709b2f91468848ac132ba3310ec1f081cf1c363c8dea9bc4b7e
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

9528a97d8d73b0dbed2ac496991f0a2eecc5a857d22e994d227ae7c3bef7296f

.exe 666KB

9528a97d8d73b0dbed2ac496991f0a2eecc5a857d22e994d227ae7c3bef7296f

IMPHASH c0cf44298dff24eba33efe201d16c646
SHA256 9528a97d8d73b0dbed2ac496991f0a2eecc5a857d22e994d227ae7c3bef7296f
MD5 7910a78498cb7953b1c0db2ef4f8db27
SHA1 8f61608330261c1d5214f5d19f98b4d64f51ac12
SHA512 fd60d2c922c58906065816d347faf484a7ebfde81e354ca387dffbaf40f07c2ffae7884b702cf709b2f91468848ac132ba3310ec1f081cf1c363c8dea9bc4b7e
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

9802

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary InterlockedIncrement GetConsoleAliasA GetModuleHandleExW GetTimeFormatA ConnectNamedPipe GetTickCount SetFileTime TzSpecificLocalTimeToSystemTime GlobalAlloc GetLocaleInfoW GetSystemTimeAdjustment GetFileAttributesA GetFileAttributesW SetTimeZoneInformation FindResourceW GetAtomNameW lstrcatA RaiseException GetLastError GetProcAddress OpenWaitableTimerA SetConsoleOutputCP FindAtomA GlobalFindAtomW SetConsoleCursorInfo GetModuleHandleA LoadLibraryExA FileTimeToLocalFileTime GetCurrentProcessId TerminateProcess MapViewOfFile GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetTimeZoneInformation CompareStringA CompareStringW SetEnvironmentVariableA

advapi32

RegCreateKeyW

Name

.text

Size

611KB

Virtual Size

610KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

5.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vemob

Size

512B

Virtual Size

377B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.new

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

9528a97d8d73b0dbed2ac496991f0a2eecc5a857d22e994d227ae7c3bef7296f

kernel32

advapi32