5a8d70b92e868f4f0ffb76f242dbf83a8816f704f523202a924a913f10a247fd

Sharing

Copy URL Twitter E-mail

General

Target
5a8d70b92e868f4f0ffb76f242dbf83a8816f704f523202a924a913f10a247fd
Size 1.3MB
Sample220306-e91czabgbn
SHA256 5a8d70b92e868f4f0ffb76f242dbf83a8816f704f523202a924a913f10a247fd
MD5 516b7b7da67d36d1311350f751801e0b
SHA1 40964f706ff4ac8a8556ba8fde00c13684347057
SHA512 cc61eb27f69cfd97cf23d87ad46df8c0042caceca2c14010c2d6e84ba9560a9b83a07c28bb404f8c32eae9b1092012412f9a7377620854ee35e1276fa2a1460a
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

5a8d70b92e868f4f0ffb76f242dbf83a8816f704f523202a924a913f10a247fd

.exe 1.3MB

5a8d70b92e868f4f0ffb76f242dbf83a8816f704f523202a924a913f10a247fd

IMPHASH 6fe1a71a390c8ad376ecc9d5cc58c394
SHA256 5a8d70b92e868f4f0ffb76f242dbf83a8816f704f523202a924a913f10a247fd
MD5 516b7b7da67d36d1311350f751801e0b
SHA1 40964f706ff4ac8a8556ba8fde00c13684347057
SHA512 cc61eb27f69cfd97cf23d87ad46df8c0042caceca2c14010c2d6e84ba9560a9b83a07c28bb404f8c32eae9b1092012412f9a7377620854ee35e1276fa2a1460a
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

719477

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

normaliz

IdnToAscii

wldap32

ord217 ord46 ord211 ord60 ord45 ord50 ord41 ord22 ord26 ord27 ord32 ord33 ord35 ord79 ord30 ord200 ord301 ord143

crypt32

CertFreeCertificateChain CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertGetNameStringA CertFindExtension CertAddCertificateContextToStore CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryA CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext

advapi32

CryptHashData CryptEncrypt CryptImportKey CryptDestroyKey CryptDestroyHash CryptAcquireContextA CryptCreateHash CryptGetHashParam CryptGenRandom CryptReleaseContext

kernel32

CreateProcessA SetStdHandle HeapReAlloc HeapSize GetTimeZoneInformation FindFirstFileExA FindNextFileA GetExitCodeProcess IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA GetProcessHeap WriteConsoleW SetEndOfFile CreateDirectoryW GetLogicalDrives FindFirstFileW Process32First FindNextFileW TerminateProcess GetDriveTypeA FindClose OpenProcess CreateToolhelp32Snapshot Process32Next CloseHandle FreeConsole lstrcmpW GetLastError SetLastError QueryPerformanceCounter QueryPerformanceFrequency GetCurrentThread GetThreadTimes EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection SleepEx GetSystemDirectoryA FreeLibrary GetModuleHandleA GetProcAddress LoadLibraryA GetTickCount Sleep MultiByteToWideChar WideCharToMultiByte MoveFileExA WaitForSingleObjectEx GetEnvironmentVariableA GetStdHandle GetFileType ReadFile PeekNamedPipe WaitForMultipleObjects FormatMessageA VerSetConditionMask VerifyVersionInfoA CreateFileA GetFileSizeEx FlushFileBuffers HeapFree HeapAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetConsoleCP ReadConsoleW GetConsoleMode GetACP GetCommandLineW GetCommandLineA WriteFile GetModuleFileNameA SetFilePointerEx ExitThread FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDriveTypeW GetModuleHandleExW ExitProcess RaiseException RtlUnwind WaitForSingleObject LoadLibraryW UnregisterWaitEx QueryDepthSList InterlockedFlushSList GetCurrentDirectoryW CreateFileW DeleteFileW FindFirstFileExW GetDiskFreeSpaceExW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW AreFileApisANSI GetModuleHandleW MoveFileExW FormatMessageW GetStringTypeW TryEnterCriticalSection GetCurrentThreadId DuplicateHandle GetCurrentProcess SwitchToThread GetExitCodeThread InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime EncodePointer DecodePointer CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo SetEvent ResetEvent InitializeSListHead IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW GetCurrentProcessId CreateTimerQueue SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait FreeLibraryAndExitThread GetModuleFileNameW LoadLibraryExW GetVersionExW VirtualAlloc VirtualProtect VirtualFree ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList

ws2_32

getaddrinfo ntohl inet_ntoa inet_addr closesocket getsockname connect socket setsockopt gethostname freeaddrinfo ioctlsocket htons WSAStartup WSACleanup WSAGetLastError getpeername ntohs recv select send bind getsockopt WSASetLastError WSAIoctl accept listen __WSAFDIsSet sendto recvfrom htonl