36549e3696fab16e1fb88e4f6bb076f8a4d07ace292396d727685b24c90920f4

General

Target
36549e3696fab16e1fb88e4f6bb076f8a4d07ace292396d727685b24c90920f4
Size 308KB
Sample220320-ds5exsgabm
SHA256 36549e3696fab16e1fb88e4f6bb076f8a4d07ace292396d727685b24c90920f4
MD5 5b2922162ea8506d525357c3d04bfe20
SHA1 e9209d1fb4331f916feae3f5a64eb6a09ea09e18
SHA512 eae2d1dedc79d31991b46639f737f0e46425fd4c1d8d899b640341d1cae4dac86f8052ff1d578bab76bba8fba5cc3678d58205fd5fa59870a30dc9445aa57d66
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

36549e3696fab16e1fb88e4f6bb076f8a4d07ace292396d727685b24c90920f4

.dll 308KB

36549e3696fab16e1fb88e4f6bb076f8a4d07ace292396d727685b24c90920f4

IMPHASH 1f6298b9de4ec53a7bd75362c9cc4597
SHA256 36549e3696fab16e1fb88e4f6bb076f8a4d07ace292396d727685b24c90920f4
MD5 5b2922162ea8506d525357c3d04bfe20
SHA1 e9209d1fb4331f916feae3f5a64eb6a09ea09e18
SHA512 eae2d1dedc79d31991b46639f737f0e46425fd4c1d8d899b640341d1cae4dac86f8052ff1d578bab76bba8fba5cc3678d58205fd5fa59870a30dc9445aa57d66
MD5 SHA1 SHA512

windows x86

PE Signature issue

Digest

e0:98:6d:b7:55:23:65:13:23:a6:38:f2:e6:52:05:c7:ee:99:cc:bf

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

155952

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExpandEnvironmentStringsW GetShortPathNameW InitializeCriticalSectionAndSpinCount RaiseException DecodePointer DeleteCriticalSection GetLogicalDrives GetSystemDefaultLCID DeviceIoControl SetErrorMode GetLocaleInfoW MultiByteToWideChar GetUserDefaultLCID GetTimeFormatW GetComputerNameW WideCharToMultiByte GetSystemTime GetDateFormatW GetDriveTypeW GetCurrentThreadId ProcessIdToSessionId AttachConsole FreeConsole GetLongPathNameW GetExitCodeProcess DuplicateHandle SetEvent GetCurrentProcessId GetModuleFileNameW ReadFile SetFilePointer UnmapViewOfFile GetFileInformationByHandle FileTimeToSystemTime GetLocalTime GetFileSize SystemTimeToFileTime GetTickCount GetFullPathNameW lstrcmpW CreateThread CreateEventW FlushFileBuffers MulDiv GetEnvironmentStringsW FreeLibrary GetModuleHandleW HeapSize WriteConsoleW SetEnvironmentVariableA GetCommandLineW GetCommandLineA FindFirstFileExW GetProcessHeap GetSystemTimeAsFileTime SetStdHandle GetCurrentDirectoryW GetOEMCP IsValidCodePage EnumSystemLocalesW GetProcAddress LoadResource FindResourceExW CloseHandle GlobalFree GlobalAlloc LockResource GetCurrentThread GetDiskFreeSpaceExW OpenProcess FreeEnvironmentStringsW CreateFileW WriteFile GetCurrentProcess SizeofResource GetLastError WaitForSingleObject GetVolumePathNamesForVolumeNameW CreateProcessW FindVolumeClose Sleep CreatePipe LoadLibraryW IsValidLocale GetConsoleCP ReadConsoleW SetEndOfFile QueryDosDeviceW GetModuleHandleExW ExitProcess HeapFree HeapReAlloc HeapAlloc SetConsoleCtrlHandler SetConsoleMode ReadConsoleInputA GetConsoleMode SetFilePointerEx SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileType GetACP TerminateProcess GetTimeZoneInformation LoadLibraryExW RtlUnwind InitializeSListHead QueryPerformanceCounter GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetCPInfo LCMapStringW CompareStringW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer LeaveCriticalSection EnterCriticalSection GetStringTypeW OutputDebugStringW OutputDebugStringA FlushConsoleInputBuffer GetStdHandle FindClose FindNextFileW ExpandEnvironmentStringsA GetModuleHandleA VerifyVersionInfoA FormatMessageA SetLastError WaitForMultipleObjectsEx GetTempPathW LoadLibraryA GetSystemDirectoryA InterlockedCompareExchange SleepEx FindNextVolumeW FindFirstVolumeW VirtualAlloc

user32

LoadIconW CharNextA IsCharAlphaW GetShellWindow GetClipboardSequenceNumber IsCharUpperW GetMenuContextHelpId VkKeyScanA CreateMenu CharLowerA GetMessageTime GetLastActivePopup IsWindow GetActiveWindow DestroyCursor GetKeyState DrawMenuBar CountClipboardFormats DestroyWindow AnyPopup IsCharLowerW GetDlgCtrlID GetFocus GetWindowContextHelpId GetTopWindow GetDoubleClickTime GetThreadDesktop GetListBoxInfo GetMenuCheckMarkDimensions CloseDesktop OpenIcon IsGUIThread IsIconic IsCharAlphaA VkKeyScanW GetMessageExtraInfo GetAsyncKeyState GetWindowTextLengthA CharUpperW IsWindowVisible GetMenu CloseWindow CharLowerW DestroyIcon EndMenu IsCharAlphaNumericW CloseWindowStation GetDC GetClipboardData

gdi32

DeleteColorSpace RealizePalette GetEnhMetaFileW CreateMetaFileW DeleteObject SwapBuffers GetSystemPaletteUse CreateMetaFileA GetTextCharacterExtra UpdateColors EndPath GdiFlush FillPath GetPolyFillMode GetColorSpace SetMetaRgn AbortDoc GetTextAlign StrokePath CreateSolidBrush CreatePatternBrush GetTextCharset GetObjectType GetMapMode PathToRegion GdiGetBatchLimit CloseEnhMetaFile AddFontResourceW

advapi32

RegOpenKeyW

Sharing

General

Malware Config

Signatures

File Explorer

36549e3696fab16e1fb88e4f6bb076f8a4d07ace292396d727685b24c90920f4

PE Signature issue

kernel32

user32

gdi32

advapi32