5a50d1389cf1589d90d36d11c37aa677

General

Target
5a50d1389cf1589d90d36d11c37aa677
Size 404KB
Sample220321-ceefxagfh7
SHA256 a6c58dc411ddd6fae1977d92e601c483931fc6cba08bf003a23cdbeb74244b48
MD5 5a50d1389cf1589d90d36d11c37aa677
SHA1 390d43d909860055971ee7bfa619ca149ecfd284
SHA512 c8ffe7e0581f0fe44a1149bc2cb8277720fbdb480ed2e729209df4da325eae0e0e41b2ac63c9859a2f6154aef91584e27579e081e72bafa1f7b304adc68acf55
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

5a50d1389cf1589d90d36d11c37aa677

.exe 404KB

5a50d1389cf1589d90d36d11c37aa677

IMPHASH dd74d0a493381cbdbb2d3a82a03effd4
SHA256 a6c58dc411ddd6fae1977d92e601c483931fc6cba08bf003a23cdbeb74244b48
MD5 5a50d1389cf1589d90d36d11c37aa677
SHA1 390d43d909860055971ee7bfa619ca149ecfd284
SHA512 c8ffe7e0581f0fe44a1149bc2cb8277720fbdb480ed2e729209df4da325eae0e0e41b2ac63c9859a2f6154aef91584e27579e081e72bafa1f7b304adc68acf55
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

31405

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MapViewOfFile ReadConsoleA FreeEnvironmentStringsA GetConsoleAliasesLengthA CreateDirectoryExW GetSystemDirectoryW LoadLibraryW InitializeCriticalSectionAndSpinCount LeaveCriticalSection GetBinaryTypeA ReplaceFileW LocalHandle lstrlenW GetCPInfoExW FreeLibraryAndExitThread SetLastError SetFilePointer AttachConsole VirtualAlloc MoveFileW SetStdHandle LoadLibraryA WriteConsoleA LocalAlloc CreateEventW WriteProfileSectionW SetConsoleWindowInfo GetModuleHandleA GetConsoleTitleW VirtualProtect SetCalendarInfoA BindIoCompletionCallback FindFirstChangeNotificationW UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapReAlloc HeapAlloc GetModuleHandleW Sleep GetProcAddress ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar GetLocaleInfoA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

user32

ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

5a50d1389cf1589d90d36d11c37aa677

kernel32

user32