63b9f9e17254c53c4aacbf9b636c3465

General

Target
63b9f9e17254c53c4aacbf9b636c3465
Size 551KB
Sample220321-q4n9ascfg2
SHA256 14eb78c6d9f873f43e453ca56c4d9d1ffbb03ee79fddb87cadeef59626299b6a
MD5 63b9f9e17254c53c4aacbf9b636c3465
SHA1 5bef0077d1090e0216a915de11f4786a49c7f232
SHA512 9d817e6e4ec8506d741f7cec252dc28230b52b53dd847a29c752aab6f1984f162a9674b836eec185a4844903920caf311a2955595657c8fa94aecf26634a6618
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

63b9f9e17254c53c4aacbf9b636c3465

.exe 551KB

63b9f9e17254c53c4aacbf9b636c3465

IMPHASH d626a2a864a52e91dc5f85b5e98029ae
SHA256 14eb78c6d9f873f43e453ca56c4d9d1ffbb03ee79fddb87cadeef59626299b6a
MD5 63b9f9e17254c53c4aacbf9b636c3465
SHA1 5bef0077d1090e0216a915de11f4786a49c7f232
SHA512 9d817e6e4ec8506d741f7cec252dc28230b52b53dd847a29c752aab6f1984f162a9674b836eec185a4844903920caf311a2955595657c8fa94aecf26634a6618
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

43744

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA FindNextVolumeW GetNamedPipeHandleStateW FileTimeToSystemTime EnumResourceTypesW EnumResourceNamesW FillConsoleOutputCharacterW GetTimeZoneInformation TerminateProcess SetEvent FindNextFileA GetCompressedFileSizeA CopyFileExW BuildCommDCBW VerifyVersionInfoW FreeResource SetLastError GetVersionExW ReadConsoleOutputCharacterA SetDefaultCommConfigA VerLanguageNameA EscapeCommFunction WritePrivateProfileStructW FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointW GetWriteWatch WriteConsoleInputA SetComputerNameExA AddAtomW InitAtomTable GetThreadPriority CallNamedPipeW GetDriveTypeW BuildCommDCBAndTimeoutsW VirtualProtect LoadLibraryW GlobalAlloc InterlockedExchange FindFirstChangeNotificationA VerifyVersionInfoA FormatMessageA SetDllDirectoryW GetModuleHandleA WritePrivateProfileStringA GetUserDefaultLCID GlobalUnfix GetStartupInfoW GetSystemWow64DirectoryW CopyFileA GetLastError DebugBreak SetConsoleCursorInfo SetCalendarInfoW SetConsoleScreenBufferSize ContinueDebugEvent InterlockedExchangeAdd WriteProfileSectionA GetACP GetPrivateProfileStringW CreateActCtxA GetConsoleAliasA OutputDebugStringW EnumResourceTypesA lstrlenA ReadConsoleW WriteConsoleW DeleteCriticalSection GlobalWire FreeEnvironmentStringsW ConvertFiberToThread lstrcatA EnumCalendarInfoA SetThreadAffinityMask LockFile VerSetConditionMask GetConsoleCP GetProfileStringA CreateIoCompletionPort AllocConsole GlobalGetAtomNameA SetComputerNameA GetConsoleAliasExesLengthW WriteConsoleInputW CreateMailslotW GetCommState MoveFileWithProgressW GetSystemTimeAdjustment _hread _lopen EnumSystemLocalesW GetConsoleAliasExesLengthA MoveFileA ResetWriteWatch EnumDateFormatsW DeleteAtom GetSystemWindowsDirectoryA GetComputerNameA FindFirstVolumeW CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerA OpenFileMappingA SetProcessAffinityMask GetConsoleAliasesLengthA GetProcessShutdownParameters FindNextVolumeMountPointA WriteConsoleOutputCharacterA GetNumberFormatA GetConsoleAliasExesA GetBinaryTypeW GetCurrentActCtx BuildCommDCBAndTimeoutsA GetSystemWindowsDirectoryW LoadLibraryA GetModuleHandleW Sleep InterlockedIncrement InterlockedDecrement GetProcAddress ExitProcess DeleteFileA RaiseException GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleFileNameA WriteFile GetStdHandle GetOEMCP GetCPInfo IsValidCodePage GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind OutputDebugStringA MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

CharToOemBuffA

gdi32

GetCharWidth32A

Sharing

General

Malware Config

Signatures

File Explorer

63b9f9e17254c53c4aacbf9b636c3465

kernel32

user32

gdi32