66ea6903fdf401a101db1622396a59d2

General

Target
66ea6903fdf401a101db1622396a59d2
Size 512KB
Sample220322-n3fvesbdej
SHA256 65fa28bc56a1b8132aede30afcb70685f90cfccd32f899ffda736b1b4f46144c
MD5 66ea6903fdf401a101db1622396a59d2
SHA1 a55682934da4c82b290ba3aa0123d2de2be739e1
SHA512 0f4b4c2f60b1c706931deca9e8f1557bfd0dead5e29ff878c0a8a51d7f1af111479dbfa4a4f7c5ee7088c49deb452fda540090b462e7ac8378dbad0f293b8099
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

66ea6903fdf401a101db1622396a59d2

.exe 512KB

66ea6903fdf401a101db1622396a59d2

IMPHASH 82d4c36ef8d8d93a7382f02fd78b23b0
SHA256 65fa28bc56a1b8132aede30afcb70685f90cfccd32f899ffda736b1b4f46144c
MD5 66ea6903fdf401a101db1622396a59d2
SHA1 a55682934da4c82b290ba3aa0123d2de2be739e1
SHA512 0f4b4c2f60b1c706931deca9e8f1557bfd0dead5e29ff878c0a8a51d7f1af111479dbfa4a4f7c5ee7088c49deb452fda540090b462e7ac8378dbad0f293b8099
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

18948

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AllocConsole SetConsoleTextAttribute ReadConsoleA SetMailslotInfo FreeEnvironmentStringsA GetConsoleTitleA CreateDirectoryExW GlobalAlloc LoadLibraryW LeaveCriticalSection WriteConsoleW GetBinaryTypeA ReplaceFileW LocalHandle GetSystemDirectoryA lstrlenW GetConsoleAliasesLengthW GetCPInfoExW SetLastError BindIoCompletionCallback GetProcAddress VirtualAlloc WriteProfileSectionA LoadLibraryA MoveFileA CreateEventW GetModuleHandleA SetCalendarInfoA SetFilePointer GetStdHandle FindFirstChangeNotificationW UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetLastError HeapReAlloc HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize EnterCriticalSection SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

user32

ScreenToClient

advapi32

ClearEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

66ea6903fdf401a101db1622396a59d2

kernel32

user32

advapi32