ab3bfacf38d1544dceacfe2ecd4dc8501182979913adbc56402e874e6d53a315

General

Target
ab3bfacf38d1544dceacfe2ecd4dc8501182979913adbc56402e874e6d53a315
Size 776KB
Sample220325-kstfzsded7
SHA256 ab3bfacf38d1544dceacfe2ecd4dc8501182979913adbc56402e874e6d53a315
MD5 0cdda91fbca8ab0cacdaca3bfe81e7fa
SHA1 10c076648a48b103491074847efe5c532349d398
SHA512 38d6378b74ea230d55caa670136279b4fee97723f98074b972f0c54c0b37d9f16eeab8fe5516dee1d2cef4451efa9d891ceed4311628f1ef855741ae2fed96cd
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

ab3bfacf38d1544dceacfe2ecd4dc8501182979913adbc56402e874e6d53a315

.exe 776KB

ab3bfacf38d1544dceacfe2ecd4dc8501182979913adbc56402e874e6d53a315

IMPHASH 95ad07e52855bf052511ff6b3b1e2bcf
SHA256 ab3bfacf38d1544dceacfe2ecd4dc8501182979913adbc56402e874e6d53a315
MD5 0cdda91fbca8ab0cacdaca3bfe81e7fa
SHA1 10c076648a48b103491074847efe5c532349d398
SHA512 38d6378b74ea230d55caa670136279b4fee97723f98074b972f0c54c0b37d9f16eeab8fe5516dee1d2cef4451efa9d891ceed4311628f1ef855741ae2fed96cd
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

17118

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExW CreateDirectoryExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleW CreateDirectoryExW LoadLibraryW LeaveCriticalSection WriteConsoleW GetBinaryTypeA GetMailslotInfo lstrlenW ReplaceFileA GetConsoleAliasesW GetStdHandle GetLastError SetConsoleTextAttribute VirtualAlloc MoveFileW WriteProfileSectionA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize SetCalendarInfoW FindFirstChangeNotificationA QueueUserWorkItem VirtualProtect GetCPInfoExA InterlockedPushEntrySList AllocConsole GetProcAddress SetFilePointer HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetFileType DeleteCriticalSection EnterCriticalSection HeapCreate VirtualFree HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar ReadFile InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers HeapSize CreateFileA CloseHandle

user32

ClientToScreen

advapi32

ClearEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

ab3bfacf38d1544dceacfe2ecd4dc8501182979913adbc56402e874e6d53a315

kernel32

user32

advapi32