b981a1b3db85e9ae44a79f66ecbced67088bda1089fe799d0bcb8dc7c7882b59

Sharing

Copy URL Twitter E-mail

General

Target
b981a1b3db85e9ae44a79f66ecbced67088bda1089fe799d0bcb8dc7c7882b59
Size 807KB
Sample220325-kten8aabbl
SHA256 b981a1b3db85e9ae44a79f66ecbced67088bda1089fe799d0bcb8dc7c7882b59
MD5 49735352f75799eb133877c00ce9b75e
SHA1 796b9e7035353181fb9e16cdba938e6bc9075172
SHA512 8baeaa5968bdf00482726735dc68b8c8e649b49392eabc4946c6c5cb17389b2dec717a267987c8166840df917e641bb97c08eedccf38d6227d86df57a05737b3
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

b981a1b3db85e9ae44a79f66ecbced67088bda1089fe799d0bcb8dc7c7882b59

.exe 807KB

b981a1b3db85e9ae44a79f66ecbced67088bda1089fe799d0bcb8dc7c7882b59

IMPHASH 4988f2ae63018c28daaeda2dba44eec2
SHA256 b981a1b3db85e9ae44a79f66ecbced67088bda1089fe799d0bcb8dc7c7882b59
MD5 49735352f75799eb133877c00ce9b75e
SHA1 796b9e7035353181fb9e16cdba938e6bc9075172
SHA512 8baeaa5968bdf00482726735dc68b8c8e649b49392eabc4946c6c5cb17389b2dec717a267987c8166840df917e641bb97c08eedccf38d6227d86df57a05737b3
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

42928

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNamedPipeHandleStateW FileTimeToSystemTime EnumResourceTypesW EnumResourceNamesW FillConsoleOutputCharacterW GetTimeZoneInformation TerminateProcess SetLastError SetEvent FindNextFileA GetCompressedFileSizeW CopyFileExW BuildCommDCBAndTimeoutsA QueryDepthSList GetVersionExW VerifyVersionInfoW ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameA EscapeCommFunction WritePrivateProfileStructW FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointW GetWriteWatch WriteConsoleInputA SetComputerNameExW FindAtomA GlobalDeleteAtom SetThreadPriority CallNamedPipeW GetDriveTypeW VirtualProtect LoadLibraryW LocalAlloc InterlockedDecrement FindFirstChangeNotificationA VerifyVersionInfoA CopyFileA FormatMessageW SetDllDirectoryW GetModuleHandleW WritePrivateProfileStringA GetUserDefaultLangID GlobalUnfix GetStartupInfoW GetSystemWow64DirectoryW CopyFileW GetLastError DebugBreak SetConsoleCursorInfo SetCalendarInfoA SetConsoleCursorPosition ContinueDebugEvent InterlockedExchangeAdd GetACP FindFirstVolumeW CreateActCtxA GetConsoleAliasA OutputDebugStringW EnumResourceTypesA lstrlenA WriteConsoleW GetPrivateProfileSectionNamesA GlobalWire FreeEnvironmentStringsW lstrcatA EnumCalendarInfoA SetThreadAffinityMask LockFile RaiseException VerSetConditionMask SetConsoleCP GetSystemWindowsDirectoryA GetProfileStringA GetQueuedCompletionStatus AllocConsole GlobalGetAtomNameA SetComputerNameA GetConsoleAliasExesLengthW WriteConsoleInputW CreateMailslotW SetCommState MoveFileWithProgressA GetSystemTimeAdjustment _hread _lopen EnumSystemLocalesW GetConsoleAliasExesLengthA MoveFileA ResetWriteWatch GetSystemWindowsDirectoryW EnumDateFormatsW GetModuleHandleA DeleteAtom GetComputerNameW GetConsoleAliasesLengthA FindFirstVolumeA CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerA OpenFileMappingA SetProcessAffinityMask GetConsoleAliasesLengthW SetProcessShutdownParameters FindNextVolumeMountPointA ReadConsoleW WriteConsoleOutputCharacterA GetNumberFormatW GetConsoleAliasExesA GetBinaryTypeA GetCurrentActCtx InitializeCriticalSection WriteProfileSectionA SetLocaleInfoA GetPrivateProfileStringA LoadLibraryA DeleteFileA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep InterlockedIncrement GetProcAddress ExitProcess TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetHandleCount GetStdHandle GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidth32A

advapi32

ImpersonateSelf

winhttp

WinHttpWriteData

msimg32

AlphaBlend