0f9ebd5af723a6af2cd12dced91b25a43f08b8aabe6962093a54a2c367feac20

Sharing

Copy URL Twitter E-mail

General

Target
0f9ebd5af723a6af2cd12dced91b25a43f08b8aabe6962093a54a2c367feac20
Size 831KB
Sample220326-d1b4cafgc7
SHA256 0f9ebd5af723a6af2cd12dced91b25a43f08b8aabe6962093a54a2c367feac20
MD5 ee64f0b8e3c166cac699090569e697ce
SHA1 6af5931c66f03e655171a4b5aae10088a4ae8ca2
SHA512 cc9bdb523464a893e4cf412d993e32c64189b197fd3060b0121da56c1202cd918bcb64fc05cd69c796ea47306b6397d3912f4d9caf903d104966991bedee6d8a
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

0f9ebd5af723a6af2cd12dced91b25a43f08b8aabe6962093a54a2c367feac20

.exe 831KB

0f9ebd5af723a6af2cd12dced91b25a43f08b8aabe6962093a54a2c367feac20

IMPHASH 6c073ad4664cadbdd8fc5c76d456715f
SHA256 0f9ebd5af723a6af2cd12dced91b25a43f08b8aabe6962093a54a2c367feac20
MD5 ee64f0b8e3c166cac699090569e697ce
SHA1 6af5931c66f03e655171a4b5aae10088a4ae8ca2
SHA512 cc9bdb523464a893e4cf412d993e32c64189b197fd3060b0121da56c1202cd918bcb64fc05cd69c796ea47306b6397d3912f4d9caf903d104966991bedee6d8a
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

5199

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle LoadLibraryA GetProcAddress GetConsoleWindow GetStringTypeW MultiByteToWideChar LCMapStringW HeapReAlloc HeapAlloc HeapSize RtlUnwind IsValidCodePage GetOEMCP GetACP GetCPInfo Sleep HeapFree LoadLibraryW EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter HeapCreate InterlockedDecrement GetCommandLineA HeapSetInformation TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError IsProcessorFeaturePresent

imm32

ImmAssociateContext ImmGetContext ImmGenerateMessage ImmUnlockIMCC ImmSetConversionStatus ImmSimulateHotKey ImmGetIMCCLockCount

pdh

PdhExpandCounterPathW PdhVbGetDoubleCounterValue PdhGetRawCounterArrayA PdhEnumObjectItemsW PdhEnumMachinesW PdhParseInstanceNameA PdhGetDataSourceTimeRangeA PdhGetDataSourceTimeRangeW PdhMakeCounterPathW

shlwapi

SHDeleteKeyA PathAddBackslashW UrlCombineW PathStripPathA

loadperf

LoadPerfCounterTextStringsW UnloadPerfCounterTextStringsW UnloadPerfCounterTextStringsA LoadPerfCounterTextStringsA

winspool.drv

AddJobW EnumJobsA ord215 StartDocPrinterA ClosePrinter

user32

ShowWindow CallWindowProcW