62fc973022d1c6c5af7ca44889e4c0777bd20a72ae86d62849dba44b7d9bc954

General

Target
62fc973022d1c6c5af7ca44889e4c0777bd20a72ae86d62849dba44b7d9bc954
Size 391KB
Sample220326-gl5znadffq
SHA256 62fc973022d1c6c5af7ca44889e4c0777bd20a72ae86d62849dba44b7d9bc954
MD5 28ad178c1832f29ee5abe5233eb5f211
SHA1 c0571cf37d56aba1d5359df1f9d9113d951966ab
SHA512 b31d30c643c42e50ef169d84e57a3e81dfe05378b65d26eb03858d82cba133bbb94eab73b88c6a7e154b65ebf081acdb1e63f01dc84e31241422c9a1e1ec6093
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

62fc973022d1c6c5af7ca44889e4c0777bd20a72ae86d62849dba44b7d9bc954

.exe 391KB

62fc973022d1c6c5af7ca44889e4c0777bd20a72ae86d62849dba44b7d9bc954

IMPHASH 64d5fa40de59d640e6a358370d73db18
SHA256 62fc973022d1c6c5af7ca44889e4c0777bd20a72ae86d62849dba44b7d9bc954
MD5 28ad178c1832f29ee5abe5233eb5f211
SHA1 c0571cf37d56aba1d5359df1f9d9113d951966ab
SHA512 b31d30c643c42e50ef169d84e57a3e81dfe05378b65d26eb03858d82cba133bbb94eab73b88c6a7e154b65ebf081acdb1e63f01dc84e31241422c9a1e1ec6093
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

20424

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateActCtxA GetModuleHandleA InterlockedExchangeAdd ReadConsoleInputW SetTapeParameters GetTapeStatus WaitNamedPipeA GetTickCount CreateFileA GetPrivateProfileSectionW PulseEvent LocalLock WriteProcessMemory SetEvent FreeConsole SetConsoleTitleW LoadLibraryA VirtualAlloc CommConfigDialogA GetFileAttributesA HeapLock HeapReAlloc GetUserDefaultLangID lstrcatA WriteConsoleOutputAttribute GetVolumePathNamesForVolumeNameA CreateMutexW WaitForSingleObject lstrlenA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree SetFilePointer SetHandleCount GetStdHandle GetFileType ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

234KB

Virtual Size

66.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zama

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pajif

Size

512B

Virtual Size

6B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

62fc973022d1c6c5af7ca44889e4c0777bd20a72ae86d62849dba44b7d9bc954

kernel32

user32