44dd0e103b72ea100745be752570fd919931918a3b0476ce986d2b19aae28089

General

Target
44dd0e103b72ea100745be752570fd919931918a3b0476ce986d2b19aae28089
Size 392KB
Sample220326-glc9msdffn
SHA256 44dd0e103b72ea100745be752570fd919931918a3b0476ce986d2b19aae28089
MD5 ad0dbcdb69498bd88cfe520eb2872791
SHA1 6971050529224ba940d099730240e7aa98ce3b07
SHA512 839efd1ee2cd8bbf717c269363505c2ad48c918aff456ccca8ca812d6ffe33d848f2eec8250a3809f8a8145ffa000f79252e59dda542bb008d23eb9cd8c13b21
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

44dd0e103b72ea100745be752570fd919931918a3b0476ce986d2b19aae28089

.exe 392KB

44dd0e103b72ea100745be752570fd919931918a3b0476ce986d2b19aae28089

IMPHASH b07e20a0538650e5def588c168554340
SHA256 44dd0e103b72ea100745be752570fd919931918a3b0476ce986d2b19aae28089
MD5 ad0dbcdb69498bd88cfe520eb2872791
SHA1 6971050529224ba940d099730240e7aa98ce3b07
SHA512 839efd1ee2cd8bbf717c269363505c2ad48c918aff456ccca8ca812d6ffe33d848f2eec8250a3809f8a8145ffa000f79252e59dda542bb008d23eb9cd8c13b21
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

20312

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateActCtxA GetModuleHandleA InterlockedExchangeAdd ReadConsoleInputW SetTapeParameters GetTapeStatus WaitNamedPipeA GetTickCount CreateFileA GetPrivateProfileSectionW PulseEvent LocalLock WriteProcessMemory SetEvent AllocConsole SetConsoleTitleW LoadLibraryA VirtualAlloc CommConfigDialogA GetFileAttributesA HeapLock HeapReAlloc GetUserDefaultLangID lstrcatA WriteConsoleOutputAttribute GetVolumePathNamesForVolumeNameA CreateMutexA WaitForSingleObject lstrlenA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree SetFilePointer SetHandleCount GetStdHandle GetFileType ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

234KB

Virtual Size

66.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fowe

Size

1024B

Virtual Size

626B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sigewa

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xayefu

Size

512B

Virtual Size

6B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

44dd0e103b72ea100745be752570fd919931918a3b0476ce986d2b19aae28089

kernel32

user32