f2bc183055fda0cc3bc9be6eeed173b01695b2e0b5a930553dc15cccec11f366

General

Target
f2bc183055fda0cc3bc9be6eeed173b01695b2e0b5a930553dc15cccec11f366
Size 392KB
Sample220326-kfwetafbcn
SHA256 f2bc183055fda0cc3bc9be6eeed173b01695b2e0b5a930553dc15cccec11f366
MD5 f259c8d03a941db5299f248c07a47172
SHA1 95220173820cf7a4304f8b16ea8db8faed1d67a1
SHA512 27c7615ef7dbdfa33f44cf7a7688cb4e60b8812a0a27c99b2968cb50305967655495eb7ddbfdb5044a499f3ff63f642266282eae9661ae2ea53f1018712d338b
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

f2bc183055fda0cc3bc9be6eeed173b01695b2e0b5a930553dc15cccec11f366

.exe 392KB

f2bc183055fda0cc3bc9be6eeed173b01695b2e0b5a930553dc15cccec11f366

IMPHASH b07e20a0538650e5def588c168554340
SHA256 f2bc183055fda0cc3bc9be6eeed173b01695b2e0b5a930553dc15cccec11f366
MD5 f259c8d03a941db5299f248c07a47172
SHA1 95220173820cf7a4304f8b16ea8db8faed1d67a1
SHA512 27c7615ef7dbdfa33f44cf7a7688cb4e60b8812a0a27c99b2968cb50305967655495eb7ddbfdb5044a499f3ff63f642266282eae9661ae2ea53f1018712d338b
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

20312

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateActCtxA GetModuleHandleA InterlockedExchangeAdd ReadConsoleInputW SetTapeParameters GetTapeStatus WaitNamedPipeA GetTickCount CreateFileA GetPrivateProfileSectionW PulseEvent LocalLock WriteProcessMemory SetEvent AllocConsole SetConsoleTitleW LoadLibraryA VirtualAlloc CommConfigDialogA GetFileAttributesA HeapLock HeapReAlloc GetUserDefaultLangID lstrcatA WriteConsoleOutputAttribute GetVolumePathNamesForVolumeNameA CreateMutexA WaitForSingleObject lstrlenA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree SetFilePointer SetHandleCount GetStdHandle GetFileType ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

234KB

Virtual Size

66.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.miwiz

Size

1024B

Virtual Size

626B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.yiyuw

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xividim

Size

512B

Virtual Size

6B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

f2bc183055fda0cc3bc9be6eeed173b01695b2e0b5a930553dc15cccec11f366

kernel32

user32