068e87700fbf8d8febda1dcfd6bbc6bb2d93e09c115cf80abf978d21128afa5d

General

Target
068e87700fbf8d8febda1dcfd6bbc6bb2d93e09c115cf80abf978d21128afa5d
Size 391KB
Sample220326-m7bktsbhd3
SHA256 068e87700fbf8d8febda1dcfd6bbc6bb2d93e09c115cf80abf978d21128afa5d
MD5 e85505176caf2ed282cb2daa31a4a37b
SHA1 d111fdce9c9d56914b0b65f1dda3dd9bd24f005c
SHA512 7f25b18766c1bb0bff9feff6844978be8eb2753b0dafe17e5f7b7d49e72242faf89dd7837ea0bf14b53e013b320039bf51605bc95c490790dcb98bb8237edcff
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

068e87700fbf8d8febda1dcfd6bbc6bb2d93e09c115cf80abf978d21128afa5d

.exe 391KB

068e87700fbf8d8febda1dcfd6bbc6bb2d93e09c115cf80abf978d21128afa5d

IMPHASH 64d5fa40de59d640e6a358370d73db18
SHA256 068e87700fbf8d8febda1dcfd6bbc6bb2d93e09c115cf80abf978d21128afa5d
MD5 e85505176caf2ed282cb2daa31a4a37b
SHA1 d111fdce9c9d56914b0b65f1dda3dd9bd24f005c
SHA512 7f25b18766c1bb0bff9feff6844978be8eb2753b0dafe17e5f7b7d49e72242faf89dd7837ea0bf14b53e013b320039bf51605bc95c490790dcb98bb8237edcff
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

20424

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateActCtxA GetModuleHandleA InterlockedExchangeAdd ReadConsoleInputW SetTapeParameters GetTapeStatus WaitNamedPipeA GetTickCount CreateFileA GetPrivateProfileSectionW PulseEvent LocalLock WriteProcessMemory SetEvent FreeConsole SetConsoleTitleW LoadLibraryA VirtualAlloc CommConfigDialogA GetFileAttributesA HeapLock HeapReAlloc GetUserDefaultLangID lstrcatA WriteConsoleOutputAttribute GetVolumePathNamesForVolumeNameA CreateMutexW WaitForSingleObject lstrlenA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree SetFilePointer SetHandleCount GetStdHandle GetFileType ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

234KB

Virtual Size

66.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.huven

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vaduz

Size

512B

Virtual Size

6B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

068e87700fbf8d8febda1dcfd6bbc6bb2d93e09c115cf80abf978d21128afa5d

kernel32

user32