efffa644226568072ebabf09f621d71fb64e5a8f17d23c0586c544e1c71f7047

General

Target
efffa644226568072ebabf09f621d71fb64e5a8f17d23c0586c544e1c71f7047
Size 774KB
Sample220328-g4xe8sgfb2
SHA256 efffa644226568072ebabf09f621d71fb64e5a8f17d23c0586c544e1c71f7047
MD5 8994b6b42a7aac42c8552b52679b7e6e
SHA1 e9272a55947c32a49ffee059b6ac74e6a6ce5af7
SHA512 24fde45e6a5e5c82f946d08ec02e3c1d2ba87d34086f10e1f8cc5b4e84e936f1d6a51afa9cadd1b62f096376cb7edec289fc01d4601aadeef6fb4deb9ccbc4f0
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

efffa644226568072ebabf09f621d71fb64e5a8f17d23c0586c544e1c71f7047

.exe 774KB

efffa644226568072ebabf09f621d71fb64e5a8f17d23c0586c544e1c71f7047

IMPHASH 27d8a7471ee53dd07acef039b03728e9
SHA256 efffa644226568072ebabf09f621d71fb64e5a8f17d23c0586c544e1c71f7047
MD5 8994b6b42a7aac42c8552b52679b7e6e
SHA1 e9272a55947c32a49ffee059b6ac74e6a6ce5af7
SHA512 24fde45e6a5e5c82f946d08ec02e3c1d2ba87d34086f10e1f8cc5b4e84e936f1d6a51afa9cadd1b62f096376cb7edec289fc01d4601aadeef6fb4deb9ccbc4f0
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

43104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateMutexW SetLocaleInfoW FindNextVolumeW GetNamedPipeHandleStateA LocalFileTimeToFileTime EnumResourceTypesW EnumResourceNamesW FillConsoleOutputCharacterA CreateTimerQueueTimer TerminateProcess SetEvent FindNextFileA GetCompressedFileSizeA CopyFileExW BuildCommDCBW VerifyVersionInfoA FreeResource SetLastError GetVersionExA ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameW GetCommConfig WritePrivateProfileStructW LocalFree CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA LoadResource AddAtomW InitAtomTable GetThreadPriority CallNamedPipeA GetDriveTypeW BuildCommDCBAndTimeoutsA VirtualProtect GlobalAlloc VerifyVersionInfoW InterlockedExchange FindFirstChangeNotificationW SearchPathW FormatMessageW SetDllDirectoryW GetModuleHandleA WritePrivateProfileStringA GetUserDefaultLCID TerminateThread GlobalUnfix SetConsoleWindowInfo InterlockedDecrement GetStartupInfoA GetSystemWow64DirectoryW CopyFileA GetPrivateProfileIntA SetCalendarInfoW DebugBreak SetConsoleCursorInfo FreeLibraryAndExitThread GetModuleFileNameA SetConsoleScreenBufferSize WaitForDebugEvent InterlockedExchangeAdd GetOEMCP GetPrivateProfileStringW CreateActCtxA GetPrivateProfileIntW ReadConsoleInputW OutputDebugStringW SetThreadAffinityMask FlushConsoleInputBuffer lstrlenA WriteConsoleW OpenMutexW GetThreadContext DeleteCriticalSection QueryDepthSList ConvertFiberToThread SetProcessPriorityBoost LockFile FreeEnvironmentStringsA GetConsoleCP CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasExesLengthA CreateMailslotW GetCommState MoveFileWithProgressW GetSystemTimeAdjustment EnumSystemLocalesA GetLastError OpenWaitableTimerW OpenFileMappingW GetFileSizeEx GetConsoleAliasesLengthW SetProcessShutdownParameters FillConsoleOutputCharacterW WriteConsoleOutputCharacterA GetNumberFormatA BuildCommDCBAndTimeoutsW GetConsoleAliasExesA GetBinaryTypeW GetModuleHandleW Sleep InterlockedIncrement GetProcAddress ExitProcess MoveFileA DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree WriteFile GetStdHandle GetACP GetCPInfo IsValidCodePage GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind OutputDebugStringA LoadLibraryW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

efffa644226568072ebabf09f621d71fb64e5a8f17d23c0586c544e1c71f7047

kernel32

user32