4f91cc5fef6093b6ccae6c91e02484dc33174df7d0e439fefe5f9b9171e388e3

General

Target
4f91cc5fef6093b6ccae6c91e02484dc33174df7d0e439fefe5f9b9171e388e3
Size 775KB
Sample220328-gx614aged8
SHA256 4f91cc5fef6093b6ccae6c91e02484dc33174df7d0e439fefe5f9b9171e388e3
MD5 a3c739cbbc4975c6210322b1edd0d89e
SHA1 3fdfbb067fc4f8fb6c2797963c8508aff46e13a2
SHA512 dba215f823d2f752915dc90d65ceb69d5cbebd037f356d9e00825909bf2af06b25f7cfc58b6a1a93a3d80d6e0df33d9fe7472502f1b5b74b4ab9b23535064027
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

4f91cc5fef6093b6ccae6c91e02484dc33174df7d0e439fefe5f9b9171e388e3

.exe 775KB

4f91cc5fef6093b6ccae6c91e02484dc33174df7d0e439fefe5f9b9171e388e3

IMPHASH d7711116627162a16abc82040806bb37
SHA256 4f91cc5fef6093b6ccae6c91e02484dc33174df7d0e439fefe5f9b9171e388e3
MD5 a3c739cbbc4975c6210322b1edd0d89e
SHA1 3fdfbb067fc4f8fb6c2797963c8508aff46e13a2
SHA512 dba215f823d2f752915dc90d65ceb69d5cbebd037f356d9e00825909bf2af06b25f7cfc58b6a1a93a3d80d6e0df33d9fe7472502f1b5b74b4ab9b23535064027
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

18932

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AllocConsole ReadConsoleA SetMailslotInfo FreeEnvironmentStringsA GetConsoleAliasesLengthA CreateDirectoryExW GlobalAlloc LoadLibraryW InitializeCriticalSectionAndSpinCount LeaveCriticalSection WriteConsoleW GetBinaryTypeA ReplaceFileW LocalHandle GetSystemDirectoryA lstrlenW GetStdHandle GetCPInfoExW SetFilePointer BindIoCompletionCallback GetProcAddress VirtualAlloc WriteProfileSectionA LoadLibraryA MoveFileA CreateEventW SetConsoleWindowInfo GetModuleHandleA GetConsoleTitleW SetCalendarInfoA SetLastError FindFirstChangeNotificationW UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetLastError HeapReAlloc HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize EnterCriticalSection SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

user32

ScreenToClient

Sharing

General

Malware Config

Signatures

File Explorer

4f91cc5fef6093b6ccae6c91e02484dc33174df7d0e439fefe5f9b9171e388e3

kernel32

user32