55d8c8e92a1efdffdb85ec2276d9c4e215c1a43b077360c20f108e425a5fa437

General

Target
55d8c8e92a1efdffdb85ec2276d9c4e215c1a43b077360c20f108e425a5fa437
Size 820KB
Sample220328-gyrb2agef2
SHA256 55d8c8e92a1efdffdb85ec2276d9c4e215c1a43b077360c20f108e425a5fa437
MD5 6d2753ee91779da9987ff57fecc766d3
SHA1 2ee830c4f01f58431fc14106e060557df347422f
SHA512 1b34ec63bd7fc59cb48bb421de401c1d063cf86b297a365c2abaeef93b48f1ad1f2ab0d352a8b14bc1978f5808cfdac39f1bfe1c941b33b30c788df122511e34
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

55d8c8e92a1efdffdb85ec2276d9c4e215c1a43b077360c20f108e425a5fa437

.exe 820KB

55d8c8e92a1efdffdb85ec2276d9c4e215c1a43b077360c20f108e425a5fa437

IMPHASH 159dcaa804632f606b007a362cfb6cc5
SHA256 55d8c8e92a1efdffdb85ec2276d9c4e215c1a43b077360c20f108e425a5fa437
MD5 6d2753ee91779da9987ff57fecc766d3
SHA1 2ee830c4f01f58431fc14106e060557df347422f
SHA512 1b34ec63bd7fc59cb48bb421de401c1d063cf86b297a365c2abaeef93b48f1ad1f2ab0d352a8b14bc1978f5808cfdac39f1bfe1c941b33b30c788df122511e34
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

35356

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterW lstrlenA GetConsoleAliasesLengthW GetProcessIoCounters ReadConsoleA SetMailslotInfo FreeEnvironmentStringsA GetConsoleTitleA InitializeCriticalSection GetBinaryTypeA ReplaceFileW CreateDirectoryA GetConsoleAliasesW GetCPInfoExW GetLastError GetProcAddress FindFirstChangeNotificationW MoveFileW WriteProfileSectionA SetStdHandle EnterCriticalSection GlobalFree LoadLibraryA WriteConsoleA SetConsoleWindowInfo GetModuleHandleA VirtualProtect SetCalendarInfoA UnregisterWaitEx InterlockedPushEntrySList VirtualAlloc FillConsoleOutputCharacterA WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW HeapAlloc HeapCreate VirtualFree HeapReAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount GetLocaleInfoW

Sharing

General

Malware Config

Signatures

File Explorer

55d8c8e92a1efdffdb85ec2276d9c4e215c1a43b077360c20f108e425a5fa437

kernel32