baa36a93088b6dc0c08ff2c877f92ecd7a84314c5f9515b1108f13bc116ef1ab

General

Target
baa36a93088b6dc0c08ff2c877f92ecd7a84314c5f9515b1108f13bc116ef1ab
Size 791KB
Sample220329-fejmeabgh5
SHA256 baa36a93088b6dc0c08ff2c877f92ecd7a84314c5f9515b1108f13bc116ef1ab
MD5 6bc1224ed22ecf2caacba371c7dbac55
SHA1 e2734f5030b294a6fa538bbb117e564ff11fce59
SHA512 41c7431dff3d3cba027f848a575c2ac867d77f3f3f0f50f80e4d6ecea2ba44c072694c55d00fb0d40ebbfe9caed809e01d94b350de89c11a9db716e7a41d067d
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

baa36a93088b6dc0c08ff2c877f92ecd7a84314c5f9515b1108f13bc116ef1ab

.exe 791KB

baa36a93088b6dc0c08ff2c877f92ecd7a84314c5f9515b1108f13bc116ef1ab

IMPHASH 5b781a7e94da324fe985d05bb125d645
SHA256 baa36a93088b6dc0c08ff2c877f92ecd7a84314c5f9515b1108f13bc116ef1ab
MD5 6bc1224ed22ecf2caacba371c7dbac55
SHA1 e2734f5030b294a6fa538bbb117e564ff11fce59
SHA512 41c7431dff3d3cba027f848a575c2ac867d77f3f3f0f50f80e4d6ecea2ba44c072694c55d00fb0d40ebbfe9caed809e01d94b350de89c11a9db716e7a41d067d
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

43776

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA FindNextVolumeW GetNamedPipeHandleStateW FileTimeToSystemTime EnumResourceTypesW EnumResourceNamesW FillConsoleOutputCharacterW GetTimeZoneInformation TerminateProcess SetEvent FindNextFileA GetCompressedFileSizeA CopyFileExW BuildCommDCBW VerifyVersionInfoW FreeResource SetLastError GetVersionExW ReadConsoleOutputCharacterA SetDefaultCommConfigA VerLanguageNameA EscapeCommFunction WritePrivateProfileStructW FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointW ResetWriteWatch WriteConsoleInputA SetComputerNameExA AddAtomW InitAtomTable GetThreadPriority CallNamedPipeA GetDriveTypeW BuildCommDCBAndTimeoutsW VirtualProtect LoadLibraryW GlobalAlloc InterlockedExchange FindFirstChangeNotificationA VerifyVersionInfoA FormatMessageA SetDllDirectoryW GetModuleHandleA WritePrivateProfileStringA GetUserDefaultLCID GlobalUnfix GetStartupInfoW GetSystemWow64DirectoryW CopyFileA SetCalendarInfoW GetLastError DebugBreak SetConsoleCursorInfo SetConsoleScreenBufferSize ContinueDebugEvent InterlockedExchangeAdd GetPrivateProfileIntA GetPrivateProfileStringW CreateActCtxA ReadConsoleInputW OutputDebugStringW EnumResourceTypesA lstrlenA WriteConsoleW ReadConsoleOutputW OpenMutexW GetThreadContext DeleteCriticalSection GlobalWire WriteConsoleInputW FreeEnvironmentStringsW ConvertFiberToThread SetVolumeMountPointA EnumCalendarInfoA SetProcessPriorityBoost LockFile VerSetConditionMask GetConsoleCP GetProfileStringA CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasExesLengthW CreateMailslotW GetCommState MoveFileWithProgressW GetSystemTimeAdjustment _hread _lopen EnumSystemLocalesA GetConsoleAliasExesLengthA MoveFileA GetPrivateProfileIntW DeleteAtom WriteConsoleOutputCharacterW GetSystemWindowsDirectoryA GetComputerNameA FindFirstVolumeW CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerW OpenFileMappingW GetFileSizeEx GetConsoleAliasesLengthW GetProcessShutdownParameters FindNextVolumeMountPointA WriteConsoleOutputCharacterA GetNumberFormatA GetConsoleAliasExesA GetBinaryTypeW GetCurrentActCtx GetACP LoadLibraryA GetModuleHandleW Sleep InterlockedIncrement InterlockedDecrement GetProcAddress ExitProcess DeleteFileA RaiseException HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleFileNameA WriteFile GetStdHandle GetOEMCP GetCPInfo IsValidCodePage GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind OutputDebugStringA WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

CharToOemBuffW

gdi32

GetCharWidth32A

Sharing

General

Malware Config

Signatures

File Explorer

baa36a93088b6dc0c08ff2c877f92ecd7a84314c5f9515b1108f13bc116ef1ab

kernel32

user32

gdi32