c0bef9ba844c2d2cf99c9e7e397dcb9be6ba14bc8466603f6f2765e9213137d8

General

Target
c0bef9ba844c2d2cf99c9e7e397dcb9be6ba14bc8466603f6f2765e9213137d8
Size 776KB
Sample220329-fejmeabgh6
SHA256 c0bef9ba844c2d2cf99c9e7e397dcb9be6ba14bc8466603f6f2765e9213137d8
MD5 7041e65dc178509b2d6082e7ee3d691e
SHA1 4de716b6312a9ff0317a936389f612339f90aab4
SHA512 0ba2b11919a5cd063b15e210721b2f54dc54f5729df19ce2454997fb5e0807d7e06d4aaa745a5a2ca5b3ef94a90f72bf4b479a3752d44172e1046f38667d279f
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

c0bef9ba844c2d2cf99c9e7e397dcb9be6ba14bc8466603f6f2765e9213137d8

.exe 776KB

c0bef9ba844c2d2cf99c9e7e397dcb9be6ba14bc8466603f6f2765e9213137d8

IMPHASH 4726b2723a987e7ca1cfb498c6580a30
SHA256 c0bef9ba844c2d2cf99c9e7e397dcb9be6ba14bc8466603f6f2765e9213137d8
MD5 7041e65dc178509b2d6082e7ee3d691e
SHA1 4de716b6312a9ff0317a936389f612339f90aab4
SHA512 0ba2b11919a5cd063b15e210721b2f54dc54f5729df19ce2454997fb5e0807d7e06d4aaa745a5a2ca5b3ef94a90f72bf4b479a3752d44172e1046f38667d279f
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

17534

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AllocConsole SetConsoleTextAttribute ReadConsoleA SetMailslotInfo FreeEnvironmentStringsA GetConsoleTitleA CreateDirectoryExW LoadLibraryW LeaveCriticalSection WriteConsoleW GetBinaryTypeA ReplaceFileW LocalHandle GetSystemDirectoryA lstrlenW GetStdHandle GetConsoleAliasesLengthW GetLastError BindIoCompletionCallback GetProcAddress VirtualAlloc WriteProfileSectionA LoadLibraryA SetCalendarInfoW MoveFileA CreateEventW GetModuleHandleA VirtualProtect SetFilePointer GetCPInfoExW FindFirstChangeNotificationW MultiByteToWideChar HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId EnterCriticalSection SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree Sleep ExitProcess WriteFile GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers HeapSize CreateFileA CloseHandle

user32

ScreenToClient

advapi32

ClearEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

c0bef9ba844c2d2cf99c9e7e397dcb9be6ba14bc8466603f6f2765e9213137d8

kernel32

user32

advapi32