135a3e3586af8b98c1d5a44b8f63e7b6c582ad1a7a99342a376d85e21909957d

General

Target
135a3e3586af8b98c1d5a44b8f63e7b6c582ad1a7a99342a376d85e21909957d
Size 203KB
Sample220329-ztplrabca6
SHA256 135a3e3586af8b98c1d5a44b8f63e7b6c582ad1a7a99342a376d85e21909957d
MD5 d390ab12612a35389ce830d47e50a416
SHA1 7f005cee20eff2ada0c998cb8fc726f673d75eeb
SHA512 ce776d4b7e9bb2e475153e335610b08094a422607234cfce99659677cf85885e9f71b76bb7947c1bdc455f2b089dbc5dd60c801b2ca51754458c7ec0cb891292
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

135a3e3586af8b98c1d5a44b8f63e7b6c582ad1a7a99342a376d85e21909957d

.exe 203KB

135a3e3586af8b98c1d5a44b8f63e7b6c582ad1a7a99342a376d85e21909957d

IMPHASH 5434b37b46ff53409031fbbbb265a2ed
SHA256 135a3e3586af8b98c1d5a44b8f63e7b6c582ad1a7a99342a376d85e21909957d
MD5 d390ab12612a35389ce830d47e50a416
SHA1 7f005cee20eff2ada0c998cb8fc726f673d75eeb
SHA512 ce776d4b7e9bb2e475153e335610b08094a422607234cfce99659677cf85885e9f71b76bb7947c1bdc455f2b089dbc5dd60c801b2ca51754458c7ec0cb891292
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

7945

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadConsoleA _lcreat GetProcessPriorityBoost GetTickCount TzSpecificLocalTimeToSystemTime GlobalAlloc LoadLibraryW GetConsoleMode TerminateThread SetSystemTimeAdjustment CreateSemaphoreA GetBinaryTypeA lstrlenW GetNamedPipeHandleStateW GetPrivateProfileIntW WriteTapemark SetVolumeLabelW GetLocalTime LoadLibraryA GetConsoleScreenBufferInfo GetProfileStringA AddAtomA GetPrivateProfileStructA GetTapeParameters VirtualProtect GetCurrentDirectoryA CloseHandle DebugBreak GetSystemTime lstrcpyW SetPriorityClass TlsGetValue GetProcAddress GetThreadContext HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleHandleA

gdi32

GetBitmapDimensionEx

advapi32

RevertToSelf

Sharing

General

Malware Config

Signatures

File Explorer

135a3e3586af8b98c1d5a44b8f63e7b6c582ad1a7a99342a376d85e21909957d

kernel32

gdi32

advapi32