5cdf699d4fb6bbef93b520dfd5bce19a3178feb05ab4db0503abc98173805e98

Sharing

Copy URL Twitter E-mail

General

Target
5cdf699d4fb6bbef93b520dfd5bce19a3178feb05ab4db0503abc98173805e98
Size 414KB
Sample220330-bqq4eaeaf6
SHA256 5cdf699d4fb6bbef93b520dfd5bce19a3178feb05ab4db0503abc98173805e98
MD5 efd1e0a21b3b9d89fb9d88c3ff382835
SHA1 070bbf19a991a283a18479eec1b38a33809d528e
SHA512 54c43a036878494d4fbf1d52f4f04d1f5133151ec5bed21b0a7c2755052c03fbb8908de3bcf0b5b3446c60c56a3b0352b6a20f405848741d3b038bfd48739b83
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

5cdf699d4fb6bbef93b520dfd5bce19a3178feb05ab4db0503abc98173805e98

.exe 414KB

5cdf699d4fb6bbef93b520dfd5bce19a3178feb05ab4db0503abc98173805e98

IMPHASH 68bbfc27af0ede5c12e87177be93b727
SHA256 5cdf699d4fb6bbef93b520dfd5bce19a3178feb05ab4db0503abc98173805e98
MD5 efd1e0a21b3b9d89fb9d88c3ff382835
SHA1 070bbf19a991a283a18479eec1b38a33809d528e
SHA512 54c43a036878494d4fbf1d52f4f04d1f5133151ec5bed21b0a7c2755052c03fbb8908de3bcf0b5b3446c60c56a3b0352b6a20f405848741d3b038bfd48739b83
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

37871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameW CreateActCtxA HeapUnlock GlobalAlloc GetModuleHandleA InterlockedExchangeAdd WaitNamedPipeW GetLastError GetPrivateProfileSectionA CancelDeviceWakeupRequest EnterCriticalSection LocalLock WriteFile SetFileShortNameW ReadProcessMemory OpenEventW SetEvent SetConsoleTextAttribute SetConsoleTitleW AllocConsole LoadLibraryA VirtualAlloc GetFileAttributesW GetAtomNameA HeapAlloc lstrcpyW GetSystemDefaultLCID GetConsoleAliasW GetModuleHandleW CreateMailslotW GetCPInfoExA SetEnvironmentVariableA CommConfigDialogW GetConsoleAliasesLengthW DeleteTimerQueue GetFileAttributesExA SetCalendarInfoW HeapLock ReleaseMutex WaitForSingleObject lstrlenW WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo GetStringTypeW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapReAlloc SetFilePointer CloseHandle ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

Name

.text

Size

106KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

236KB

Virtual Size

801KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fatis

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boki

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gawib

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fid

Size

512B

Virtual Size

346B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

58KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ