128ffbdc1b0a6ea78d441c924ede1f30e82f0b20906f18386f3111763462b139

Sharing

Copy URL Twitter E-mail

General

Target
128ffbdc1b0a6ea78d441c924ede1f30e82f0b20906f18386f3111763462b139
Size 414KB
Sample220330-brqt2aeag8
SHA256 128ffbdc1b0a6ea78d441c924ede1f30e82f0b20906f18386f3111763462b139
MD5 e2b0c70c91899bfc47726fef0c05612c
SHA1 e741376e1c34254aebbe0d069143858cd566f153
SHA512 73137b841cb863d93329123db411622f92e728d040d2908b498025299820e3e74ce89a6e4271ecfdf1a6286105bf63f9f9795e5ef65a0a02d5e6d6c11507eee5
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

128ffbdc1b0a6ea78d441c924ede1f30e82f0b20906f18386f3111763462b139

.exe 414KB

128ffbdc1b0a6ea78d441c924ede1f30e82f0b20906f18386f3111763462b139

IMPHASH bf2d799cb59ce43b83a63fa8fe6d611f
SHA256 128ffbdc1b0a6ea78d441c924ede1f30e82f0b20906f18386f3111763462b139
MD5 e2b0c70c91899bfc47726fef0c05612c
SHA1 e741376e1c34254aebbe0d069143858cd566f153
SHA512 73137b841cb863d93329123db411622f92e728d040d2908b498025299820e3e74ce89a6e4271ecfdf1a6286105bf63f9f9795e5ef65a0a02d5e6d6c11507eee5
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

38394

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameW CreateActCtxA HeapUnlock GetModuleHandleA InterlockedExchangeAdd WaitNamedPipeW GetLastError GetPrivateProfileSectionW CancelDeviceWakeupRequest EnterCriticalSection LocalHandle WriteFile SetFileShortNameW ReadProcessMemory OpenEventW SetEvent SetConsoleTextAttribute SetConsoleTitleW AllocConsole LoadLibraryA LocalAlloc VirtualAlloc GetFileAttributesW GetAtomNameW HeapAlloc lstrcpyW GetSystemDefaultLCID GetConsoleAliasW GetModuleHandleW CreateMailslotW GetCPInfoExA SetEnvironmentVariableA CommConfigDialogW GetConsoleAliasesLengthW DeleteTimerQueue GetFileAttributesExW SetCalendarInfoW HeapLock ReleaseMutex WaitForSingleObject lstrlenW WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo GetStringTypeW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapReAlloc SetFilePointer SetHandleCount GetStdHandle GetFileType GetStartupInfoA CloseHandle ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

Name

.text

Size

106KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

236KB

Virtual Size

800KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.jodiweg

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zec

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vadep

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jebo

Size

512B

Virtual Size

346B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

58KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ