5fa3c8ce7d1e92f35a9ff643f21d28ad23ee2a901822748c0b04c562a93830af

General

Target
5fa3c8ce7d1e92f35a9ff643f21d28ad23ee2a901822748c0b04c562a93830af
Size 787KB
Sample220330-gnk29shaa6
SHA256 5fa3c8ce7d1e92f35a9ff643f21d28ad23ee2a901822748c0b04c562a93830af
MD5 2daba671bab4b268dee2281056d22ebc
SHA1 ad9c6a66d2b0095c1c8b88cfe6320d9639ad3f43
SHA512 adb304e8716879442882404533f5b89fce3a23023f415c9f7deaf0df6291e69e3f841f9972f9746062862b0cd03514c1bb6b97ed436f955577e279a64d9db3ac
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

5fa3c8ce7d1e92f35a9ff643f21d28ad23ee2a901822748c0b04c562a93830af

.exe 787KB

5fa3c8ce7d1e92f35a9ff643f21d28ad23ee2a901822748c0b04c562a93830af

IMPHASH 62cc0f071500a34baf4b74c917ef3797
SHA256 5fa3c8ce7d1e92f35a9ff643f21d28ad23ee2a901822748c0b04c562a93830af
MD5 2daba671bab4b268dee2281056d22ebc
SHA1 ad9c6a66d2b0095c1c8b88cfe6320d9639ad3f43
SHA512 adb304e8716879442882404533f5b89fce3a23023f415c9f7deaf0df6291e69e3f841f9972f9746062862b0cd03514c1bb6b97ed436f955577e279a64d9db3ac
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

57264

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA OpenMutexW SetLocaleInfoA FindNextVolumeA GetNamedPipeHandleStateA FileTimeToLocalFileTime EnumResourceTypesW EnumResourceNamesA FillConsoleOutputCharacterA DeleteTimerQueueTimer TerminateThread SetLastError SetEvent FindNextFileW CopyFileExA BuildCommDCBA FreeResource GetVersionExA ReadConsoleOutputCharacterW SetDefaultCommConfigW VerLanguageNameW GetCommConfig WritePrivateProfileStructA LocalFree FindNextVolumeMountPointA GetWriteWatch WriteConsoleInputW LoadResource AddAtomA GlobalDeleteAtom GetThreadPriority CallNamedPipeA GetDriveTypeW BuildCommDCBAndTimeoutsW GetProcAddress GlobalAlloc GlobalFix FindFirstChangeNotificationA VerifyVersionInfoA FormatMessageA SetDllDirectoryA GetModuleHandleW WritePrivateProfileStringW GetUserDefaultLCID SetDllDirectoryW SetConsoleTextAttribute InterlockedDecrement GetStartupInfoA CopyFileA SetCalendarInfoW DebugBreak SetConsoleCursorInfo GetSystemWow64DirectoryW FreeLibraryAndExitThread GetModuleFileNameA WaitForDebugEvent InterlockedExchangeAdd GetOEMCP GetPrivateProfileStringA CreateActCtxA ReadConsoleInputW OutputDebugStringW PulseEvent SetThreadAffinityMask FlushConsoleInputBuffer lstrlenA LoadLibraryW WriteConsoleW GetThreadContext FreeEnvironmentStringsA TryEnterCriticalSection QueryDepthSList DeleteFiber SetProcessPriorityBoost UnlockFile FreeEnvironmentStringsW GetConsoleCP CreateIoCompletionPort FreeConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasExesLengthW CreateMailslotW SetCommState MoveFileWithProgressA GetPrivateProfileIntA GetSystemTimeAdjustment EnumSystemLocalesW OpenMutexA GetLastError WriteProfileStringW OpenWaitableTimerW GetConsoleAliasesLengthW PeekNamedPipe FillConsoleOutputCharacterW BuildCommDCBAndTimeoutsA GetConsoleAliasExesA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind ExitProcess MoveFileA DeleteFileA GetStartupInfoW HeapValidate IsBadReadPtr TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetStdHandle WriteFile OutputDebugStringA GetFileType GetACP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW SetHandleCount HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers WideCharToMultiByte GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA

user32

CharUpperA

Sharing

General

Malware Config

Signatures

File Explorer

5fa3c8ce7d1e92f35a9ff643f21d28ad23ee2a901822748c0b04c562a93830af

kernel32

user32