6c8b6cc6dffcecac3efb9091bc2b6922d413e6b1b235b00141df69c541ce1857

General

Target
6c8b6cc6dffcecac3efb9091bc2b6922d413e6b1b235b00141df69c541ce1857
Size 833KB
Sample220330-gnk29shaa7
SHA256 6c8b6cc6dffcecac3efb9091bc2b6922d413e6b1b235b00141df69c541ce1857
MD5 61a4e1da3efede7d8ea6d458353baf64
SHA1 43efa8b35817d7e8434f94918fb9fb68565bd933
SHA512 4b278740fbc646d2e0ca9573a9bba44049f810167c7f84248065efa96ece64adc7617fc77fd663f4549c4ae65b9275e82c0bcf042a3688ac12fc2eb3f6b26dcf
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

6c8b6cc6dffcecac3efb9091bc2b6922d413e6b1b235b00141df69c541ce1857

.exe 833KB

6c8b6cc6dffcecac3efb9091bc2b6922d413e6b1b235b00141df69c541ce1857

IMPHASH 4822b6a68dfa5df6456256144261d6fc
SHA256 6c8b6cc6dffcecac3efb9091bc2b6922d413e6b1b235b00141df69c541ce1857
MD5 61a4e1da3efede7d8ea6d458353baf64
SHA1 43efa8b35817d7e8434f94918fb9fb68565bd933
SHA512 4b278740fbc646d2e0ca9573a9bba44049f810167c7f84248065efa96ece64adc7617fc77fd663f4549c4ae65b9275e82c0bcf042a3688ac12fc2eb3f6b26dcf
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

19319

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstChangeNotificationW WriteConsoleOutputCharacterW SetMailslotInfo CreateHardLinkA GetConsoleAliasesA GetConsoleAliasesLengthA GetConsoleTitleA LoadLibraryW LeaveCriticalSection WriteConsoleW GetModuleFileNameW GetBinaryTypeW lstrlenW CreateDirectoryA GetLastError MoveFileW UnregisterWait SetStdHandle LoadLibraryA WriteConsoleA LocalAlloc SetCalendarInfoW SetProcessWorkingSetSize SetConsoleWindowInfo GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW VirtualProtect GetFileAttributesExW GetCPInfoExA LocalFree InterlockedPushEntrySList WriteProfileSectionA FillConsoleOutputCharacterA MultiByteToWideChar GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId GetProcAddress EnterCriticalSection InitializeCriticalSectionAndSpinCount RtlUnwind ExitProcess WriteFile GetStdHandle GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte LCMapStringW GetStringTypeW Sleep CloseHandle CreateFileA IsProcessorFeaturePresent HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetEndOfFile GetProcessHeap ReadFile HeapSize CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

6c8b6cc6dffcecac3efb9091bc2b6922d413e6b1b235b00141df69c541ce1857

kernel32