5e2189960616b6637d42386859075457ed8698075699085700501a30e856df0d

General

Target
5e2189960616b6637d42386859075457ed8698075699085700501a30e856df0d
Size 350KB
Sample220330-jctalsebhm
SHA256 5e2189960616b6637d42386859075457ed8698075699085700501a30e856df0d
MD5 5ffd044223f9ee157d5b09e0430006b2
SHA1 44603ca848affe283f48122d8b1f876f67e751fe
SHA512 cc6e6af0610944bdc15cce0023e5ec3a993fa3cd7a6b5761d9c146f0cc0e0efa7659dd9342d230c65ecb965fab80fa43abd81799568292da524b8b441dd160d5
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

5e2189960616b6637d42386859075457ed8698075699085700501a30e856df0d

.exe 350KB

5e2189960616b6637d42386859075457ed8698075699085700501a30e856df0d

IMPHASH b07e20a0538650e5def588c168554340
SHA256 5e2189960616b6637d42386859075457ed8698075699085700501a30e856df0d
MD5 5ffd044223f9ee157d5b09e0430006b2
SHA1 44603ca848affe283f48122d8b1f876f67e751fe
SHA512 cc6e6af0610944bdc15cce0023e5ec3a993fa3cd7a6b5761d9c146f0cc0e0efa7659dd9342d230c65ecb965fab80fa43abd81799568292da524b8b441dd160d5
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

20312

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateActCtxA GetModuleHandleA InterlockedExchangeAdd ReadConsoleInputW SetTapeParameters GetTapeStatus WaitNamedPipeA GetTickCount CreateFileA GetPrivateProfileSectionW PulseEvent LocalLock WriteProcessMemory SetEvent AllocConsole SetConsoleTitleW LoadLibraryA VirtualAlloc CommConfigDialogA GetFileAttributesA HeapLock HeapReAlloc GetUserDefaultLangID lstrcatA WriteConsoleOutputAttribute GetVolumePathNamesForVolumeNameA CreateMutexA WaitForSingleObject lstrlenA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree SetFilePointer SetHandleCount GetStdHandle GetFileType ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

192KB

Virtual Size

66.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.punepa

Size

1024B

Virtual Size

626B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.horayu

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.waf

Size

512B

Virtual Size

6B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

5e2189960616b6637d42386859075457ed8698075699085700501a30e856df0d

kernel32

user32