58800e8556bb1ecb9d1554a14cd59136cbf41bac263c56d8e0adea85e6fbcc35

General

Target
58800e8556bb1ecb9d1554a14cd59136cbf41bac263c56d8e0adea85e6fbcc35
Size 829KB
Sample220401-jw6p2sdabj
SHA256 58800e8556bb1ecb9d1554a14cd59136cbf41bac263c56d8e0adea85e6fbcc35
MD5 548a4d607ed9e33eee7cad80c84d6e9e
SHA1 4d4fb77274a1f566db6f871cc4ff93cfb17209de
SHA512 24fdc1bc9f66472ea9d5ccbbe0e72eabf6b78f1ddadeef187d1958a9169ed5c2cb3a8702feec0bf0c620a41b3a64e7d3bea6f386563be9908618cdfde7edf385
SSDEEP 24576:wWpH/wAQhw6WqyZsb1jVSxtxpsiGHlDenuRtw:wWu/hwqyUOxiblDfRq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

58800e8556bb1ecb9d1554a14cd59136cbf41bac263c56d8e0adea85e6fbcc35

.exe 829KB

58800e8556bb1ecb9d1554a14cd59136cbf41bac263c56d8e0adea85e6fbcc35

IMPHASH 48cfe16a49c9dcec905547ba5c78e3fd
SHA256 58800e8556bb1ecb9d1554a14cd59136cbf41bac263c56d8e0adea85e6fbcc35
MD5 548a4d607ed9e33eee7cad80c84d6e9e
SHA1 4d4fb77274a1f566db6f871cc4ff93cfb17209de
SHA512 24fdc1bc9f66472ea9d5ccbbe0e72eabf6b78f1ddadeef187d1958a9169ed5c2cb3a8702feec0bf0c620a41b3a64e7d3bea6f386563be9908618cdfde7edf385
SSDEEP 24576:wWpH/wAQhw6WqyZsb1jVSxtxpsiGHlDenuRtw:wWu/hwqyUOxiblDfRq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18923

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalFlags GetConsoleTitleA LoadLibraryW InterlockedPopEntrySList LeaveCriticalSection WriteConsoleW GetModuleFileNameW lstrlenW GetShortPathNameA CreateDirectoryA GetConsoleAliasesW GetStdHandle GetCPInfoExW FillConsoleOutputCharacterW SetLastError SetMailslotInfo WriteProfileSectionA LoadLibraryA LocalAlloc SetCalendarInfoW MoveFileA SetProcessWorkingSetSize SetConsoleWindowInfo GetModuleFileNameA GetModuleHandleA FindFirstChangeNotificationA FreeEnvironmentStringsW VirtualProtect GetFileAttributesExW GetConsoleAliasesLengthW WriteConsoleOutputCharacterA UnregisterWait SetStdHandle CloseHandle GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess HeapAlloc GetLastError HeapFree EnterCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetProcAddress GetModuleHandleW ExitProcess WriteFile GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep WideCharToMultiByte RtlUnwind IsProcessorFeaturePresent LCMapStringW MultiByteToWideChar GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize CreateFileW

gdi32

GetTextExtentExPointA

winhttp

WinHttpCloseHandle

Name

.text

Size

678KB

Virtual Size

677KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

24KB

Virtual Size

288KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ripo

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bicecov

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.fika

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.vow

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

120KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

58800e8556bb1ecb9d1554a14cd59136cbf41bac263c56d8e0adea85e6fbcc35

kernel32

gdi32

winhttp