db796fc968041267daff136126768ff072bd3e4e271d1c81120b0eaf6056bf60

General

Target
db796fc968041267daff136126768ff072bd3e4e271d1c81120b0eaf6056bf60
Size 793KB
Sample220405-gyrb2aadf2
SHA256 db796fc968041267daff136126768ff072bd3e4e271d1c81120b0eaf6056bf60
MD5 5ba373c7a781eb8759d50be262b9484a
SHA1 98ef6bc0a9b25ed09d238d27b3f53edb2934cb99
SHA512 18c286a5c63c1977fdec340a7c2cfbd60c9f8aef76aa333303b842bef373f029343972537e7e1b77a531d3b5b8a88cc08a4a2aaef9b98d7d4063e9626a7e075b
SSDEEP 24576:gAWTtCmN2O2Dmb2OMdKnpJKpYWNjABut9t:gAgC8f2yqldKnpSYW1ABut9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

db796fc968041267daff136126768ff072bd3e4e271d1c81120b0eaf6056bf60

.exe 793KB

db796fc968041267daff136126768ff072bd3e4e271d1c81120b0eaf6056bf60

IMPHASH 4f749e3b0bf306b609b31e6b109f825a
SHA256 db796fc968041267daff136126768ff072bd3e4e271d1c81120b0eaf6056bf60
MD5 5ba373c7a781eb8759d50be262b9484a
SHA1 98ef6bc0a9b25ed09d238d27b3f53edb2934cb99
SHA512 18c286a5c63c1977fdec340a7c2cfbd60c9f8aef76aa333303b842bef373f029343972537e7e1b77a531d3b5b8a88cc08a4a2aaef9b98d7d4063e9626a7e075b
SSDEEP 24576:gAWTtCmN2O2Dmb2OMdKnpJKpYWNjABut9t:gAgC8f2yqldKnpSYW1ABut9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27008

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA GetConsoleAliasesA GetConsoleAliasesLengthA GetConsoleTitleA GetProcessTimes GlobalAlloc LoadLibraryW InterlockedPopEntrySList WriteConsoleW GetMailslotInfo GetModuleFileNameW GetVolumePathNameA GetShortPathNameA GetStdHandle SetLastError GetLongPathNameA EnterCriticalSection SetCalendarInfoW MoveFileA LockResource WriteProfileSectionW SetConsoleWindowInfo GetModuleFileNameA VirtualProtect GetCPInfoExA LocalSize GetFileInformationByHandle WriteConsoleOutputCharacterW FillConsoleOutputCharacterA GetCommandLineA HeapSetInformation GetStartupInfoW GetProcAddress GetModuleHandleW ExitProcess DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetLastError HeapAlloc HeapFree IsProcessorFeaturePresent LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection WriteFile FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException RtlUnwind HeapSize HeapReAlloc SetStdHandle MultiByteToWideChar LCMapStringW GetStringTypeW FlushFileBuffers CreateFileW CloseHandle

gdi32

GetTextExtentExPointA

Sharing

General

Malware Config

Signatures

File Explorer

db796fc968041267daff136126768ff072bd3e4e271d1c81120b0eaf6056bf60

kernel32

gdi32