db31b33ef9ba03ebc8ad2ff4fe5ab3fb5934d92a26c2b512e784bfc34c3effc2

Sharing

Copy URL Twitter E-mail

General

Target
db31b33ef9ba03ebc8ad2ff4fe5ab3fb5934d92a26c2b512e784bfc34c3effc2
Size 847KB
Sample220405-gyrb2aeacl
SHA256 db31b33ef9ba03ebc8ad2ff4fe5ab3fb5934d92a26c2b512e784bfc34c3effc2
MD5 d7c0d4993d4239fb48df1c3a026c3881
SHA1 915a5fc458766865f9d0be823236c4c212c1d921
SHA512 e924b951e4076cb8c1e4b73fdcf8c7f4099eaabf833a70adc4f792e084e809fa2684b2db8ba3e975cf15e121b3c444ff8665875c5da16d0737ad113a13cb71c2
SSDEEP 12288:LRVM6TchrlTVb0qyUvEWNWT9ye2hpXL0tnnlsVh06fxidU31XDzCkH8PxIunnwR:1dchrlBoqyrWSxV+Vh06Jp3BDjH8xwR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

db31b33ef9ba03ebc8ad2ff4fe5ab3fb5934d92a26c2b512e784bfc34c3effc2

.exe 847KB

db31b33ef9ba03ebc8ad2ff4fe5ab3fb5934d92a26c2b512e784bfc34c3effc2

IMPHASH 6e95b72b10d0f281b4ddebe8de5e9772
SHA256 db31b33ef9ba03ebc8ad2ff4fe5ab3fb5934d92a26c2b512e784bfc34c3effc2
MD5 d7c0d4993d4239fb48df1c3a026c3881
SHA1 915a5fc458766865f9d0be823236c4c212c1d921
SHA512 e924b951e4076cb8c1e4b73fdcf8c7f4099eaabf833a70adc4f792e084e809fa2684b2db8ba3e975cf15e121b3c444ff8665875c5da16d0737ad113a13cb71c2
SSDEEP 12288:LRVM6TchrlTVb0qyUvEWNWT9ye2hpXL0tnnlsVh06fxidU31XDzCkH8PxIunnwR:1dchrlBoqyrWSxV+Vh06Jp3BDjH8xwR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19707

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalFlags GlobalAlloc LoadLibraryW GetProcessHandleCount InterlockedPopEntrySList LeaveCriticalSection WriteConsoleW GetMailslotInfo lstrlenW GetShortPathNameA GetConsoleAliasesW GetCPInfoExW FillConsoleOutputCharacterW GetLongPathNameW SetLastError CreateDirectoryW WriteProfileSectionA SetStdHandle LoadLibraryA MoveFileA GetModuleFileNameA FindFirstChangeNotificationA GetConsoleTitleW VirtualProtect GetFileAttributesExW SetCalendarInfoA CloseHandle HeapSize WriteConsoleOutputCharacterA SetConsoleTextAttribute GetConsoleAliasesLengthW UnregisterWait SetFilePointer FlushFileBuffers GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent EnterCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetProcAddress GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep WideCharToMultiByte RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode CreateFileW

user32

ClientToScreen

gdi32

GetTextExtentExPointA

advapi32

ClearEventLogW

ole32

CoFileTimeNow

Name

.text

Size

695KB

Virtual Size

695KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

25KB

Virtual Size

289KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.naza

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fax

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.zewev

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.halu

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

120KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ