ccaaa623e3091c4183a5550b58df11c9492b451b0e602c7e4fd3fd49c95645c8

General

Target
ccaaa623e3091c4183a5550b58df11c9492b451b0e602c7e4fd3fd49c95645c8
Size 735KB
Sample220406-pb2hgscdb3
SHA256 ccaaa623e3091c4183a5550b58df11c9492b451b0e602c7e4fd3fd49c95645c8
MD5 e6c8a5bf47683b9a274157b089a31976
SHA1 2b1df244f2c36551a05a614fa9e5e9cc0edcd42d
SHA512 3e788b63ab4ccd67a81256e4656ca3d7e78ede4cb6d29c610c7368949662e7d01fc76180507b34295a0f48904f88b982ec50bf669b2c9bf73e67f9e354d2d2ff
SSDEEP 12288:FVHf41W6gEoPOyPr2tCwNQiEbF80y5w6t/JVvhOYtZ+MdxEMTf+HcG2w:F+1W6g1PrQNNEB8T5wW/JVvIIzdxFT+6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ccaaa623e3091c4183a5550b58df11c9492b451b0e602c7e4fd3fd49c95645c8

.exe 735KB

ccaaa623e3091c4183a5550b58df11c9492b451b0e602c7e4fd3fd49c95645c8

IMPHASH e29fdb264def7dda465a7a289be86662
SHA256 ccaaa623e3091c4183a5550b58df11c9492b451b0e602c7e4fd3fd49c95645c8
MD5 e6c8a5bf47683b9a274157b089a31976
SHA1 2b1df244f2c36551a05a614fa9e5e9cc0edcd42d
SHA512 3e788b63ab4ccd67a81256e4656ca3d7e78ede4cb6d29c610c7368949662e7d01fc76180507b34295a0f48904f88b982ec50bf669b2c9bf73e67f9e354d2d2ff
SSDEEP 12288:FVHf41W6gEoPOyPr2tCwNQiEbF80y5w6t/JVvhOYtZ+MdxEMTf+HcG2w:F+1W6g1PrQNNEB8T5wW/JVvIIzdxFT+6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

8676

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetEnvironmentStringsW GetUserDefaultLCID GetSystemDefaultLCID ReadConsoleW GetSystemWindowsDirectoryA LeaveCriticalSection VerifyVersionInfoA WriteConsoleW FindActCtxSectionGuid GetACP GetConsoleOutputCP InterlockedExchange GetProcAddress EnterCriticalSection PrepareTape LocalAlloc GetModuleFileNameA SetConsoleTitleW GetModuleHandleA AddConsoleAliasA FindActCtxSectionStringW FindNextVolumeA GetSystemTime GetProfileSectionW GetLocaleInfoA PulseEvent GetModuleFileNameW GetCommandLineW HeapAlloc GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer CloseHandle FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount LoadLibraryA CreateFileA RaiseException SetStdHandle FlushFileBuffers WriteConsoleA MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

gdi32

GetCharWidthFloatW

advapi32

BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

ccaaa623e3091c4183a5550b58df11c9492b451b0e602c7e4fd3fd49c95645c8

kernel32

gdi32

advapi32