df44772e8eb751fe42591ec02926257e5aea30820a82f19b7b8d2e46c506dd05

General

Target
df44772e8eb751fe42591ec02926257e5aea30820a82f19b7b8d2e46c506dd05
Size 811KB
Sample220406-pb2hgscdb4
SHA256 df44772e8eb751fe42591ec02926257e5aea30820a82f19b7b8d2e46c506dd05
MD5 9ea43d7d80bc4b92a5211c45fbe75c25
SHA1 898f838a5c1cef3d9bf8b5a79100867346b9ceaf
SHA512 2616b6c3b57f2d08f5d39edba8ca4d52a05ef1aa913d3d018b360f2c4e0187b4979a4dde36e508f1e9f01f61f12050aed56ea1888cdaba34772aac89ef50d31b
SSDEEP 24576:A/NVjKkTxdWcNUE+Ggd6cjd6UnbbH1Iq:qP7UE+GWPd6UFI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

df44772e8eb751fe42591ec02926257e5aea30820a82f19b7b8d2e46c506dd05

.exe 811KB

df44772e8eb751fe42591ec02926257e5aea30820a82f19b7b8d2e46c506dd05

IMPHASH 6bd64b13624a27b70b577055bad87689
SHA256 df44772e8eb751fe42591ec02926257e5aea30820a82f19b7b8d2e46c506dd05
MD5 9ea43d7d80bc4b92a5211c45fbe75c25
SHA1 898f838a5c1cef3d9bf8b5a79100867346b9ceaf
SHA512 2616b6c3b57f2d08f5d39edba8ca4d52a05ef1aa913d3d018b360f2c4e0187b4979a4dde36e508f1e9f01f61f12050aed56ea1888cdaba34772aac89ef50d31b
SSDEEP 24576:A/NVjKkTxdWcNUE+Ggd6cjd6UnbbH1Iq:qP7UE+GWPd6UFI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43696

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNamedPipeHandleStateW FileTimeToSystemTime EnumResourceTypesW EnumResourceNamesW FillConsoleOutputCharacterW GetTimeZoneInformation TerminateProcess SetLastError SetEvent FindNextFileA GetCompressedFileSizeW CopyFileExW BuildCommDCBAndTimeoutsW QueryDepthSList GetVersionExW VerifyVersionInfoW ReadConsoleOutputCharacterA SetDefaultCommConfigA VerLanguageNameA EscapeCommFunction WritePrivateProfileStructW FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointW GetWriteWatch WriteConsoleInputA SetComputerNameExW FindAtomA GlobalDeleteAtom SetThreadPriority CallNamedPipeW GetDriveTypeW BuildCommDCBAndTimeoutsA VirtualProtect LoadLibraryW LocalAlloc InterlockedDecrement FindFirstChangeNotificationA VerifyVersionInfoA FormatMessageW SetDllDirectoryW GetModuleHandleA WritePrivateProfileStringA GetUserDefaultLangID GlobalUnfix GetStartupInfoW GetSystemWow64DirectoryW CopyFileA GetLastError DebugBreak SetConsoleCursorInfo SetCalendarInfoA SetConsoleScreenBufferSize ContinueDebugEvent InterlockedExchangeAdd GetSystemWindowsDirectoryW GetACP FindNextVolumeW CreateActCtxA GetConsoleAliasW OutputDebugStringW EnumResourceTypesA lstrlenA WriteConsoleW DeleteCriticalSection GlobalWire FreeEnvironmentStringsW ConvertFiberToThread lstrcatA EnumCalendarInfoA SetThreadAffinityMask LockFile RaiseException VerSetConditionMask GetConsoleCP GetProfileStringA CreateIoCompletionPort AllocConsole GlobalGetAtomNameA SetComputerNameA GetConsoleAliasExesLengthW WriteConsoleInputW CreateMailslotW GetCommState MoveFileWithProgressA GetSystemTimeAdjustment _hread _lopen EnumSystemLocalesW GetConsoleAliasExesLengthA MoveFileA ResetWriteWatch EnumDateFormatsW DeleteAtom GetSystemWindowsDirectoryA GetComputerNameW GetConsoleAliasesLengthA FindFirstVolumeW CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerA OpenFileMappingA SetProcessAffinityMask GetConsoleAliasesLengthW SetProcessShutdownParameters FindNextVolumeMountPointA ReadConsoleW WriteConsoleOutputCharacterA GetNumberFormatA GetConsoleAliasExesA GetBinaryTypeA GetCurrentActCtx WriteProfileSectionA SetLocaleInfoA GetPrivateProfileStringW LoadLibraryA GetModuleHandleW Sleep InterlockedIncrement GetProcAddress ExitProcess DeleteFileA GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleFileNameA WriteFile GetStdHandle GetOEMCP GetCPInfo IsValidCodePage GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind OutputDebugStringA MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

CharToOemBuffA GetListBoxInfo

gdi32

GetCharWidth32A

advapi32

ImpersonateSelf

Sharing

General

Malware Config

Signatures

File Explorer

df44772e8eb751fe42591ec02926257e5aea30820a82f19b7b8d2e46c506dd05

kernel32

user32

gdi32

advapi32