9460c8ee8fe7a2aad2ceca9c34b3060a2bf1fbe050bae570e08560c6a7e92525

General

Target
9460c8ee8fe7a2aad2ceca9c34b3060a2bf1fbe050bae570e08560c6a7e92525
Size 769KB
Sample220406-pbfwsacch9
SHA256 9460c8ee8fe7a2aad2ceca9c34b3060a2bf1fbe050bae570e08560c6a7e92525
MD5 b43e65b19507145f0a74991ef9392a18
SHA1 b68a2b1eba12de5f54caf3d14d45532e8ff07a47
SHA512 236a7fc746fe0f853686a5fac491b5569dee806bfd53a204fba99de084b43f9b6fc1024c7621686b0a4fb7e2b3725b74987108bbc3c123be80f7e6b95d63be9b
SSDEEP 24576:8Dz1oct5qCHcZOYZTBmZYuzreRNUNC9CWrgT:8u+cUm0+uORNaCYWrgT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9460c8ee8fe7a2aad2ceca9c34b3060a2bf1fbe050bae570e08560c6a7e92525

.exe 769KB

9460c8ee8fe7a2aad2ceca9c34b3060a2bf1fbe050bae570e08560c6a7e92525

IMPHASH 25245420ce2e5010c32179ae5d5b5793
SHA256 9460c8ee8fe7a2aad2ceca9c34b3060a2bf1fbe050bae570e08560c6a7e92525
MD5 b43e65b19507145f0a74991ef9392a18
SHA1 b68a2b1eba12de5f54caf3d14d45532e8ff07a47
SHA512 236a7fc746fe0f853686a5fac491b5569dee806bfd53a204fba99de084b43f9b6fc1024c7621686b0a4fb7e2b3725b74987108bbc3c123be80f7e6b95d63be9b
SSDEEP 24576:8Dz1oct5qCHcZOYZTBmZYuzreRNUNC9CWrgT:8u+cUm0+uORNaCYWrgT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

55936

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW SetLocaleInfoW FindNextVolumeW HeapWalk GetNamedPipeHandleStateW SystemTimeToFileTime FillConsoleOutputCharacterA CreateMailslotW TerminateProcess SetLastError GetVersionExW FreeResource EnumResourceNamesA FindNextFileA CopyFileExW BuildCommDCBW SetDefaultCommConfigA GetCommConfig WritePrivateProfileStructW LocalShrink ChangeTimerQueueTimer ReadConsoleInputW WriteConsoleInputW LoadResource AddAtomA SearchPathW GetThreadTimes CallNamedPipeW GetDriveTypeA BuildCommDCBAndTimeoutsA VirtualProtect GetModuleHandleA GlobalAlloc SetThreadIdealProcessor GetProfileSectionW DeleteFileA FindFirstChangeNotificationW VerifyVersionInfoA FormatMessageW SetDllDirectoryA LoadLibraryA WritePrivateProfileStringW GetUserDefaultLCID TerminateThread SetWaitableTimer SetConsoleTextAttribute InterlockedIncrement GetStartupInfoW GetSystemWow64DirectoryA CopyFileW SetCalendarInfoA WaitForDebugEvent EndUpdateResourceW GetLastError OpenFileMappingW GetConsoleAliasExesLengthA lstrcmpA ReadFileScatter FlushConsoleInputBuffer DisableThreadLibraryCalls InterlockedExchangeAdd GlobalFix GetSystemWindowsDirectoryW CopyFileA GetACP GlobalFindAtomA lstrcatW GetPrivateProfileStringA SetMailslotInfo CreateActCtxA OutputDebugStringA CreateNamedPipeW SetThreadAffinityMask SetConsoleActiveScreenBuffer EnumResourceTypesW lstrlenA LoadLibraryW DebugActiveProcess WriteConsoleA GetProcAddress lstrcpyA GetThreadContext QueryActCtxW GetConsoleCP GetQueuedCompletionStatus AllocConsole GlobalGetAtomNameA SetComputerNameW GetConsoleAliasExesLengthW CreateMailslotA SystemTimeToTzSpecificLocalTime MoveFileWithProgressA ContinueDebugEvent GetStringTypeExA EnumSystemLocalesW GetPrivateProfileIntA FreeLibrary GetModuleFileNameW OpenWaitableTimerA GetConsoleAliasesLengthW GetNamedPipeHandleStateA WriteConsoleOutputCharacterW TerminateJobObject GetConsoleAliasExesW EnumDateFormatsA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind HeapValidate IsBadReadPtr TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree DebugBreak GetStdHandle WriteFile WriteConsoleW GetFileType OutputDebugStringW ExitProcess SetHandleCount GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer SetStdHandle GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

9460c8ee8fe7a2aad2ceca9c34b3060a2bf1fbe050bae570e08560c6a7e92525

kernel32