6bf0186743a209899c300fdf0c35c2aa44738473ec8e26b0eddb457dfe23a5a2

General

Target
6bf0186743a209899c300fdf0c35c2aa44738473ec8e26b0eddb457dfe23a5a2
Size 755KB
Sample220408-khkfbsage9
SHA256 6bf0186743a209899c300fdf0c35c2aa44738473ec8e26b0eddb457dfe23a5a2
MD5 bda9f5630b77699bdf3f68f2d6b4fef4
SHA1 b6f1356da4288e12bbb8232aa88e88356e2703bb
SHA512 870988794634ca407cda7ad61a9af2570015b7bcc952b8f323610eb50c0ea6f06df945842b37fb20b1d2e3a6226c30542666f6caacafe62bd61447968c9c35c5
SSDEEP 12288:GFrRUwX34eu3A84frr59yaciTbXHjPuAOWp32Lnj/fYbHhV2B+svJ088zWnJ/sA:oRfohMzyabXThpR2jzshEL0Cnz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6bf0186743a209899c300fdf0c35c2aa44738473ec8e26b0eddb457dfe23a5a2

.exe 755KB

6bf0186743a209899c300fdf0c35c2aa44738473ec8e26b0eddb457dfe23a5a2

IMPHASH 0c268ab7b320e02c4c44ca7238735e41
SHA256 6bf0186743a209899c300fdf0c35c2aa44738473ec8e26b0eddb457dfe23a5a2
MD5 bda9f5630b77699bdf3f68f2d6b4fef4
SHA1 b6f1356da4288e12bbb8232aa88e88356e2703bb
SHA512 870988794634ca407cda7ad61a9af2570015b7bcc952b8f323610eb50c0ea6f06df945842b37fb20b1d2e3a6226c30542666f6caacafe62bd61447968c9c35c5
SSDEEP 12288:GFrRUwX34eu3A84frr59yaciTbXHjPuAOWp32Lnj/fYbHhV2B+svJ088zWnJ/sA:oRfohMzyabXThpR2jzshEL0Cnz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39888

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindNextVolumeW HeapWalk GetNamedPipeHandleStateW SystemTimeToFileTime FillConsoleOutputCharacterA CreateMailslotA TerminateProcess SetLastError GetVersionExA FreeResource EnumResourceNamesW FindNextFileA CopyFileExW BuildCommDCBW SetDefaultCommConfigA SetCommConfig WritePrivateProfileStructW LocalCompact ChangeTimerQueueTimer ReadConsoleInputA WriteConsoleInputW LoadResource AddAtomW SearchPathW GetThreadTimes CallNamedPipeW GetDriveTypeA BuildCommDCBAndTimeoutsA VirtualProtect LoadLibraryA GlobalAlloc SetThreadIdealProcessor GetProfileSectionA DeleteFileW FindFirstChangeNotificationW VerifyVersionInfoA FormatMessageW SetDllDirectoryW GetModuleHandleW WritePrivateProfileStringA GetUserDefaultLCID SetWaitableTimer SetConsoleTextAttribute InterlockedIncrement GetStartupInfoW GetSystemWow64DirectoryA CopyFileA SetCalendarInfoA ContinueDebugEvent EndUpdateResourceW GetLastError SetLocaleInfoW GetModuleFileNameW OpenFileMappingW GetConsoleAliasExesLengthA lstrcmpW ReadFileScatter FlushConsoleInputBuffer DisableThreadLibraryCalls InterlockedExchangeAdd GlobalUnfix GetSystemWindowsDirectoryW GetACP GlobalFindAtomA lstrcatW GetPrivateProfileStringW SetMailslotInfo CreateActCtxW _lwrite OutputDebugStringW CreateNamedPipeW SetThreadAffinityMask SetConsoleActiveScreenBuffer EnumResourceTypesW lstrlenA LoadLibraryW DebugActiveProcess WriteConsoleW GetProcAddress lstrcpyA ReadConsoleOutputW GetThreadContext EnumDateFormatsA QueryActCtxW GetQueuedCompletionStatus AllocConsole GlobalGetAtomNameA SetComputerNameW GetConsoleAliasExesLengthW SystemTimeToTzSpecificLocalTime MoveFileWithProgressW GetStringTypeExW EnumSystemLocalesA GetPrivateProfileIntW OpenWaitableTimerA GetConsoleAliasesLengthW PeekNamedPipe GetCompressedFileSizeW FindNextVolumeMountPointA WriteConsoleOutputCharacterA EnumDateFormatsW TerminateJobObject GetConsoleAliasExesW FreeLibraryAndExitThread OpenMutexA RaiseException HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedDecrement ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

6bf0186743a209899c300fdf0c35c2aa44738473ec8e26b0eddb457dfe23a5a2

kernel32

advapi32