63a178ba5e6fd7ae6faefd152b9391fdedad445a2a3d19c35ba588d4a968c24f

General

Target
63a178ba5e6fd7ae6faefd152b9391fdedad445a2a3d19c35ba588d4a968c24f
Size 758KB
Sample220408-khkfbsfhen
SHA256 63a178ba5e6fd7ae6faefd152b9391fdedad445a2a3d19c35ba588d4a968c24f
MD5 de7f1fae39e740eeaf99938fda8b429a
SHA1 d4ceee074222edc86952d1b44786e0a5b0823dd5
SHA512 60cd288469ff62b76031ecd5715e0c8f7f5a0aa0ac66e2194a0159194fcd07782b86e152b29b291034c07b5b5b35c8f5362120c06b7e42db001fdcf571d2f3a7
SSDEEP 12288:9n8yzXTIJojrkmwcEoCVt3PqHn9JK6V/C7j3YQGnVKsZ+BPzei43NcPimi8VOMS:SKXT1PeoC73iH7tCH34VXoBPCi49cPVu
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

63a178ba5e6fd7ae6faefd152b9391fdedad445a2a3d19c35ba588d4a968c24f

.exe 758KB

63a178ba5e6fd7ae6faefd152b9391fdedad445a2a3d19c35ba588d4a968c24f

IMPHASH 0d658d223d2cbba13dc15247087f58b3
SHA256 63a178ba5e6fd7ae6faefd152b9391fdedad445a2a3d19c35ba588d4a968c24f
MD5 de7f1fae39e740eeaf99938fda8b429a
SHA1 d4ceee074222edc86952d1b44786e0a5b0823dd5
SHA512 60cd288469ff62b76031ecd5715e0c8f7f5a0aa0ac66e2194a0159194fcd07782b86e152b29b291034c07b5b5b35c8f5362120c06b7e42db001fdcf571d2f3a7
SSDEEP 12288:9n8yzXTIJojrkmwcEoCVt3PqHn9JK6V/C7j3YQGnVKsZ+BPzei43NcPimi8VOMS:SKXT1PeoC73iH7tCH34VXoBPCi49cPVu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39920

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindNextVolumeA HeapWalk GetNamedPipeHandleStateW SystemTimeToFileTime FillConsoleOutputCharacterA CreateMailslotA TerminateProcess GetLastError GetVersionExA FreeResource EnumResourceNamesA FindNextFileA CopyFileExW BuildCommDCBA SetDefaultCommConfigA SetCommConfig WritePrivateProfileStructW LocalCompact ChangeTimerQueueTimer ReadConsoleInputW WriteConsoleInputA LoadResource AddAtomW SearchPathA GetThreadTimes CallNamedPipeW GetDriveTypeW BuildCommDCBAndTimeoutsA VirtualProtect GetModuleHandleA GlobalAlloc SetThreadIdealProcessor GetProfileSectionW DeleteFileW FindFirstChangeNotificationA VerifyVersionInfoA FormatMessageW SetDllDirectoryW LoadLibraryA WritePrivateProfileStringW GetUserDefaultLCID SetWaitableTimer SetConsoleTextAttribute InterlockedDecrement GetStartupInfoW GetSystemWow64DirectoryA CopyFileW SetCalendarInfoA ContinueDebugEvent EndUpdateResourceW SetLastError FreeLibraryAndExitThread GetModuleFileNameW FatalAppExitA GetSystemTime OpenFileMappingW lstrcmpW WriteFileGather SetLocaleInfoW DisableThreadLibraryCalls InterlockedExchangeAdd GlobalUnfix GetSystemWindowsDirectoryA CopyFileA GetACP GlobalFindAtomW lstrcatW GetPrivateProfileStringW SetMailslotInfo CreateActCtxW GetPrivateProfileIntW _lwrite OutputDebugStringW CreateNamedPipeW SetThreadAffinityMask SetConsoleActiveScreenBuffer EnumResourceTypesW lstrlenA DebugActiveProcess WriteConsoleW lstrcpyA ReadConsoleOutputW GetThreadContext BuildCommDCBW ReleaseActCtx GetStringTypeA GetPrivateProfileStringA GetDriveTypeA GetFileAttributesExA LocalFileTimeToFileTime MoveFileW GetVolumePathNameW EnumDateFormatsA ProcessIdToSessionId GetQueuedCompletionStatus AllocConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasExesLengthA WriteConsoleInputW CreateMailslotW SystemTimeToTzSpecificLocalTime MoveFileWithProgressA GetStringTypeExW EnumSystemLocalesA GetPrivateProfileIntA GetModuleHandleW OpenWaitableTimerA GetConsoleAliasesLengthW PeekNamedPipe GetCompressedFileSizeW FindNextVolumeMountPointA WriteConsoleOutputCharacterA EnumDateFormatsW QueryInformationJobObject GetConsoleAliasExesW FlushConsoleInputBuffer OpenMutexA RaiseException GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedIncrement GetProcAddress ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA LoadLibraryW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

advapi32

InitiateSystemShutdownW

Sharing

General

Malware Config

Signatures

File Explorer

63a178ba5e6fd7ae6faefd152b9391fdedad445a2a3d19c35ba588d4a968c24f

kernel32

advapi32