798060e1ffcdefb2421ad22066507dcaefeb28517cbc2c8d158bfe566ade1d6e

General

Target
798060e1ffcdefb2421ad22066507dcaefeb28517cbc2c8d158bfe566ade1d6e
Size 831KB
Sample220408-kjp27sagh4
SHA256 798060e1ffcdefb2421ad22066507dcaefeb28517cbc2c8d158bfe566ade1d6e
MD5 9c7f4d08a0e2cc79a8f61e1a94037d1d
SHA1 ffb7697eeaee4368d22b06a76119688dc2095b27
SHA512 b9faf9d7722d66c3d05c8a13acfcad1b6dc29a3d0dc6b3dce3aee052e029eb55d62da4cba22bbb72402a377e82fc31e4e85c34aa0173117aa5bfff525e5750d8
SSDEEP 12288:6X8vOq8EW7o1XPKADyOEXLN9OVBucjoRBSQS/HQupsWClXscRPy7j:6X7nV7ItyOa9OjNjoC/vNGXlcqq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

798060e1ffcdefb2421ad22066507dcaefeb28517cbc2c8d158bfe566ade1d6e

.exe 831KB

798060e1ffcdefb2421ad22066507dcaefeb28517cbc2c8d158bfe566ade1d6e

IMPHASH 5cbd107a7eb6202007731da5377c40ed
SHA256 798060e1ffcdefb2421ad22066507dcaefeb28517cbc2c8d158bfe566ade1d6e
MD5 9c7f4d08a0e2cc79a8f61e1a94037d1d
SHA1 ffb7697eeaee4368d22b06a76119688dc2095b27
SHA512 b9faf9d7722d66c3d05c8a13acfcad1b6dc29a3d0dc6b3dce3aee052e029eb55d62da4cba22bbb72402a377e82fc31e4e85c34aa0173117aa5bfff525e5750d8
SSDEEP 12288:6X8vOq8EW7o1XPKADyOEXLN9OVBucjoRBSQS/HQupsWClXscRPy7j:6X7nV7ItyOa9OjNjoC/vNGXlcqq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28194

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA GetConsoleAliasesLengthA GetConsoleTitleA LoadLibraryW GetProcessHandleCount InterlockedPopEntrySList WriteConsoleW LocalHandle GetMailslotInfo GetModuleFileNameW GetVolumePathNameA GetShortPathNameA GetConsoleAliasesW SetLastError GetLongPathNameA MoveFileW WriteConsoleA LocalAlloc LockResource WriteProfileSectionW SetConsoleWindowInfo GetModuleFileNameA GetConsoleTitleW VirtualProtect GetCPInfoExA SetCalendarInfoA SetFileShortNameA GetFileInformationByHandle WriteConsoleOutputCharacterW EnterCriticalSection FillConsoleOutputCharacterA EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent Sleep HeapSize GetProcAddress GetModuleHandleW ExitProcess LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId CloseHandle WriteFile FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode RaiseException HeapReAlloc RtlUnwind SetStdHandle FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW CreateFileW

gdi32

GetTextExtentExPointA

Sharing

General

Malware Config

Signatures

File Explorer

798060e1ffcdefb2421ad22066507dcaefeb28517cbc2c8d158bfe566ade1d6e

kernel32

gdi32