798fd3d13fa63ca5d0d89c1a7dc1027f17f55df19cef5c28faa3d6d5a6c53063

General

Target
798fd3d13fa63ca5d0d89c1a7dc1027f17f55df19cef5c28faa3d6d5a6c53063
Size 144KB
Sample220415-hlz9vadde2
SHA256 798fd3d13fa63ca5d0d89c1a7dc1027f17f55df19cef5c28faa3d6d5a6c53063
MD5 5e06ad6cc412dd2910f3732b0dc76ba8
SHA1 9b3cc7fde08fe31170c9f964a3f837e2c54b9243
SHA512 67c5df390e2e0326d22e682b88a1c5c98b5b5df7ee45c7880f5ee8e3733a8e11693fad613a67f7af5674387b5d956da88a86217b6fd43a8ef8fb5b76416fe77c
SSDEEP 3072:UELwLzMCib4yK5tWaCe5+GW49fNPyXA8Re0D15r4:XLwLzMCtbfWPe5+Gb91aXI0D
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

798fd3d13fa63ca5d0d89c1a7dc1027f17f55df19cef5c28faa3d6d5a6c53063

.exe 144KB

798fd3d13fa63ca5d0d89c1a7dc1027f17f55df19cef5c28faa3d6d5a6c53063

IMPHASH f9495905953586e6497ea134e67ea38f
SHA256 798fd3d13fa63ca5d0d89c1a7dc1027f17f55df19cef5c28faa3d6d5a6c53063
MD5 5e06ad6cc412dd2910f3732b0dc76ba8
SHA1 9b3cc7fde08fe31170c9f964a3f837e2c54b9243
SHA512 67c5df390e2e0326d22e682b88a1c5c98b5b5df7ee45c7880f5ee8e3733a8e11693fad613a67f7af5674387b5d956da88a86217b6fd43a8ef8fb5b76416fe77c
SSDEEP 3072:UELwLzMCib4yK5tWaCe5+GW49fNPyXA8Re0D15r4:XLwLzMCtbfWPe5+Gb91aXI0D
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4869

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WritePrivateProfileStructA SetLocalTime WriteTapemark GetNamedPipeHandleStateA _lcreat SetTapeParameters GetTickCount FindNextVolumeMountPointA ActivateActCtx FindResourceExA GlobalAlloc LoadLibraryW TerminateThread GetPrivateProfileStructW GetSystemPowerStatus SetSystemTimeAdjustment SetConsoleMode GetBinaryTypeA CompareStringW lstrlenW SetPriorityClass GetPrivateProfileIntW SetCurrentDirectoryA GetTapeStatus LoadLibraryA CreateSemaphoreW GetConsoleScreenBufferInfo LocalAlloc BuildCommDCBAndTimeoutsW GetProfileStringA SetFileApisToANSI AddAtomA GetTapeParameters ContinueDebugEvent VirtualProtect CloseHandle GetSystemTime lstrcpyW DeactivateActCtx GetThreadContext HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleHandleA

user32

GetAncestor

gdi32

GetBitmapDimensionEx

Sharing

General

Malware Config

Signatures

File Explorer

798fd3d13fa63ca5d0d89c1a7dc1027f17f55df19cef5c28faa3d6d5a6c53063

kernel32

user32

gdi32