e9feb3c127a782c4f7920766870008d2cb9f0eb864ca6988c005128464a32c3f

General

Target
e9feb3c127a782c4f7920766870008d2cb9f0eb864ca6988c005128464a32c3f
Size 193KB
Sample220415-skelvsabc8
SHA256 e9feb3c127a782c4f7920766870008d2cb9f0eb864ca6988c005128464a32c3f
MD5 4fe43b7e147f8662ba1323fcdbc7cef6
SHA1 21798b6f5a7c5824bb20992f016764d46a4d2a9d
SHA512 4e179fd02c68912113cb0af3108f35c47e0082756603af3d2b24801e0b0aa58940635cbc8a848351ccff6c50ab3c1edf33594c78aa062b43420ab1434c215951
SSDEEP 3072:6LBtNI2JWUSdH4CW9JCEX1qZYEdswzhlWSKB/nwnl6oCR9e:6LBtaASd1E1YY5wzvpKBfogFe
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e9feb3c127a782c4f7920766870008d2cb9f0eb864ca6988c005128464a32c3f

.exe 193KB

e9feb3c127a782c4f7920766870008d2cb9f0eb864ca6988c005128464a32c3f

IMPHASH f5ed527d4358d1397e8fae3a400bb954
SHA256 e9feb3c127a782c4f7920766870008d2cb9f0eb864ca6988c005128464a32c3f
MD5 4fe43b7e147f8662ba1323fcdbc7cef6
SHA1 21798b6f5a7c5824bb20992f016764d46a4d2a9d
SHA512 4e179fd02c68912113cb0af3108f35c47e0082756603af3d2b24801e0b0aa58940635cbc8a848351ccff6c50ab3c1edf33594c78aa062b43420ab1434c215951
SSDEEP 3072:6LBtNI2JWUSdH4CW9JCEX1qZYEdswzhlWSKB/nwnl6oCR9e:6LBtaASd1E1YY5wzvpKBfogFe
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4869

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WritePrivateProfileStructA WriteTapemark GetNamedPipeHandleStateA _lcreat SetTapeParameters GetTickCount FindNextVolumeMountPointA ActivateActCtx FindResourceExA GlobalAlloc LoadLibraryW TerminateThread GetPrivateProfileStructW GetSystemPowerStatus SetSystemTimeAdjustment SetConsoleMode GetBinaryTypeA CompareStringW lstrlenW DeactivateActCtx SetThreadContext SetCurrentDirectoryA GetTapeStatus GetLocalTime LoadLibraryA CreateSemaphoreW GetConsoleScreenBufferInfo LocalAlloc BuildCommDCBAndTimeoutsW GetProfileStringA SetFileApisToANSI AddAtomA GetTapeParameters ContinueDebugEvent VirtualProtect CloseHandle GetSystemTime lstrcpyW GetPrivateProfileIntW SetPriorityClass HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleHandleA

user32

GetAncestor

gdi32

GetBitmapDimensionEx

Sharing

General

Malware Config

Signatures

File Explorer

e9feb3c127a782c4f7920766870008d2cb9f0eb864ca6988c005128464a32c3f

kernel32

user32

gdi32