c5192e23d2487a911c6eb69ca8e1d18204c5e40a19980354ccb79c29ecb45b40

General

Target
c5192e23d2487a911c6eb69ca8e1d18204c5e40a19980354ccb79c29ecb45b40
Size 196KB
Sample220418-ftmydabbbj
SHA256 c5192e23d2487a911c6eb69ca8e1d18204c5e40a19980354ccb79c29ecb45b40
MD5 b616d3dd11c5e54c514eb614bee658d2
SHA1 aee44a28ea4c9beb34be5c9ecc6883abb8dc9dc4
SHA512 decd7651e3daa7fb1f407f42ae05aa2ec82bfab182841645e213a3fa9cf7a36fc04747119d7d72ba5f34b9c680cea64cff3540f814a264901e101e393b94e4d5
SSDEEP 6144:cLofyrhJU8Rkjuz7z5dgel95jsTZJyWiF:cYmXkjidZ9u1YWi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

c5192e23d2487a911c6eb69ca8e1d18204c5e40a19980354ccb79c29ecb45b40

.exe 196KB

c5192e23d2487a911c6eb69ca8e1d18204c5e40a19980354ccb79c29ecb45b40

IMPHASH cb2d410ca3eaf5f552476f3a37d9c167
SHA256 c5192e23d2487a911c6eb69ca8e1d18204c5e40a19980354ccb79c29ecb45b40
MD5 b616d3dd11c5e54c514eb614bee658d2
SHA1 aee44a28ea4c9beb34be5c9ecc6883abb8dc9dc4
SHA512 decd7651e3daa7fb1f407f42ae05aa2ec82bfab182841645e213a3fa9cf7a36fc04747119d7d72ba5f34b9c680cea64cff3540f814a264901e101e393b94e4d5
SSDEEP 6144:cLofyrhJU8Rkjuz7z5dgel95jsTZJyWiF:cYmXkjidZ9u1YWi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

5342

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext OpenFile WritePrivateProfileStructA TlsGetValue FindResourceExW BuildCommDCBAndTimeoutsA InterlockedIncrement GetProfileStringW GetComputerNameW OpenSemaphoreA FreeEnvironmentStringsA _lclose GetSystemTimeAsFileTime ActivateActCtx GlobalAlloc LoadLibraryW LocalShrink SizeofResource GetVersionExW GetFileAttributesA SetConsoleMode IsDBCSLeadByte lstrcatA CompareStringW ExitThread lstrlenW DisconnectNamedPipe GetPrivateProfileIntW ReleaseActCtx GetLastError GetProcAddress GetProcessHeaps CreateNamedPipeA IsValidCodePage SearchPathA GetLocalTime LocalAlloc VirtualLock AddAtomA GetPrivateProfileStructA GetTapeParameters WriteProfileStringA SetConsoleCursorInfo VirtualProtect ScrollConsoleScreenBufferA DebugBreak FindActCtxSectionStringW CopyFileExA lstrcpyA GetModuleHandleA GetModuleHandleW Sleep ExitProcess GetStartupInfoW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP GetOEMCP HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW RaiseException

user32

GetCursorPos

Sharing

General

Malware Config

Signatures

File Explorer

c5192e23d2487a911c6eb69ca8e1d18204c5e40a19980354ccb79c29ecb45b40

kernel32

user32