d2ede358241f3157d97929377f55ab34348ff41f920b058513b3742fa160ceb0

General

Target
d2ede358241f3157d97929377f55ab34348ff41f920b058513b3742fa160ceb0
Size 761KB
Sample220421-ahs3cshdgn
SHA256 d2ede358241f3157d97929377f55ab34348ff41f920b058513b3742fa160ceb0
MD5 6cb05f324a120e07e58047baf8372906
SHA1 e2f7c849ae8f1a82f4736e0b4be53fe580f6b1a6
SHA512 f266e6d61a28b6d55264ea97e18621e811e606f508459e84c77782b004e82b7c543109a1f495a3060cd817b3b1584c134dfaa4479a719a665338764610e2f659
SSDEEP 12288:r1YfrWnbzbZdyj8idAdqnj6sT5glnr2+4D44UqAG7bh4yC44O1:yfebPZdFi+dqnTl+GLqm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d2ede358241f3157d97929377f55ab34348ff41f920b058513b3742fa160ceb0

.exe 761KB

d2ede358241f3157d97929377f55ab34348ff41f920b058513b3742fa160ceb0

IMPHASH 16e6376f57bc8ca3b7f6bfe18cfb4b36
SHA256 d2ede358241f3157d97929377f55ab34348ff41f920b058513b3742fa160ceb0
MD5 6cb05f324a120e07e58047baf8372906
SHA1 e2f7c849ae8f1a82f4736e0b4be53fe580f6b1a6
SHA512 f266e6d61a28b6d55264ea97e18621e811e606f508459e84c77782b004e82b7c543109a1f495a3060cd817b3b1584c134dfaa4479a719a665338764610e2f659
SSDEEP 12288:r1YfrWnbzbZdyj8idAdqnj6sT5glnr2+4D44UqAG7bh4yC44O1:yfebPZdFi+dqnTl+GLqm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22651

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GlobalAlloc AddRefActCtx SetConsoleCP WriteConsoleW GetModuleFileNameW GetShortPathNameA LCMapStringA GetPrivateProfileIntW FreeLibraryAndExitThread SetLastError GetLongPathNameA LoadLibraryA MoveFileA CreateEventW OpenJobObjectW EnumDateFormatsA GetConsoleTitleW GetProcAddress InterlockedDecrement SetFilePointer GetLastError HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException IsProcessorFeaturePresent HeapAlloc HeapFree EncodePointer DecodePointer HeapCreate GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess CloseHandle EnterCriticalSection LeaveCriticalSection ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW Sleep RtlUnwind SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize LoadLibraryW CreateFileW

advapi32

BackupEventLogW

ole32

OleUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

d2ede358241f3157d97929377f55ab34348ff41f920b058513b3742fa160ceb0

kernel32

advapi32

ole32