153b94ebb78430f25df3712c3d67c5840a2e13d768be19eb9f857abb6f76d64b

General

Target
153b94ebb78430f25df3712c3d67c5840a2e13d768be19eb9f857abb6f76d64b
Size 809KB
Sample220422-yr5phscaen
SHA256 153b94ebb78430f25df3712c3d67c5840a2e13d768be19eb9f857abb6f76d64b
MD5 0385b4bce362f103180572ec62fe7838
SHA1 db820d425768307ef6823855f6823104205c27ce
SHA512 4540a61b992dc7a65a9cc0ba2444ce49e2678f4625f99ce0dec9350686f1a8754c101024dea3604e4e35dc97de7771ae3ae93ae5dbeddd709ca6479e3ad851d6
SSDEEP 12288:4CUmBteWIG6pliGnKLwZWdep2bFN8ijZyDasHqo08ZvOUSUW1JRf8PgASx:rjEGoAwZMq2/8OfBQGlo7Sx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

153b94ebb78430f25df3712c3d67c5840a2e13d768be19eb9f857abb6f76d64b

.exe 809KB

153b94ebb78430f25df3712c3d67c5840a2e13d768be19eb9f857abb6f76d64b

IMPHASH e1b3ca54a69e36ae6b29aaf272675684
SHA256 153b94ebb78430f25df3712c3d67c5840a2e13d768be19eb9f857abb6f76d64b
MD5 0385b4bce362f103180572ec62fe7838
SHA1 db820d425768307ef6823855f6823104205c27ce
SHA512 4540a61b992dc7a65a9cc0ba2444ce49e2678f4625f99ce0dec9350686f1a8754c101024dea3604e4e35dc97de7771ae3ae93ae5dbeddd709ca6479e3ad851d6
SSDEEP 12288:4CUmBteWIG6pliGnKLwZWdep2bFN8ijZyDasHqo08ZvOUSUW1JRf8PgASx:rjEGoAwZMq2/8OfBQGlo7Sx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40032

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetSystemTimeAdjustment FindNextVolumeA LeaveCriticalSection GetNamedPipeHandleStateA FileTimeToLocalFileTime ExitProcess GetCurrentProcessId GetVersionExW EnumDateFormatsExW FillConsoleOutputCharacterA EnumResourceNamesA FindNextFileA CopyFileExW BuildCommDCBAndTimeoutsA SetDefaultCommConfigA WritePrivateProfileStructW HeapSetInformation CreateTimerQueue ReadConsoleInputA GetVersionExA GetSystemDirectoryW GetDriveTypeA VirtualProtect LoadLibraryA GlobalAlloc VerifyVersionInfoA GetBinaryTypeA GetProfileSectionW InterlockedDecrement ReadConsoleOutputCharacterA FindFirstChangeNotificationW FormatMessageA SetDllDirectoryW GetQueuedCompletionStatus WritePrivateProfileStringA GetConsoleAliasesLengthW GetProcessHeap OpenWaitableTimerA UnlockFile InterlockedIncrement GetStartupInfoW GetSystemWow64DirectoryW GetConsoleAliasExesW ContinueDebugEvent EndUpdateResourceA SetLastError FatalAppExitA SetSystemTime OpenFileMappingA lstrcmpW TerminateThread SetConsoleActiveScreenBuffer SetDefaultCommConfigW VirtualFree InterlockedCompareExchange GlobalUnfix GetSystemWindowsDirectoryA CopyFileW TerminateProcess GetACP FindAtomA lstrcatW HeapWalk SetMailslotInfo CreateActCtxA _lread GetOverlappedResult CreateNamedPipeW GetAtomNameA SetConsoleScreenBufferSize EnumResourceTypesW lstrlenA WriteConsoleA lstrcpyA ReadConsoleOutputA SetThreadContext BuildCommDCBW ReleaseActCtx GetStringTypeW GetPrivateProfileStringW GetFileAttributesW GetVolumePathNameA MoveFileW SetCommMask SetFileShortNameA VerLanguageNameA LockFile EndUpdateResourceW EnumDateFormatsA ProcessIdToSessionId PostQueuedCompletionStatus FreeConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasExesLengthW WriteConsoleInputW CreateMailslotA TzSpecificLocalTimeToSystemTime MoveFileExA SetLocalTime GetStringTypeExW EnumSystemLocalesW CallNamedPipeA GetConsoleAliasExesLengthA FindActCtxSectionGuid CopyFileA ResetWriteWatch GetPrivateProfileIntW GetModuleHandleW GetTickCount GetModuleFileNameA GetConsoleAliasesLengthA GlobalUnWire FillConsoleOutputCharacterW GetCompressedFileSizeW SetThreadPriority MapUserPhysicalPages WriteConsoleOutputCharacterA EnumDateFormatsW QueryInformationJobObject CreateFileW GetDateFormatW RaiseException HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime Sleep GetProcAddress FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetLastError HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

user32

GetCaretBlinkTime

Sharing

General

Malware Config

Signatures

File Explorer

153b94ebb78430f25df3712c3d67c5840a2e13d768be19eb9f857abb6f76d64b

kernel32

user32