ef930a408ed514817f9c75ff5798748f1935d8b20ca49a68b59aa8d5c69de85b

General

Target
ef930a408ed514817f9c75ff5798748f1935d8b20ca49a68b59aa8d5c69de85b
Size 726KB
Sample220423-za79raedb8
SHA256 ef930a408ed514817f9c75ff5798748f1935d8b20ca49a68b59aa8d5c69de85b
MD5 744389cd974c11185fcc4099ad42c5bc
SHA1 9629d8652492825087bded93fd39684378dc0fc0
SHA512 c5bfa5be3e931ea16273c15c6bb604f1207bb74c41fb7a635fd8d691c30d8be84fcfac37ce39cf3de2ea478c29209071163916efb3ded5645c0d842d2b4df183
SSDEEP 12288:L/X65JxerdcXWUo6cXsLercZlH8qjB36HYV05hg2xP3iJuzcvsiYALsw+F6lY:L/q5Jxerd6a6cX0eUlH8qV3yBi2PSJvY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ef930a408ed514817f9c75ff5798748f1935d8b20ca49a68b59aa8d5c69de85b

.exe 726KB

ef930a408ed514817f9c75ff5798748f1935d8b20ca49a68b59aa8d5c69de85b

IMPHASH fdc47b4d6e668a8111cbb00f408fa91c
SHA256 ef930a408ed514817f9c75ff5798748f1935d8b20ca49a68b59aa8d5c69de85b
MD5 744389cd974c11185fcc4099ad42c5bc
SHA1 9629d8652492825087bded93fd39684378dc0fc0
SHA512 c5bfa5be3e931ea16273c15c6bb604f1207bb74c41fb7a635fd8d691c30d8be84fcfac37ce39cf3de2ea478c29209071163916efb3ded5645c0d842d2b4df183
SSDEEP 12288:L/X65JxerdcXWUo6cXsLercZlH8qjB36HYV05hg2xP3iJuzcvsiYALsw+F6lY:L/q5Jxerd6a6cX0eUlH8qV3yBi2PSJvY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18474

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA CreateDirectoryExW GetConsoleCP GlobalAlloc GetPrivateProfileIntA AddRefActCtx LoadLibraryW CreateEventA GetFileAttributesW WriteConsoleW GetModuleFileNameW GetVolumePathNameA GetShortPathNameA FreeLibraryAndExitThread FindCloseChangeNotification SetLastError GetProcAddress GetLongPathNameA SetComputerNameA LoadLibraryA MoveFileA EnumDateFormatsA SetConsoleTitleW FindFirstChangeNotificationA GetCPInfoExA SetCalendarInfoA LocalFree InterlockedDecrement GetLastError OpenJobObjectA HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess HeapCreate HeapAlloc GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection Sleep RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapSize HeapReAlloc RaiseException

advapi32

IsTokenRestricted GetOldestEventLogRecord

Sharing

General

Malware Config

Signatures

File Explorer

ef930a408ed514817f9c75ff5798748f1935d8b20ca49a68b59aa8d5c69de85b

kernel32

advapi32