dea3ec5954c56489b97f26ff27b7c8b44f3543e74319bdd7e7788b326ef8bef2

General

Target
dea3ec5954c56489b97f26ff27b7c8b44f3543e74319bdd7e7788b326ef8bef2
Size 725KB
Sample220424-es5w5accbl
SHA256 dea3ec5954c56489b97f26ff27b7c8b44f3543e74319bdd7e7788b326ef8bef2
MD5 68906f9c6f595d421d446a0450099eb0
SHA1 10b13ff15916986e68f30531228de832969d8a8a
SHA512 2e29aed99aaf836701893c55cb66b3cd179afc4868171c2d0e869d8c8c599bb1375c6618011594e844a9903456d92dd5bc0490e4fe87ff24de29013baecd7604
SSDEEP 12288:tmfJgMAVDQMES41M8JnQcGsrEl3bVmoIAufjUTa1iS5bP579MO9c67uagB:tmhdAdQrx1M4+srwbVmoggGiS39Z5S9B
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

dea3ec5954c56489b97f26ff27b7c8b44f3543e74319bdd7e7788b326ef8bef2

.exe 725KB

dea3ec5954c56489b97f26ff27b7c8b44f3543e74319bdd7e7788b326ef8bef2

IMPHASH b4d94916d649f371106c64fe1c3608e5
SHA256 dea3ec5954c56489b97f26ff27b7c8b44f3543e74319bdd7e7788b326ef8bef2
MD5 68906f9c6f595d421d446a0450099eb0
SHA1 10b13ff15916986e68f30531228de832969d8a8a
SHA512 2e29aed99aaf836701893c55cb66b3cd179afc4868171c2d0e869d8c8c599bb1375c6618011594e844a9903456d92dd5bc0490e4fe87ff24de29013baecd7604
SSDEEP 12288:tmfJgMAVDQMES41M8JnQcGsrEl3bVmoIAufjUTa1iS5bP579MO9c67uagB:tmhdAdQrx1M4+srwbVmoggGiS39Z5S9B
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18506

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA CreateDirectoryExW GlobalAlloc GetPrivateProfileIntA LoadLibraryW CreateEventA GetFileAttributesW WriteConsoleW GetModuleFileNameW GetVolumePathNameA GetShortPathNameA FreeLibraryAndExitThread GetLastError SetLastError FindCloseChangeNotification GetLongPathNameA SetComputerNameA LoadLibraryA MoveFileA EnumDateFormatsA SetConsoleTitleW FindFirstChangeNotificationA GetCPInfoExA SetCalendarInfoA LocalSize WriteFileEx LocalFree InterlockedDecrement GetProcAddress OpenJobObjectA HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess HeapCreate HeapAlloc GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection Sleep RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapSize HeapReAlloc RaiseException

advapi32

IsTokenRestricted GetOldestEventLogRecord

Sharing

General

Malware Config

Signatures

File Explorer

dea3ec5954c56489b97f26ff27b7c8b44f3543e74319bdd7e7788b326ef8bef2

kernel32

advapi32