c23bee9b31a9ac2745839feece9acacf743c4d1acb06cdb2f23067670cc671bc

General

Target
c23bee9b31a9ac2745839feece9acacf743c4d1acb06cdb2f23067670cc671bc
Size 262KB
Sample220501-3ltghsbccl
SHA256 c23bee9b31a9ac2745839feece9acacf743c4d1acb06cdb2f23067670cc671bc
MD5 1893f2bf755227c1c384461a4b190e50
SHA1 0c1b9acfbb2e0b25fc689f718c12fdf496f2ff86
SHA512 4cdcd112498fa1331f4f05faf32ec8d1e59dea1ef46e3ed847f6359a4c760f65bdfe94c4db699b04dc1f06e3f6a3941fad718dc3e81671459a890b0918f55109
SSDEEP 6144:Qr8TZNxLq5ylDg/FWwtAMg3fUb8cY+PE:rzxu50MGJw7P
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

c23bee9b31a9ac2745839feece9acacf743c4d1acb06cdb2f23067670cc671bc

.exe 262KB

c23bee9b31a9ac2745839feece9acacf743c4d1acb06cdb2f23067670cc671bc

IMPHASH 45394f3be1537b268e8885f8e1c0e69d
SHA256 c23bee9b31a9ac2745839feece9acacf743c4d1acb06cdb2f23067670cc671bc
MD5 1893f2bf755227c1c384461a4b190e50
SHA1 0c1b9acfbb2e0b25fc689f718c12fdf496f2ff86
SHA512 4cdcd112498fa1331f4f05faf32ec8d1e59dea1ef46e3ed847f6359a4c760f65bdfe94c4db699b04dc1f06e3f6a3941fad718dc3e81671459a890b0918f55109
SSDEEP 6144:Qr8TZNxLq5ylDg/FWwtAMg3fUb8cY+PE:rzxu50MGJw7P
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

10576

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WritePrivateProfileStructA TlsGetValue SetLocalTime MoveFileExA _llseek GetNumberOfConsoleInputEvents CallNamedPipeA LoadLibraryExW WriteTapemark ReadConsoleA InterlockedDecrement ScrollConsoleScreenBufferW CompareFileTime GetUserDefaultLCID FreeEnvironmentStringsA _lclose SetTapeParameters GetModuleHandleW VirtualFree GetSystemTimeAsFileTime WriteFile FindResourceExA GlobalAlloc Sleep DeleteVolumeMountPointW LeaveCriticalSection GetFileAttributesW IsDBCSLeadByte GetOverlappedResult GetACP lstrlenW DeactivateActCtx GetLastError GetProcAddress SetDefaultCommConfigA BeginUpdateResourceW CreateNamedPipeA LocalLock WriteProfileSectionA ReadFileEx GetConsoleDisplayMode SearchPathA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc SetCalendarInfoW IsSystemResumeAutomatic GetProfileStringA SetNamedPipeHandleState SetSystemTime GetPrivateProfileSectionNamesA GetThreadPriority WaitCommEvent ContinueDebugEvent CreateMutexA PurgeComm EnumDateFormatsW CompareStringA GetConsoleCursorInfo OpenSemaphoreW GetVersionExA DeleteFileW DebugBreak FindActCtxSectionStringW lstrcpyW CopyFileExA AreFileApisANSI SetVolumeLabelA GetTapeStatus EnumResourceNamesW InterlockedIncrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree RtlUnwind RaiseException HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId HeapSize VirtualAlloc HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LCMapStringA WideCharToMultiByte LCMapStringW GetModuleHandleA

gdi32

GetBoundsRect GetBitmapDimensionEx

Sharing

General

Malware Config

Signatures

File Explorer

c23bee9b31a9ac2745839feece9acacf743c4d1acb06cdb2f23067670cc671bc

kernel32

gdi32