8b7dda6da34ef681560f2c0c22c2dfd0c950f5dc24fa21fa09f61350095c8b75

General

Target
8b7dda6da34ef681560f2c0c22c2dfd0c950f5dc24fa21fa09f61350095c8b75
Size 359KB
Sample220501-3lvdtabccn
SHA256 8b7dda6da34ef681560f2c0c22c2dfd0c950f5dc24fa21fa09f61350095c8b75
MD5 c1c77cd18545ba757940a2cdace71b7b
SHA1 067a14bfefc5e075d693b19e6ecff1e372a87304
SHA512 a5e142c753d01260865aa5324aefb9447c74df2513114c8308b4c19a763a96f7ab80b746dfc4863da55c30d16c473ad3c76066c6bcc66bdeb32c768ceaff81fd
SSDEEP 6144:DhToxDnxCnqKwrqa3cN1t2eigoSJIbmv475+UXdPf:1I243DeikJaWEd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

8b7dda6da34ef681560f2c0c22c2dfd0c950f5dc24fa21fa09f61350095c8b75

.exe 359KB

8b7dda6da34ef681560f2c0c22c2dfd0c950f5dc24fa21fa09f61350095c8b75

IMPHASH d76bee176be6e47110fa00f7fd143e0d
SHA256 8b7dda6da34ef681560f2c0c22c2dfd0c950f5dc24fa21fa09f61350095c8b75
MD5 c1c77cd18545ba757940a2cdace71b7b
SHA1 067a14bfefc5e075d693b19e6ecff1e372a87304
SHA512 a5e142c753d01260865aa5324aefb9447c74df2513114c8308b4c19a763a96f7ab80b746dfc4863da55c30d16c473ad3c76066c6bcc66bdeb32c768ceaff81fd
SSDEEP 6144:DhToxDnxCnqKwrqa3cN1t2eigoSJIbmv475+UXdPf:1I243DeikJaWEd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42409

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcpynA FindResourceExW HeapAlloc EndUpdateResourceW GetCurrentProcess SetEvent GetTickCount GetConsoleTitleA GetWindowsDirectoryA WriteFile GetConsoleCP Sleep GetSystemWindowsDirectoryA GetFileAttributesW CommConfigDialogA lstrlenW GetHandleInformation GetProcAddress LoadLibraryA LocalAlloc BuildCommDCBAndTimeoutsW HeapLock SetConsoleWindowInfo WaitForMultipleObjects GetModuleFileNameA SetConsoleTitleW GetModuleHandleA GetStringTypeW DeleteCriticalSection SetFileShortNameA GetCurrentProcessId GetPrivateProfileSectionW FindActCtxSectionStringW HeapCompact SetDefaultCommConfigA PulseEvent ReadFile LocalUnlock GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType SetFilePointer GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement CloseHandle ExitProcess FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers HeapSize LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

advapi32

BackupEventLogA ReportEventA DeregisterEventSource RegQueryValueExW CloseEventLog

winhttp

WinHttpCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

8b7dda6da34ef681560f2c0c22c2dfd0c950f5dc24fa21fa09f61350095c8b75

kernel32

advapi32

winhttp