b599fcfe94366591a645a04eefce82c55010a398606699ef403ef1935fed5da5

General

Target
b599fcfe94366591a645a04eefce82c55010a398606699ef403ef1935fed5da5
Size 261KB
Sample220502-sp2besadfk
SHA256 b599fcfe94366591a645a04eefce82c55010a398606699ef403ef1935fed5da5
MD5 4298a62cf60a611ffba91116f255764a
SHA1 b1a76e1b5c439c8a5d9d5024066e2228911769ab
SHA512 9ac269f0b398e4f6f16b23fa1ce8a62967b9222715538ac2c290a20361a534f0dbf4b8099ad66795563e9d7fe1627b67bfdf28411bdccaa2d8d74030d0d27bf0
SSDEEP 6144:xGvnhNxLR5F2rKARtXjtsIeL0GIvrj83Vqvq67f+Qw:6/x15F25RnjeLFIvrjtvqSW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b599fcfe94366591a645a04eefce82c55010a398606699ef403ef1935fed5da5

.exe 261KB

b599fcfe94366591a645a04eefce82c55010a398606699ef403ef1935fed5da5

IMPHASH 45394f3be1537b268e8885f8e1c0e69d
SHA256 b599fcfe94366591a645a04eefce82c55010a398606699ef403ef1935fed5da5
MD5 4298a62cf60a611ffba91116f255764a
SHA1 b1a76e1b5c439c8a5d9d5024066e2228911769ab
SHA512 9ac269f0b398e4f6f16b23fa1ce8a62967b9222715538ac2c290a20361a534f0dbf4b8099ad66795563e9d7fe1627b67bfdf28411bdccaa2d8d74030d0d27bf0
SSDEEP 6144:xGvnhNxLR5F2rKARtXjtsIeL0GIvrj83Vqvq67f+Qw:6/x15F25RnjeLFIvrjtvqSW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

10576

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WritePrivateProfileStructA TlsGetValue SetLocalTime MoveFileExA _llseek GetNumberOfConsoleInputEvents CallNamedPipeA LoadLibraryExW WriteTapemark ReadConsoleA InterlockedDecrement ScrollConsoleScreenBufferW CompareFileTime GetUserDefaultLCID FreeEnvironmentStringsA _lclose SetTapeParameters GetModuleHandleW VirtualFree GetSystemTimeAsFileTime WriteFile FindResourceExA GlobalAlloc Sleep DeleteVolumeMountPointW LeaveCriticalSection GetFileAttributesW IsDBCSLeadByte GetOverlappedResult GetACP lstrlenW DeactivateActCtx GetLastError GetProcAddress SetDefaultCommConfigA BeginUpdateResourceW CreateNamedPipeA LocalLock WriteProfileSectionA ReadFileEx GetConsoleDisplayMode SearchPathA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc SetCalendarInfoW IsSystemResumeAutomatic GetProfileStringA SetNamedPipeHandleState SetSystemTime GetPrivateProfileSectionNamesA GetThreadPriority WaitCommEvent ContinueDebugEvent CreateMutexA PurgeComm EnumDateFormatsW CompareStringA GetConsoleCursorInfo OpenSemaphoreW GetVersionExA DeleteFileW DebugBreak FindActCtxSectionStringW lstrcpyW CopyFileExA AreFileApisANSI SetVolumeLabelA GetTapeStatus EnumResourceNamesW InterlockedIncrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree RtlUnwind RaiseException HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId HeapSize VirtualAlloc HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LCMapStringA WideCharToMultiByte LCMapStringW GetModuleHandleA

gdi32

GetBoundsRect GetBitmapDimensionEx

Sharing

General

Malware Config

Signatures

File Explorer

b599fcfe94366591a645a04eefce82c55010a398606699ef403ef1935fed5da5

kernel32

gdi32