5135acb4869394c48a11cd709be73b99085c066bb7a664902e96811b7b41a837

Sharing

Copy URL Twitter E-mail

General

Target
5135acb4869394c48a11cd709be73b99085c066bb7a664902e96811b7b41a837
Size 210KB
Sample220503-y3hdcsedfj
SHA256 5135acb4869394c48a11cd709be73b99085c066bb7a664902e96811b7b41a837
MD5 fa5c9db3db2492e6cdb843291ea4ca6e
SHA1 78596ce6e3b747219bf855d828e96e6e4bacc08c
SHA512 f0c9272b6b5761ec745f6cf65dea79c4dc9e330b1f8430050deff325461a26b1ff636e91d334d84fce531dd07a7d1112fa7d19f48d7ef3205c21aff41c916675
SSDEEP 6144:dwzA0Sng5Vnlp8OFHhe41OqSqEqxyXa3qbml5CddEL:qzA0SiAOFHhJ1OqrNym57L
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5135acb4869394c48a11cd709be73b99085c066bb7a664902e96811b7b41a837

.zip 210KB
8980000809000.COM

.exe 619KB

5135acb4869394c48a11cd709be73b99085c066bb7a664902e96811b7b41a837

SHA256 5135acb4869394c48a11cd709be73b99085c066bb7a664902e96811b7b41a837
MD5 fa5c9db3db2492e6cdb843291ea4ca6e
SHA1 78596ce6e3b747219bf855d828e96e6e4bacc08c
SHA512 f0c9272b6b5761ec745f6cf65dea79c4dc9e330b1f8430050deff325461a26b1ff636e91d334d84fce531dd07a7d1112fa7d19f48d7ef3205c21aff41c916675
SSDEEP 6144:dwzA0Sng5Vnlp8OFHhe41OqSqEqxyXa3qbml5CddEL:qzA0SiAOFHhJ1OqrNym57L
MD5 SHA1 SHA512 SSDEEP

8980000809000.COM

IMPHASH bc5966a463e3eb6e754f16a51c8132da
SHA256 fbcf45a88ba1f036c2e124ec1939b8e94ffcee01e56e736553938ff4ba5a0dee
MD5 e04d66f39776231b5b159a053a2b114a
SHA1 c9294ca3bb3401882d1af4d740726deda066e091
SHA512 f965db86ca20748afaafd197ea9c14ed9ad13bad76c33b9300cb81b1db95307421ddb17048550ef118457e9dfd96d2acb93c426447c36c361bed321fbef11c28
SSDEEP 6144:hrHC6D4AYrN030xrtQucIE9PQKa+Z6FGgzzoTHU8eKtxxNmavADvmr:hri6D4AYU0LQuPyla+Z6F5zANmavADvo
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14040

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetUnhandledExceptionFilter MoveFileExA WriteConsoleOutputCharacterA GetVolumeInformationW WriteFileEx SetConsoleCursorInfo GetStdHandle VirtualProtect SetConsoleCursorPosition ReadConsoleInputA PeekConsoleInputA GetNumberOfConsoleInputEvents SetEndOfFile SetEnvironmentVariableA CreateFileW GetFileAttributesExW CreateProcessA GetExitCodeProcess WaitForSingleObject GetStringTypeW LCMapStringEx CompareStringEx HeapSize LoadLibraryW OutputDebugStringW GetTimeZoneInformation ReadConsoleW ReadFile WriteConsoleW SetFilePointerEx SetStdHandle HeapReAlloc HeapAlloc FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount64 QueryPerformanceCounter GetModuleFileNameA GetProcessHeap GetCurrentThreadId SetLastError GetCPInfo GetOEMCP GetACP IsValidCodePage InterlockedIncrement LoadLibraryExW GetModuleFileNameW InitOnceExecuteOnce GetFileType RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime EncodePointer DecodePointer GetLastError InterlockedDecrement ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar GetCommandLineA UnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetStartupInfoW GetModuleHandleW DeleteCriticalSection InitializeCriticalSectionAndSpinCount HeapFree Sleep CloseHandle FlushFileBuffers WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode SetConsoleMode

rtm

RtmIsRoute MgmTakeInterfaceOwnership RtmAddRoute RtmGetRouteAge

msi

ord43 ord158 ord19 ord112 ord113 ord98 ord14

msacm32

acmFilterChooseA acmDriverOpen acmFormatChooseW acmFilterTagDetailsW acmDriverDetailsW acmStreamPrepareHeader

shlwapi

PathIsUNCServerW StrChrIW SHSetValueA PathIsDirectoryW ChrCmpIW

urlmon

URLOpenStreamA CreateAsyncBindCtx RegisterFormatEnumerator IsValidURL ReleaseBindInfo RegisterMediaTypes CoInternetGetSession WriteHitLogging MkParseDisplayNameEx

rtutils

RouterLogRegisterW RouterLogDeregisterW TraceVprintfExA TraceDeregisterExA RouterLogEventA TraceRegisterExW

wsnmp32

ord500 ord905 ord903 ord102 ord100 ord503 ord300 ord402