992f3ebf8da598df9727bb18d21a3e604ee6bd3a55781eb664744fce17427ca7

General

Target
992f3ebf8da598df9727bb18d21a3e604ee6bd3a55781eb664744fce17427ca7
Size 366KB
Sample220509-krmbaafffr
SHA256 992f3ebf8da598df9727bb18d21a3e604ee6bd3a55781eb664744fce17427ca7
MD5 862f4c00120e50cde135320e73d1850f
SHA1 007dca04463f0c8fc3fecfd051b57e097c0f8851
SHA512 66a6f248f8b9c34ac2eef57f5d1ce67a69c20ab11e30e986067d0043eb94310779a0b78ee6335c92b1d74362660615526b62d15fb2b4e3f783913c0e3a27aa8a
SSDEEP 6144:z6/xhYHjfWJ6CCru6nUe1+6U7noyrHNv2MCFzAOWYAuM14Oo:eDYD+w9rug5+6Vy7rCCBW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

992f3ebf8da598df9727bb18d21a3e604ee6bd3a55781eb664744fce17427ca7

.exe 366KB

992f3ebf8da598df9727bb18d21a3e604ee6bd3a55781eb664744fce17427ca7

IMPHASH acdc26f209665181e7953827091ada63
SHA256 992f3ebf8da598df9727bb18d21a3e604ee6bd3a55781eb664744fce17427ca7
MD5 862f4c00120e50cde135320e73d1850f
SHA1 007dca04463f0c8fc3fecfd051b57e097c0f8851
SHA512 66a6f248f8b9c34ac2eef57f5d1ce67a69c20ab11e30e986067d0043eb94310779a0b78ee6335c92b1d74362660615526b62d15fb2b4e3f783913c0e3a27aa8a
SSDEEP 6144:z6/xhYHjfWJ6CCru6nUe1+6U7noyrHNv2MCFzAOWYAuM14Oo:eDYD+w9rug5+6Vy7rCCBW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39568

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA SetPriorityClass FindFirstChangeNotificationW WritePrivateProfileStructA GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA GetStringTypeA GetDriveTypeW DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA SetDllDirectoryW EndUpdateResourceW InterlockedIncrement _lwrite MoveFileExW GetConsoleAliasA InterlockedDecrement GetCurrentActCtx GetSystemWindowsDirectoryW GetModuleHandleExW SetConsoleScreenBufferSize WriteConsoleInputA SetVolumeMountPointW CallNamedPipeW FreeEnvironmentStringsA GetModuleHandleW GetTickCount FindNextVolumeMountPointA GetConsoleTitleA GetCompressedFileSizeW ReadConsoleOutputA GetDateFormatA FindActCtxSectionStringA TzSpecificLocalTimeToSystemTime EnumResourceTypesA GetPrivateProfileIntA AddRefActCtx LoadLibraryW TerminateThread ReadProcessMemory GetSystemWow64DirectoryW SetSystemTimeAdjustment FormatMessageW GetFileAttributesA GetExitCodeProcess FindNextVolumeW GetWriteWatch GetFileAttributesW VerifyVersionInfoA GetBinaryTypeA GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetSystemDirectoryA GetTimeZoneInformation SetComputerNameExW CreateActCtxA GetOverlappedResult GetFileSize GetVolumePathNameA lstrlenW SetThreadPriority GetNamedPipeHandleStateW GetConsoleAliasesW GlobalUnfix ReleaseActCtx GetStartupInfoA FillConsoleOutputCharacterW GetLastError GetProcessHeaps DefineDosDeviceW CreateNamedPipeA EnumDateFormatsExA HeapUnlock CopyFileA SetComputerNameA EnterCriticalSection GlobalGetAtomNameA DisableThreadLibraryCalls BuildCommDCBW ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA WriteConsoleA ProcessIdToSessionId RegisterWaitForSingleObject InterlockedExchangeAdd LocalAlloc GetFileType WritePrivateProfileStringA MoveFileA SetCurrentDirectoryW FindAtomA SetSystemTime GlobalWire CreateIoCompletionPort FindFirstChangeNotificationA CreateWaitableTimerW FindNextFileW CreateMailslotA GetStringTypeW WriteProfileStringW RequestWakeupLatency VirtualProtect EnumDateFormatsW WaitForDebugEvent SetCalendarInfoA SetThreadAffinityMask SetProcessShutdownParameters Module32NextW GetVersionExA ReadConsoleInputW TerminateJobObject CloseHandle GetCurrentProcessId GetFileInformationByHandle GetConsoleProcessList CopyFileExA CreateFileA GetACP GetThreadContext Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection WideCharToMultiByte MultiByteToWideChar GetCommandLineA UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError SetStdHandle WriteFile GetConsoleCP GetConsoleMode SetHandleCount GetStdHandle QueryPerformanceCounter GetSystemTimeAsFileTime ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc LCMapStringA LCMapStringW GetLocaleInfoA SetFilePointer InitializeCriticalSectionAndSpinCount GetConsoleOutputCP DeleteFileA

advapi32

ImpersonateSelf IsTokenUntrusted

Sharing

General

Malware Config

Signatures

File Explorer

992f3ebf8da598df9727bb18d21a3e604ee6bd3a55781eb664744fce17427ca7

kernel32

advapi32