cfb694593822672bb9868c1c52382bc8

General

Target
cfb694593822672bb9868c1c52382bc8
Size 366KB
Sample220510-avmfcaeec8
SHA256 c8d86d108446f2370971fa59a0ddccd511a133a67b5ece08bc089ab2eb3d7d63
MD5 cfb694593822672bb9868c1c52382bc8
SHA1 5ed8ccf9167b75b03b4b0c4008ed6780d4bc9744
SHA512 f464e7d20c4f09b337dca063b30cb9f3491763589c8f3a752304328caa9a5f1cd765fb45757e4f6b38436024452c495490dcf7be3d013fd87c056247f8187305
SSDEEP 6144:ftjkRAsfBHxHQlUGJTN6oIoHwkWrYWwk5e/GgQrC4vSjt7qhMF1vypZOVhEUo:F2JZRHlGJTYoRwLF5g9cSjp1q7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

cfb694593822672bb9868c1c52382bc8

.exe 366KB

cfb694593822672bb9868c1c52382bc8

IMPHASH ef3edcc44b2f6221fa7a1991ae483108
SHA256 c8d86d108446f2370971fa59a0ddccd511a133a67b5ece08bc089ab2eb3d7d63
MD5 cfb694593822672bb9868c1c52382bc8
SHA1 5ed8ccf9167b75b03b4b0c4008ed6780d4bc9744
SHA512 f464e7d20c4f09b337dca063b30cb9f3491763589c8f3a752304328caa9a5f1cd765fb45757e4f6b38436024452c495490dcf7be3d013fd87c056247f8187305
SSDEEP 6144:ftjkRAsfBHxHQlUGJTN6oIoHwkWrYWwk5e/GgQrC4vSjt7qhMF1vypZOVhEUo:F2JZRHlGJTYoRwLF5g9cSjp1q7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39072

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA GetFileSize SetDefaultCommConfigA SetPriorityClass WritePrivateProfileStructA GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA GetStringTypeA GetDriveTypeW DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA SetDllDirectoryW EndUpdateResourceW InterlockedIncrement _lwrite VerSetConditionMask MoveFileExW GetConsoleAliasA InterlockedDecrement GetCurrentActCtx GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetModuleHandleExW SetConsoleScreenBufferSize WriteConsoleInputA GetLogicalDrives CallNamedPipeW FreeEnvironmentStringsA SetTapeParameters GetModuleHandleW GetTickCount GetConsoleTitleA GetCompressedFileSizeW ReadConsoleOutputA GetDateFormatA FindActCtxSectionStringA EnumResourceTypesA GetPrivateProfileIntA AddRefActCtx TerminateThread ReadProcessMemory GetSystemWow64DirectoryW FormatMessageW GetSystemTimeAdjustment GetFileAttributesA GetExitCodeProcess FindNextVolumeW GetWriteWatch GetFileAttributesW VerifyVersionInfoA GetBinaryTypeA GetMailslotInfo GetCompressedFileSizeA GetSystemDirectoryA GetTimeZoneInformation SetComputerNameExW CreateActCtxA UnregisterWait GetACP GetVolumePathNameA lstrlenW FindNextVolumeMountPointW SetThreadPriority CreateMailslotW GlobalUnfix ReleaseActCtx GetStartupInfoA FillConsoleOutputCharacterW GetLastError CreateNamedPipeA EnumDateFormatsExA HeapUnlock WriteProfileSectionA CopyFileA SetComputerNameA EnterCriticalSection GlobalGetAtomNameA DisableThreadLibraryCalls BuildCommDCBW DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime GetAtomNameA LoadLibraryA WriteConsoleA ProcessIdToSessionId RegisterWaitForSingleObject InterlockedExchangeAdd LocalAlloc GetFileType WritePrivateProfileStringA MoveFileA SetCurrentDirectoryW FindAtomA SetSystemTime GlobalWire FindFirstChangeNotificationA CreateWaitableTimerW lstrcatW FindNextFileW GetStringTypeW RequestWakeupLatency VirtualProtect EnumDateFormatsW WaitForDebugEvent OutputDebugStringA SetCalendarInfoA SetThreadAffinityMask SetProcessShutdownParameters Module32NextW GetVersionExA ReadConsoleInputW TerminateJobObject CloseHandle GetCurrentProcessId GetConsoleProcessList GetOverlappedResult GetThreadContext Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection WideCharToMultiByte DeleteFileA MultiByteToWideChar GetCommandLineA UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent SetStdHandle WriteFile GetConsoleCP GetConsoleMode GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError SetHandleCount GetStdHandle QueryPerformanceCounter GetSystemTimeAsFileTime ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers DebugBreak WriteConsoleW OutputDebugStringW LoadLibraryW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount GetConsoleOutputCP SetFilePointer LCMapStringA LCMapStringW GetLocaleInfoA

advapi32

ImpersonateSelf

Sharing

General

Malware Config

Signatures

File Explorer

cfb694593822672bb9868c1c52382bc8

kernel32

advapi32