bac663f2a8d3a67131c6098f1864cbdd03eacee21b66a20591980f01456cab30

General

Target
bac663f2a8d3a67131c6098f1864cbdd03eacee21b66a20591980f01456cab30
Size 249KB
Sample220512-n6cbeadfd5
SHA256 bac663f2a8d3a67131c6098f1864cbdd03eacee21b66a20591980f01456cab30
MD5 325ad9cb87d12330e7fc94507282f799
SHA1 7e34a218700dcfc430a631cf64c72e9f0d2d39f7
SHA512 47e75f47147dc919e808f70182decee3c3ee25391ad4a9672dc4fac88dbc80e684e53beba9afdb7946b019a6a623ab1f6012cba9265a178da52724cfa333a5e4
SSDEEP 3072:T/rqmkcOfBKfyJHlfDrCz4lZv3tXzBJTUJhpxyDXcF04yp0X57+x:jdKwfyrDi4FzBJQtc0y2d+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bac663f2a8d3a67131c6098f1864cbdd03eacee21b66a20591980f01456cab30

.exe 249KB

bac663f2a8d3a67131c6098f1864cbdd03eacee21b66a20591980f01456cab30

IMPHASH e50230a05508783f14cd2bc676e3ef25
SHA256 bac663f2a8d3a67131c6098f1864cbdd03eacee21b66a20591980f01456cab30
MD5 325ad9cb87d12330e7fc94507282f799
SHA1 7e34a218700dcfc430a631cf64c72e9f0d2d39f7
SHA512 47e75f47147dc919e808f70182decee3c3ee25391ad4a9672dc4fac88dbc80e684e53beba9afdb7946b019a6a623ab1f6012cba9265a178da52724cfa333a5e4
SSDEEP 3072:T/rqmkcOfBKfyJHlfDrCz4lZv3tXzBJTUJhpxyDXcF04yp0X57+x:jdKwfyrDi4FzBJQtc0y2d+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4519

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalUnlock GetPrivateProfileSectionNamesW lstrlenA WritePrivateProfileStructA FindResourceExW CallNamedPipeA LoadLibraryExW ReadConsoleA InterlockedDecrement CompareFileTime GetUserDefaultLCID InterlockedCompareExchange FreeEnvironmentStringsA _lclose SetTapeParameters CreateNamedPipeW GetSystemTimeAsFileTime WriteFile InitializeCriticalSection TlsSetValue GlobalAlloc LoadLibraryW LocalShrink Sleep GetVersionExW DeleteVolumeMountPointW SetConsoleMode WriteConsoleW IsDBCSLeadByte lstrcatA DisconnectNamedPipe DeactivateActCtx CreateJobObjectA SetCurrentDirectoryA GetLastError GetProcAddress BeginUpdateResourceW SetVolumeLabelW WriteProfileSectionA IsValidCodePage _hwrite GetLocalTime LoadLibraryA LocalAlloc IsSystemResumeAutomatic WaitForMultipleObjects GetOEMCP GetThreadPriority WaitCommEvent GetCommTimeouts EnumDateFormatsW OpenSemaphoreW AreFileApisANSI lstrcpyA GetCommandLineA GetStartupInfoA SetUnhandledExceptionFilter GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetCPInfo GetACP HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA RaiseException

Name

.text

Size

198KB

Virtual Size

197KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

11.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

bac663f2a8d3a67131c6098f1864cbdd03eacee21b66a20591980f01456cab30

kernel32