31694520ace6ebf270337421668c843a

General

Target
31694520ace6ebf270337421668c843a
Size 376KB
Sample220516-nrpyyshhf2
SHA256 42a39eb0eff9dccc54ca3d2d555709ec5a7979e8e3f0dbfd3afd2d472fdb814c
MD5 31694520ace6ebf270337421668c843a
SHA1 212eaf910f399e6c7686d7c264a2dd8395a11a5c
SHA512 4c8d682f18396ebcc088333125cac87be32bba64200af94e15d45b96bb87b6d835f97b66659e77a2987c56a9a8e39e077e8d250d81e88022ec1051e433fd1c9c
SSDEEP 6144:8MNgEZvK3lBCE2KG9fF080nHXwE6R7ur9sUbX9YOv:8MN7ZvKuN1F0XHAerqkSOv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

31694520ace6ebf270337421668c843a

.exe 376KB

31694520ace6ebf270337421668c843a

IMPHASH d4caf119a59974e14265e37638578a58
SHA256 42a39eb0eff9dccc54ca3d2d555709ec5a7979e8e3f0dbfd3afd2d472fdb814c
MD5 31694520ace6ebf270337421668c843a
SHA1 212eaf910f399e6c7686d7c264a2dd8395a11a5c
SHA512 4c8d682f18396ebcc088333125cac87be32bba64200af94e15d45b96bb87b6d835f97b66659e77a2987c56a9a8e39e077e8d250d81e88022ec1051e433fd1c9c
SSDEEP 6144:8MNgEZvK3lBCE2KG9fF080nHXwE6R7ur9sUbX9YOv:8MN7ZvKuN1F0XHAerqkSOv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23773

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW MoveFileExA FreeLibrary InterlockedIncrement GetCurrentProcess GetEnvironmentStrings GlobalAlloc GetSystemDirectoryW LoadLibraryW SetConsoleMode GetBinaryTypeA GetModuleFileNameW lstrcmpW FindResourceA GetLastError GetProcAddress GetDiskFreeSpaceW LoadLibraryA LocalAlloc TransmitCommChar CreateEventW OpenJobObjectW GetModuleHandleA EnumCalendarInfoExA SetDefaultCommConfigA MultiByteToWideChar HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetModuleHandleW SetLastError GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess IsProcessorFeaturePresent HeapCreate ExitProcess WriteFile GetStdHandle SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetStringTypeW Sleep ReadFile SetStdHandle RtlUnwind GetConsoleCP GetConsoleMode FlushFileBuffers HeapReAlloc RaiseException HeapSize WriteConsoleW CloseHandle CreateFileW

advapi32

ImpersonateAnonymousToken

Name

.text

Size

281KB

Virtual Size

280KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

646KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yugu

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.powetis

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gufowo

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

31694520ace6ebf270337421668c843a

kernel32

advapi32