e3bb7d5e0e74dfac43c272516d78431426f9869912cb426f6db70a156c8512fd

General

Target
e3bb7d5e0e74dfac43c272516d78431426f9869912cb426f6db70a156c8512fd
Size 321KB
Sample220516-p9b1gsced2
SHA256 e3bb7d5e0e74dfac43c272516d78431426f9869912cb426f6db70a156c8512fd
MD5 a985347669f5a331f844379febdc1e9a
SHA1 f74947124606530474bff0b16d858609f7c8505c
SHA512 c6e1b62fb6067e3beb1f87cec5964c0ddd1e536cbf9b948348921179f9ab4ec35a1c646d6fe048afd08e933da02bb6c563efbae10ebe0ca04cc72d3dc5d909b1
SSDEEP 6144:fZeNLJ49BUMG2TRzEYq0Ql3xf0YnOznSZeQRpxyf+t:kW9B3rl5Ql3xULSFft
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e3bb7d5e0e74dfac43c272516d78431426f9869912cb426f6db70a156c8512fd

.exe 321KB

e3bb7d5e0e74dfac43c272516d78431426f9869912cb426f6db70a156c8512fd

IMPHASH e3a220ab0ca0c7dd8b23596dc0916da6
SHA256 e3bb7d5e0e74dfac43c272516d78431426f9869912cb426f6db70a156c8512fd
MD5 a985347669f5a331f844379febdc1e9a
SHA1 f74947124606530474bff0b16d858609f7c8505c
SHA512 c6e1b62fb6067e3beb1f87cec5964c0ddd1e536cbf9b948348921179f9ab4ec35a1c646d6fe048afd08e933da02bb6c563efbae10ebe0ca04cc72d3dc5d909b1
SSDEEP 6144:fZeNLJ49BUMG2TRzEYq0Ql3xf0YnOznSZeQRpxyf+t:kW9B3rl5Ql3xULSFft
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30785

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapUnlock GetModuleHandleA InterlockedDecrement GetPrivateProfileSectionW DeleteCriticalSection LocalAlloc LocalLock WriteFile GetCurrentActCtx FindActCtxSectionStringA SetEndOfFile SetEvent ReleaseMutex Sleep WaitForSingleObject WaitForMultipleObjects FindResourceExA GetConsoleTitleA SetConsoleCtrlHandler SetConsoleTitleW AttachConsole ActivateActCtx ReadConsoleW ZombifyActCtx ReleaseActCtx HeapLock GetProcAddress GetWindowsDirectoryA SetDefaultCommConfigA BuildCommDCBAndTimeoutsW CommConfigDialogA HeapAlloc GetCurrentProcess lstrlenW GetModuleFileNameW GetFileAttributesA ReadFile InterlockedIncrement InitializeCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle CloseHandle CreateFileA LoadLibraryA GetConsoleCP GetConsoleMode FlushFileBuffers GetProcessHeap WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidthFloatA

advapi32

RegQueryValueExW

Name

.text

Size

82KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

163KB

Virtual Size

798KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.hug

Size

1024B

Virtual Size

626B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bifadu

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pizetu

Size

512B

Virtual Size

6B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e3bb7d5e0e74dfac43c272516d78431426f9869912cb426f6db70a156c8512fd

kernel32

gdi32

advapi32