29a07f9a8925187bd6de403085399798aff15f7b470f85c119b2fc2298f9293d

Sharing

Copy URL Twitter E-mail

General

Target
29a07f9a8925187bd6de403085399798aff15f7b470f85c119b2fc2298f9293d
Size 848KB
Sample220518-j3fgfafee7
SHA256 29a07f9a8925187bd6de403085399798aff15f7b470f85c119b2fc2298f9293d
MD5 053a9c22b84f6879f8a1057a2139061f
SHA1 9be1c887177695d684a780099f1d0d100b32ed50
SHA512 53cdcccd786ad61ea2a6324963ab01e2bccd5f1c9c8460b1d0ae19db2ee79a156e0bb09a80dea091326720a3832f856eb1c15a4f1045eddd4741c795f63d8cf4
SSDEEP 12288:RJvgJ2V6K4Rcrsqp9bjHBKssfIiS4rUUJMErsAJxdMuefaX4WIfRZO:RJw2V74R/qXkhRJjrdWFCXapZO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

29a07f9a8925187bd6de403085399798aff15f7b470f85c119b2fc2298f9293d

.exe 848KB

29a07f9a8925187bd6de403085399798aff15f7b470f85c119b2fc2298f9293d

IMPHASH db57d5e3d04b9a257784f752aaee46da
SHA256 29a07f9a8925187bd6de403085399798aff15f7b470f85c119b2fc2298f9293d
MD5 053a9c22b84f6879f8a1057a2139061f
SHA1 9be1c887177695d684a780099f1d0d100b32ed50
SHA512 53cdcccd786ad61ea2a6324963ab01e2bccd5f1c9c8460b1d0ae19db2ee79a156e0bb09a80dea091326720a3832f856eb1c15a4f1045eddd4741c795f63d8cf4
SSDEEP 12288:RJvgJ2V6K4Rcrsqp9bjHBKssfIiS4rUUJMErsAJxdMuefaX4WIfRZO:RJw2V74R/qXkhRJjrdWFCXapZO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26315

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExW InterlockedDecrement GetCurrentProcess GetEnvironmentStringsW GetUserDefaultLCID GetConsoleAliasesLengthA GetUserDefaultLangID LoadLibraryW SetConsoleMode GetBinaryTypeA GetGeoInfoA GetSystemDirectoryA lstrcmpW SetLastError GetProcAddress FreeLibrary RemoveDirectoryA GetDiskFreeSpaceW GetAtomNameA LoadLibraryA LocalAlloc OpenEventA OpenJobObjectW GetModuleFileNameA GetCommTimeouts GetShortPathNameW EnumCalendarInfoExA LCMapStringW CreateFileW RaiseException FindResourceA GetConsoleAliasesLengthW SetDefaultCommConfigA FlushFileBuffers SetStdHandle MultiByteToWideChar EncodePointer DecodePointer GetLastError HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess IsProcessorFeaturePresent GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId EnterCriticalSection LeaveCriticalSection Sleep HeapSize WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer HeapCreate HeapFree HeapAlloc GetModuleFileNameW FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW RtlUnwind WriteConsoleW CloseHandle

user32

ClientToScreen

gdi32

GetCharWidthFloatA

advapi32

CreateRestrictedToken

winhttp

WinHttpSetTimeouts

Name

.text

Size

653KB

Virtual Size

653KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

66KB

Virtual Size

39.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ropehi

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rage

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.zibag

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bax

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

69KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ