00a1fac27b4216aed0640d823b2f6648f5e80e24667cab640ae5f6452c94a845

Sharing

Copy URL Twitter E-mail

General

Target
00a1fac27b4216aed0640d823b2f6648f5e80e24667cab640ae5f6452c94a845
Size 844KB
Sample220518-thb9dsecck
SHA256 00a1fac27b4216aed0640d823b2f6648f5e80e24667cab640ae5f6452c94a845
MD5 9f4c1ad1d86395ed262a535c3efde255
SHA1 df4fbca1b8fddca43105b8a203d2056ca83c4cd4
SHA512 ae6dec8bc8e94e7b3be616b13684dfdca953138685562b302377db7be8476f7c18057c410caec34e4584a6a3de2653d92367207195e147c40940a1bac05e15cb
SSDEEP 24576:K+TmXi2xqEf2p+L0Vv+gmN4fh5EWD3lRX:/iiUL01VEIR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

00a1fac27b4216aed0640d823b2f6648f5e80e24667cab640ae5f6452c94a845

.exe 844KB

00a1fac27b4216aed0640d823b2f6648f5e80e24667cab640ae5f6452c94a845

IMPHASH 6bf4d50d0d6cbd671de7b8039290ecde
SHA256 00a1fac27b4216aed0640d823b2f6648f5e80e24667cab640ae5f6452c94a845
MD5 9f4c1ad1d86395ed262a535c3efde255
SHA1 df4fbca1b8fddca43105b8a203d2056ca83c4cd4
SHA512 ae6dec8bc8e94e7b3be616b13684dfdca953138685562b302377db7be8476f7c18057c410caec34e4584a6a3de2653d92367207195e147c40940a1bac05e15cb
SSDEEP 24576:K+TmXi2xqEf2p+L0Vv+gmN4fh5EWD3lRX:/iiUL01VEIR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26491

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW GetUserDefaultLCID EnumCalendarInfoExW GetUserDefaultLangID GetEnvironmentStrings LoadLibraryW SetConsoleMode GetBinaryTypeA GetGeoInfoA GetSystemDirectoryA lstrcmpW GetLastError SetLastError GetProcAddress MoveFileExW RemoveDirectoryA GetDiskFreeSpaceW GetAtomNameA LoadLibraryA GetProcessId InterlockedExchangeAdd LocalAlloc OpenEventA OpenJobObjectW GetCommTimeouts GetShortPathNameW GetCurrentProcessId LCMapStringW CreateFileW RaiseException GetConsoleAliasesLengthW FreeLibrary FindResourceA HeapSize FlushFileBuffers HeapAlloc MultiByteToWideChar HeapReAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetConsoleCP GetConsoleMode SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer HeapFree FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep GetStringTypeW RtlUnwind WriteConsoleW SetStdHandle CloseHandle

user32

ClientToScreen

gdi32

GetCharWidthFloatA

advapi32

CreateRestrictedToken

winhttp

WinHttpSetTimeouts

Name

.text

Size

649KB

Virtual Size

648KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

66KB

Virtual Size

39.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fobu

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.yam

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buzibe

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wedur

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

69KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ