fb80732379dd3775da2f27e41c5cdc672aa59132407d81ecf66041c0cfad563b

Sharing

Copy URL Twitter E-mail

General

Target
fb80732379dd3775da2f27e41c5cdc672aa59132407d81ecf66041c0cfad563b
Size 844KB
Sample220518-tvgpmsbfh2
SHA256 fb80732379dd3775da2f27e41c5cdc672aa59132407d81ecf66041c0cfad563b
MD5 312527b559e8a6d94bd9858619094d0b
SHA1 66f4fcff8460de70170cf2ac7453527dd888699f
SHA512 88e0b8cd875b8a4a4750e8841ad703fef33a87e5668354bd20c400ab5cdf5eda03daca59b62b662abbbc6dbc89157b3020f7c31854e3770f3d1e4a6568696ae6
SSDEEP 24576:X+Ho4Nn+zaj3kN8JV6Rim494k1dte6fEH3YB:2oOOwkbRimjk1dtHsH3Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

fb80732379dd3775da2f27e41c5cdc672aa59132407d81ecf66041c0cfad563b

.exe 844KB

fb80732379dd3775da2f27e41c5cdc672aa59132407d81ecf66041c0cfad563b

IMPHASH 6bf4d50d0d6cbd671de7b8039290ecde
SHA256 fb80732379dd3775da2f27e41c5cdc672aa59132407d81ecf66041c0cfad563b
MD5 312527b559e8a6d94bd9858619094d0b
SHA1 66f4fcff8460de70170cf2ac7453527dd888699f
SHA512 88e0b8cd875b8a4a4750e8841ad703fef33a87e5668354bd20c400ab5cdf5eda03daca59b62b662abbbc6dbc89157b3020f7c31854e3770f3d1e4a6568696ae6
SSDEEP 24576:X+Ho4Nn+zaj3kN8JV6Rim494k1dte6fEH3YB:2oOOwkbRimjk1dtHsH3Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26491

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW GetUserDefaultLCID EnumCalendarInfoExW GetUserDefaultLangID GetEnvironmentStrings LoadLibraryW SetConsoleMode GetBinaryTypeA GetGeoInfoA GetSystemDirectoryA lstrcmpW GetLastError SetLastError GetProcAddress MoveFileExW RemoveDirectoryA GetDiskFreeSpaceW GetAtomNameA LoadLibraryA GetProcessId InterlockedExchangeAdd LocalAlloc OpenEventA OpenJobObjectW GetCommTimeouts GetShortPathNameW GetCurrentProcessId LCMapStringW CreateFileW RaiseException GetConsoleAliasesLengthW FreeLibrary FindResourceA HeapSize FlushFileBuffers HeapAlloc MultiByteToWideChar HeapReAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetConsoleCP GetConsoleMode SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer HeapFree FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep GetStringTypeW RtlUnwind WriteConsoleW SetStdHandle CloseHandle

user32

ClientToScreen

gdi32

GetCharWidthFloatA

advapi32

CreateRestrictedToken

winhttp

WinHttpSetTimeouts

Name

.text

Size

649KB

Virtual Size

648KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

66KB

Virtual Size

39.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.peyax

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hijuyuy

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kani

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.geg

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

69KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ