332629bfb7a2b1c959ceb83078575f2ed4b6d5780e6977d498b448303baa0dd8

General

Target
332629bfb7a2b1c959ceb83078575f2ed4b6d5780e6977d498b448303baa0dd8
Size 795KB
Sample220519-rwdchabdcl
SHA256 332629bfb7a2b1c959ceb83078575f2ed4b6d5780e6977d498b448303baa0dd8
MD5 077ae6544857924712628e1f298f50e4
SHA1 9fb422765850dfd350ed7381ca5f75364614454e
SHA512 13772db4e85a9808c2f95438f72312a6c4988576836a83f12839de5a2902d9af4e68f055215b6992778070f3b365901416dbe2750081e0eb8d2c41842177880b
SSDEEP 12288:dAmul67bSTYEyw0GAkF0+KhSj5bqLpi1MpO+EZjtam4WxyPGMK4FttlF:q87OYZwUkS+VqLpWMpOjafcyPGMK413
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

332629bfb7a2b1c959ceb83078575f2ed4b6d5780e6977d498b448303baa0dd8

.exe 795KB

332629bfb7a2b1c959ceb83078575f2ed4b6d5780e6977d498b448303baa0dd8

IMPHASH 50ae6a3304f1ef49114a4bd380cbfbbe
SHA256 332629bfb7a2b1c959ceb83078575f2ed4b6d5780e6977d498b448303baa0dd8
MD5 077ae6544857924712628e1f298f50e4
SHA1 9fb422765850dfd350ed7381ca5f75364614454e
SHA512 13772db4e85a9808c2f95438f72312a6c4988576836a83f12839de5a2902d9af4e68f055215b6992778070f3b365901416dbe2750081e0eb8d2c41842177880b
SSDEEP 12288:dAmul67bSTYEyw0GAkF0+KhSj5bqLpi1MpO+EZjtam4WxyPGMK4FttlF:q87OYZwUkS+VqLpWMpOjafcyPGMK413
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42688

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateTimerQueue GetFileSize SetThreadContext GetConsoleAliasesLengthW CopyFileExW GetModuleHandleExA GetConsoleAliasExesA SetComputerNameExA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement GetCurrentActCtx SetDefaultCommConfigW GetSystemWindowsDirectoryW GetProfileSectionA SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetComputerNameW GetLogicalDrives FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA GetPriorityClass GetPrivateProfileIntA GetSystemDirectoryW AddRefActCtx CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW FormatMessageW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA WritePrivateProfileStructW GetConsoleAliasW GetWriteWatch GetBinaryTypeA TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW GetOverlappedResult GetACP lstrcmpW GetVolumePathNameA lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe GetNamedPipeHandleStateW GlobalUnfix ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA WriteProfileSectionA SetComputerNameA DisableThreadLibraryCalls DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA WriteConsoleA ProcessIdToSessionId UnhandledExceptionFilter InterlockedExchangeAdd LocalAlloc SetCalendarInfoW WritePrivateProfileStringA MoveFileA BuildCommDCBAndTimeoutsW SetConsoleOutputCP GetExitCodeThread HeapLock GetTapeParameters FoldStringA SetSystemTime GlobalWire FindNextFileA EnumDateFormatsA GetModuleHandleA FindFirstChangeNotificationA CreateWaitableTimerW lstrcatW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA CloseHandle DeleteFileW GetCurrentProcessId DebugBreak FindActCtxSectionStringW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter WideCharToMultiByte GetStartupInfoW GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind GetModuleHandleW GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetCurrentProcess IsDebuggerPresent GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW LoadLibraryW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetStdHandle GetConsoleOutputCP CreateFileA DeleteFileA

Sharing

General

Malware Config

Signatures

File Explorer

332629bfb7a2b1c959ceb83078575f2ed4b6d5780e6977d498b448303baa0dd8

kernel32