52b06aeb8067fa04ad905cb4eee8d73559e7a3578e0be3328a0e93a6020fa723

General

Target
52b06aeb8067fa04ad905cb4eee8d73559e7a3578e0be3328a0e93a6020fa723
Size 794KB
Sample220519-trwpdsccgm
SHA256 52b06aeb8067fa04ad905cb4eee8d73559e7a3578e0be3328a0e93a6020fa723
MD5 159dac37e6f6f4087a266551bf3ee9be
SHA1 8fa9bd21b247552b398d190a8a3241654c113dca
SHA512 653e4495fc8ffc23469b3cdee206fbc59d42a13bd1054bf3c8cebaab9bd87d25bbed3aa4eb086cabd51c2493628aa823f1df0703f64c58cc070f9d0e9e8821cd
SSDEEP 12288:g11vlfDagaZbJovTQ8kWp5KAkRR+YJL8Z8Y5nIROcgh10E7Biruj+csp7lfYVFt:KZVa0vTQyyAUe8YGUcix7BirQdspN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

52b06aeb8067fa04ad905cb4eee8d73559e7a3578e0be3328a0e93a6020fa723

.exe 794KB

52b06aeb8067fa04ad905cb4eee8d73559e7a3578e0be3328a0e93a6020fa723

IMPHASH 386b18731524810c1b8ef21817b59d17
SHA256 52b06aeb8067fa04ad905cb4eee8d73559e7a3578e0be3328a0e93a6020fa723
MD5 159dac37e6f6f4087a266551bf3ee9be
SHA1 8fa9bd21b247552b398d190a8a3241654c113dca
SHA512 653e4495fc8ffc23469b3cdee206fbc59d42a13bd1054bf3c8cebaab9bd87d25bbed3aa4eb086cabd51c2493628aa823f1df0703f64c58cc070f9d0e9e8821cd
SSDEEP 12288:g11vlfDagaZbJovTQ8kWp5KAkRR+YJL8Z8Y5nIROcgh10E7Biruj+csp7lfYVFt:KZVa0vTQyyAUe8YGUcix7BirQdspN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42688

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateTimerQueue GetFileSize SetThreadContext GetConsoleAliasesLengthW CopyFileExW GetModuleHandleExA GetConsoleAliasExesA SetComputerNameExA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement SetDefaultCommConfigW GetSystemWindowsDirectoryW GetProfileSectionA SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetComputerNameW GetLogicalDrives FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA GetPriorityClass GetPrivateProfileIntA GetSystemDirectoryW AddRefActCtx CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW SetSystemTimeAdjustment FormatMessageW GetVersionExW GetFileAttributesA WritePrivateProfileStructW GetConsoleAliasW GetWriteWatch GetBinaryTypeA TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW GetOverlappedResult GetACP lstrcmpW GetVolumePathNameA lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe DeactivateActCtx GetNamedPipeHandleStateW GlobalUnfix ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA WriteProfileSectionA SetComputerNameA DisableThreadLibraryCalls DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA WriteConsoleA ProcessIdToSessionId UnhandledExceptionFilter InterlockedExchangeAdd LocalAlloc SetCalendarInfoW WritePrivateProfileStringA MoveFileA BuildCommDCBAndTimeoutsW SetConsoleOutputCP GetExitCodeThread HeapLock GetTapeParameters FoldStringA SetSystemTime GlobalWire FindNextFileA EnumDateFormatsA GetModuleHandleA FindFirstChangeNotificationA CreateWaitableTimerW lstrcatW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA CloseHandle DeleteFileW GetCurrentProcessId DebugBreak FindActCtxSectionStringW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter WideCharToMultiByte GetStartupInfoW GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind GetModuleHandleW GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetCurrentProcess IsDebuggerPresent GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW LoadLibraryW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetStdHandle GetConsoleOutputCP CreateFileA DeleteFileA

Sharing

General

Malware Config

Signatures

File Explorer

52b06aeb8067fa04ad905cb4eee8d73559e7a3578e0be3328a0e93a6020fa723

kernel32