66224ebfb94c38876a82f709e4895bc6fe459ab7bcb12bd01f94cca6fc84063b

General

Target
66224ebfb94c38876a82f709e4895bc6fe459ab7bcb12bd01f94cca6fc84063b
Size 825KB
Sample220519-yw71faeccn
SHA256 66224ebfb94c38876a82f709e4895bc6fe459ab7bcb12bd01f94cca6fc84063b
MD5 4bb9de334fc55d10ca24e6ac8185e2c8
SHA1 3c88103fa37c2fd1cd2d6fbdbfa205ff29099296
SHA512 5701ed6fd64305ab56836b20855d9bb199101bded05938e1fd5179d32ccdcdbbe150121c5b525cd9ebc3b0948a58af010d428308544d9e0abf61bd599d33b203
SSDEEP 12288:ydzrjiQuppJ9/6pOngL6DeUZZCwAL70aIgcUVwaPViImhpYSLJdY+riU5VGbp/KT:Wtuj/6IvenwW0LUCUVuRdUUPvSgs
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

66224ebfb94c38876a82f709e4895bc6fe459ab7bcb12bd01f94cca6fc84063b

.exe 825KB

66224ebfb94c38876a82f709e4895bc6fe459ab7bcb12bd01f94cca6fc84063b

IMPHASH f7da2ed1fd8f9e422e6ab8eba141b012
SHA256 66224ebfb94c38876a82f709e4895bc6fe459ab7bcb12bd01f94cca6fc84063b
MD5 4bb9de334fc55d10ca24e6ac8185e2c8
SHA1 3c88103fa37c2fd1cd2d6fbdbfa205ff29099296
SHA512 5701ed6fd64305ab56836b20855d9bb199101bded05938e1fd5179d32ccdcdbbe150121c5b525cd9ebc3b0948a58af010d428308544d9e0abf61bd599d33b203
SSDEEP 12288:ydzrjiQuppJ9/6pOngL6DeUZZCwAL70aIgcUVwaPViImhpYSLJdY+riU5VGbp/KT:Wtuj/6IvenwW0LUCUVuRdUUPvSgs
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45408

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateTimerQueue GetFileSize SetThreadContext GetConsoleAliasesLengthW CopyFileExW GetModuleHandleExA GetConsoleAliasExesA SetComputerNameExA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement SetDefaultCommConfigW GetSystemWindowsDirectoryW GetProfileSectionA SetConsoleScreenBufferSize WriteConsoleInputA GetComputerNameW GetLogicalDrives FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA GetPriorityClass GetPrivateProfileIntA GetSystemDirectoryW AddRefActCtx CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW SetSystemTimeAdjustment FormatMessageW GetVersionExW GetFileAttributesA WritePrivateProfileStructW GetConsoleAliasW GetWriteWatch GetBinaryTypeA TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW GetOverlappedResult GetACP lstrcmpW GetVolumePathNameA lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe DeactivateActCtx GetNamedPipeHandleStateW ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA WriteProfileSectionA SetComputerNameA DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA WriteConsoleA ProcessIdToSessionId UnhandledExceptionFilter InterlockedExchangeAdd LocalAlloc SetCalendarInfoW WritePrivateProfileStringA MoveFileA BuildCommDCBAndTimeoutsW SetConsoleOutputCP GetExitCodeThread HeapLock GetTapeParameters FoldStringA SetSystemTime GlobalWire GetOEMCP FindNextFileA EnumDateFormatsA GetModuleHandleA FindFirstChangeNotificationA CreateWaitableTimerW lstrcatW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA CloseHandle GetVersion DeleteFileW GetCurrentProcessId DebugBreak FindActCtxSectionStringW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter WideCharToMultiByte GetStartupInfoW GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind GetModuleHandleW GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetCurrentProcess IsDebuggerPresent GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW LoadLibraryW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetStdHandle GetConsoleOutputCP CreateFileA DeleteFileA

Sharing

General

Malware Config

Signatures

File Explorer

66224ebfb94c38876a82f709e4895bc6fe459ab7bcb12bd01f94cca6fc84063b

kernel32