cfb9d01f2bdec78aca212cea7d45c3c6ef3d060f9b23ed71534e2728f9c9500f

General

Target
cfb9d01f2bdec78aca212cea7d45c3c6ef3d060f9b23ed71534e2728f9c9500f
Size 221KB
Sample220520-1ejydsdgg2
SHA256 cfb9d01f2bdec78aca212cea7d45c3c6ef3d060f9b23ed71534e2728f9c9500f
MD5 3b96b4a5a39a69c4db3a0df7629d3e86
SHA1 0804a8e417c6de3c20d7745432fc84102423227f
SHA512 b88e239fd1c1f88445537bce3245a567a24950aebcd494fd23f23118e1e4e7597af7d8fef005f4983381f17ea6fbae62ec6142ee245da532571ea9c2630a4f68
SSDEEP 3072:Kelx4Sk5vnlqWlqVLFtMK4kXu3UGUcdV7UgiMEvnnXv53JLcA583HfBNnhk5AN3:rlW5rle4kXQfiJfvjLci83HZ/9N
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

cfb9d01f2bdec78aca212cea7d45c3c6ef3d060f9b23ed71534e2728f9c9500f

.exe 221KB

cfb9d01f2bdec78aca212cea7d45c3c6ef3d060f9b23ed71534e2728f9c9500f

IMPHASH 854add2f7f275a55bed7cc6c6c2b5b8a
SHA256 cfb9d01f2bdec78aca212cea7d45c3c6ef3d060f9b23ed71534e2728f9c9500f
MD5 3b96b4a5a39a69c4db3a0df7629d3e86
SHA1 0804a8e417c6de3c20d7745432fc84102423227f
SHA512 b88e239fd1c1f88445537bce3245a567a24950aebcd494fd23f23118e1e4e7597af7d8fef005f4983381f17ea6fbae62ec6142ee245da532571ea9c2630a4f68
SSDEEP 3072:Kelx4Sk5vnlqWlqVLFtMK4kXu3UGUcdV7UgiMEvnnXv53JLcA583HfBNnhk5AN3:rlW5rle4kXQfiJfvjLci83HZ/9N
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

105798

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GetFileAttributesW VirtualProtect LocalAlloc FlushConsoleInputBuffer GetCPInfo SetConsoleMode GetModuleHandleA CreateFileA WriteConsoleW GetProcAddress GetDiskFreeSpaceExA EnumDateFormatsW GetVolumeInformationA lstrlenW MapUserPhysicalPages GetConsoleOutputCP WriteConsoleA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetACP GetOEMCP IsValidCodePage HeapSize SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW

user32

DefFrameProcA ScrollWindow GetMenuInfo LoadStringW RegisterDeviceNotificationW

advapi32

AdjustTokenPrivileges RegOpenKeyExW SetSecurityDescriptorSacl GetOldestEventLogRecord ObjectPrivilegeAuditAlarmA

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

cfb9d01f2bdec78aca212cea7d45c3c6ef3d060f9b23ed71534e2728f9c9500f

kernel32

user32

advapi32

msimg32