fa96876c45a2db66ae1265951e104b5c015c983724feb6ce3e0b92618f49bed4

General

Target
fa96876c45a2db66ae1265951e104b5c015c983724feb6ce3e0b92618f49bed4
Size 290KB
Sample220520-3stqvscchm
SHA256 fa96876c45a2db66ae1265951e104b5c015c983724feb6ce3e0b92618f49bed4
MD5 b441362b424e8370b25607641aaee053
SHA1 aee5638fcf95b8994863dc265d728a3af995a2ee
SHA512 0e19e057853cbdc60884de04b9ccf9e042d5354da1dccbf5ac45a19064582ce6407d0c9788612a209a44c11495b0774da2ce0cd23e65b5af5b5e1c0301a969fd
SSDEEP 3072:yCc99moUMXv84IHesgkSx+oN/7KzTKDyOX6wKamrJPlM8dj09br:yCc9wHRtg9xkNq6wK7dq40
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

fa96876c45a2db66ae1265951e104b5c015c983724feb6ce3e0b92618f49bed4

.exe 290KB

fa96876c45a2db66ae1265951e104b5c015c983724feb6ce3e0b92618f49bed4

IMPHASH 2dd040fcb40c4a9aa772f5e7dcbf6f84
SHA256 fa96876c45a2db66ae1265951e104b5c015c983724feb6ce3e0b92618f49bed4
MD5 b441362b424e8370b25607641aaee053
SHA1 aee5638fcf95b8994863dc265d728a3af995a2ee
SHA512 0e19e057853cbdc60884de04b9ccf9e042d5354da1dccbf5ac45a19064582ce6407d0c9788612a209a44c11495b0774da2ce0cd23e65b5af5b5e1c0301a969fd
SSDEEP 3072:yCc99moUMXv84IHesgkSx+oN/7KzTKDyOX6wKamrJPlM8dj09br:yCc9wHRtg9xkNq6wK7dq40
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39180

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameA SetPriorityClass lstrcpynA HeapAlloc ClearCommError SetConsoleTextAttribute GetCurrentProcess SetMailslotInfo ScrollConsoleScreenBufferW ConnectNamedPipe WideCharToMultiByte GetVolumeInformationA SetVolumeMountPointA EnumSystemCodePagesA FindNextVolumeW GetAtomNameW GetVolumePathNameA GetProcAddress LoadLibraryA LocalAlloc SetConsoleCtrlHandler SetConsoleWindowInfo CreatePipe SetEnvironmentVariableA FindFirstVolumeMountPointA CreateMailslotA ResetWriteWatch AreFileApisANSI CommConfigDialogW lstrcpyA EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar GetStringTypeW GetLastError HeapFree ReadFile GetCommandLineA RaiseException RtlUnwind GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsDebuggerPresent GetProcessHeap ExitProcess GetModuleHandleExW HeapSize SetFilePointerEx GetConsoleMode GetStdHandle GetFileType CloseHandle GetCurrentThreadId GetModuleFileNameA WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP IsValidCodePage GetOEMCP HeapReAlloc LoadLibraryExW SetStdHandle FlushFileBuffers GetConsoleCP OutputDebugStringW WriteConsoleW CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

fa96876c45a2db66ae1265951e104b5c015c983724feb6ce3e0b92618f49bed4

kernel32