dc14fc4cb1da17b31231aa731a8f03a5d3950d60b4d6a9e22b73253fe0bacedd

General

Target
dc14fc4cb1da17b31231aa731a8f03a5d3950d60b4d6a9e22b73253fe0bacedd
Size 801KB
Sample220520-e4hwqscgcl
SHA256 dc14fc4cb1da17b31231aa731a8f03a5d3950d60b4d6a9e22b73253fe0bacedd
MD5 a079c7e241613b598ded4118e3b2ffba
SHA1 6491a1129bacc3d6e1f41dea61142bb9fb74d318
SHA512 d54ce0b9d5f2a11b4ff5c07f10d16c4156e0c2aa43f5c51cf694d832148dac04d589b6711b1766d352691ac781db744b6c5b29d3f5673812659c24c1c6110cb9
SSDEEP 24576:UQ6fWbSrSDVlqcRes8aWGWBzAXNOiQTwM:UQoCSrSBlq8VWGaziQTw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

dc14fc4cb1da17b31231aa731a8f03a5d3950d60b4d6a9e22b73253fe0bacedd

.exe 801KB

dc14fc4cb1da17b31231aa731a8f03a5d3950d60b4d6a9e22b73253fe0bacedd

IMPHASH 255fa5e0fa2ef6a4b9528b73ce4505c8
SHA256 dc14fc4cb1da17b31231aa731a8f03a5d3950d60b4d6a9e22b73253fe0bacedd
MD5 a079c7e241613b598ded4118e3b2ffba
SHA1 6491a1129bacc3d6e1f41dea61142bb9fb74d318
SHA512 d54ce0b9d5f2a11b4ff5c07f10d16c4156e0c2aa43f5c51cf694d832148dac04d589b6711b1766d352691ac781db744b6c5b29d3f5673812659c24c1c6110cb9
SSDEEP 24576:UQ6fWbSrSDVlqcRes8aWGWBzAXNOiQTwM:UQoCSrSBlq8VWGaziQTw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29329

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary MoveFileExW SetDefaultCommConfigW GetUserDefaultLCID EnumCalendarInfoExW GetConsoleAliasesLengthA GetUserDefaultLangID GetEnvironmentStrings LoadLibraryW SetConsoleMode GetGeoInfoA GetSystemDirectoryA GetBinaryTypeW GetLastError SetLastError GetProcAddress GetConsoleAliasesLengthW RemoveDirectoryA GetDiskFreeSpaceW FindClose GetAtomNameA LoadLibraryA GetProcessId InterlockedExchangeAdd LocalAlloc OpenJobObjectW GetCommTimeouts OpenEventW GetShortPathNameW GetCurrentProcessId LCMapStringW CreateFileW RaiseException FindResourceA HeapSize FlushFileBuffers MultiByteToWideChar HeapAlloc HeapReAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId HeapFree IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection WideCharToMultiByte GetConsoleCP GetConsoleMode SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep GetStringTypeW RtlUnwind ReadFile WriteConsoleW SetStdHandle CloseHandle

user32

ClientToScreen

advapi32

CreateRestrictedToken

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

dc14fc4cb1da17b31231aa731a8f03a5d3950d60b4d6a9e22b73253fe0bacedd

kernel32

user32

advapi32

winhttp