6ffa4cfa0466047e7a320dd9aa57417d14dd9a185306fdecc9a79352d88a682f

General

Target
6ffa4cfa0466047e7a320dd9aa57417d14dd9a185306fdecc9a79352d88a682f
Size 446KB
Sample220520-ee3vlsbdap
SHA256 6ffa4cfa0466047e7a320dd9aa57417d14dd9a185306fdecc9a79352d88a682f
MD5 a65312552f22156249bac2ddfc8a9811
SHA1 216505bd8e3448436f6fa202e64c0046c3ee4f60
SHA512 12a69f8e3940724ad203352293c6e8e257305fa6dfa04e961d292be3734233c9c934dc7f0781a93b7c4847709e26cb199c2f24673d22dafdf22ce9cf2986fb4b
SSDEEP 6144:t1/ZyZGe5qC9axTeJNZ/AuVEpsm8uchgwgKFV0HgdLtF23JQUWjlRdvJ:tZt3fiNZI6m4330HQf24dvJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6ffa4cfa0466047e7a320dd9aa57417d14dd9a185306fdecc9a79352d88a682f

.dll 446KB

6ffa4cfa0466047e7a320dd9aa57417d14dd9a185306fdecc9a79352d88a682f

IMPHASH 4dbdbf8a52661c078b4a242b754db3bf
SHA256 6ffa4cfa0466047e7a320dd9aa57417d14dd9a185306fdecc9a79352d88a682f
MD5 a65312552f22156249bac2ddfc8a9811
SHA1 216505bd8e3448436f6fa202e64c0046c3ee4f60
SHA512 12a69f8e3940724ad203352293c6e8e257305fa6dfa04e961d292be3734233c9c934dc7f0781a93b7c4847709e26cb199c2f24673d22dafdf22ce9cf2986fb4b
SSDEEP 6144:t1/ZyZGe5qC9axTeJNZ/AuVEpsm8uchgwgKFV0HgdLtF23JQUWjlRdvJ:tZt3fiNZI6m4330HQf24dvJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

33829

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapWalk Sleep GetTempPathA CreateFileA CloseHandle GetTimeFormatA GetLocalTime HeapCompact VirtualProtectEx GetCurrentProcessId GetFileTime HeapAlloc RaiseException CreateFileW DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetLastError GetModuleFileNameW InterlockedFlushSList InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStringTypeW GetACP LCMapStringW IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap GetStdHandle GetFileType GetCommandLineA GetCommandLineW HeapSize HeapReAlloc SetStdHandle WriteFile FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW HeapFree

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

advapi32

SystemFunction036

Sharing

General

Malware Config

Signatures

File Explorer

6ffa4cfa0466047e7a320dd9aa57417d14dd9a185306fdecc9a79352d88a682f

kernel32

version

advapi32