648b3e85427d8a0db9bb4b166994e7c02733323d4fd3fc1c129695c311ca77e9

General

Target
648b3e85427d8a0db9bb4b166994e7c02733323d4fd3fc1c129695c311ca77e9
Size 822KB
Sample220521-e8d4cadafk
SHA256 648b3e85427d8a0db9bb4b166994e7c02733323d4fd3fc1c129695c311ca77e9
MD5 20fcfc1147939478ac9b6ec21295744d
SHA1 8fca03f042c0fa526bec7133dee8e4c1fd511b03
SHA512 3281b84f1ba3c1c49fc17a2a9336c9a19cd6c89a4bf615c94a88a94309986a1070fa338b37245e178a145cb7f355863be4339ee9200d0d427ee9c95ded2b5b3c
SSDEEP 12288:GjFRbqn07/UUrZWy+F6mRtgT21L50T21JojNgwiuOxerre21n+7kxVpePkwJYbl:wOn07/Uy+FLRtQ+1Jr0qkxVfwJY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

648b3e85427d8a0db9bb4b166994e7c02733323d4fd3fc1c129695c311ca77e9

.exe 822KB

648b3e85427d8a0db9bb4b166994e7c02733323d4fd3fc1c129695c311ca77e9

IMPHASH 2be6f5e335599832250ce10d0c8ed52d
SHA256 648b3e85427d8a0db9bb4b166994e7c02733323d4fd3fc1c129695c311ca77e9
MD5 20fcfc1147939478ac9b6ec21295744d
SHA1 8fca03f042c0fa526bec7133dee8e4c1fd511b03
SHA512 3281b84f1ba3c1c49fc17a2a9336c9a19cd6c89a4bf615c94a88a94309986a1070fa338b37245e178a145cb7f355863be4339ee9200d0d427ee9c95ded2b5b3c
SSDEEP 12288:GjFRbqn07/UUrZWy+F6mRtgT21L50T21JojNgwiuOxerre21n+7kxVpePkwJYbl:wOn07/Uy+FLRtQ+1Jr0qkxVfwJY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43744

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateTimerQueue GetFileSize SetThreadContext GetConsoleAliasesLengthW CopyFileExW GetModuleHandleExA GetConsoleAliasExesA SetComputerNameExA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement SetDefaultCommConfigW GetSystemWindowsDirectoryW GetProfileSectionA SetConsoleScreenBufferSize WriteConsoleInputA GetComputerNameW GetLogicalDrives FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA GetPriorityClass GetPrivateProfileIntA GetSystemDirectoryW AddRefActCtx CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW SetSystemTimeAdjustment FormatMessageW GetVersionExW GetFileAttributesA WritePrivateProfileStructW GetConsoleAliasW GetWriteWatch GetBinaryTypeA TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW GetOverlappedResult GetACP lstrcmpW GetVolumePathNameA lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe DeactivateActCtx GetNamedPipeHandleStateW ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA WriteProfileSectionA SetComputerNameA DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA WriteConsoleA ProcessIdToSessionId UnhandledExceptionFilter InterlockedExchangeAdd LocalAlloc SetCalendarInfoW WritePrivateProfileStringA MoveFileA BuildCommDCBAndTimeoutsW SetConsoleOutputCP GetExitCodeThread HeapLock GetTapeParameters FoldStringA SetSystemTime GlobalWire GetOEMCP FindNextFileA EnumDateFormatsA GetModuleHandleA FindFirstChangeNotificationA CreateWaitableTimerW lstrcatW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA CloseHandle GetVersion DeleteFileW GetCurrentProcessId DebugBreak FindActCtxSectionStringW SetUnhandledExceptionFilter WideCharToMultiByte GetStartupInfoW HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteCriticalSection SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW LoadLibraryW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA DeleteFileA

Sharing

General

Malware Config

Signatures

File Explorer

648b3e85427d8a0db9bb4b166994e7c02733323d4fd3fc1c129695c311ca77e9

kernel32