28c5a90535ea4107d1d16bb0bc037bbc2585405a32c1d56046a3332c9c446db3

General

Target
28c5a90535ea4107d1d16bb0bc037bbc2585405a32c1d56046a3332c9c446db3
Size 823KB
Sample220521-kak2wsbcc5
SHA256 28c5a90535ea4107d1d16bb0bc037bbc2585405a32c1d56046a3332c9c446db3
MD5 70fdbe383912394b39ea153e9adf7d77
SHA1 1fe139f95c8df649bbdad3163b9c9721cf617d9e
SHA512 f4dafe41ca9d2bc0c9e36d3645bd26c209b9bd9a8e962a8d31802d8273927815dfb029a1d839896df97d5556f91ce4c5df993721d6b658e2a38793ed22ba940a
SSDEEP 12288:NOEQEmvN0YdnjDsWwc/TLp4W66JqCxBLFYlBdEBIvyfuElRXcnwgMfsKPKvZFv/z:QlvN0oVWuTxBLF6BqavAuEcnMfseMz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

28c5a90535ea4107d1d16bb0bc037bbc2585405a32c1d56046a3332c9c446db3

.exe 823KB

28c5a90535ea4107d1d16bb0bc037bbc2585405a32c1d56046a3332c9c446db3

IMPHASH 1dd726520e2e2364fd0217d0df0f77fb
SHA256 28c5a90535ea4107d1d16bb0bc037bbc2585405a32c1d56046a3332c9c446db3
MD5 70fdbe383912394b39ea153e9adf7d77
SHA1 1fe139f95c8df649bbdad3163b9c9721cf617d9e
SHA512 f4dafe41ca9d2bc0c9e36d3645bd26c209b9bd9a8e962a8d31802d8273927815dfb029a1d839896df97d5556f91ce4c5df993721d6b658e2a38793ed22ba940a
SSDEEP 12288:NOEQEmvN0YdnjDsWwc/TLp4W66JqCxBLFYlBdEBIvyfuElRXcnwgMfsKPKvZFv/z:QlvN0oVWuTxBLF6BqavAuEcnMfseMz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43760

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateTimerQueue GetFileSize SetThreadContext GetConsoleAliasesLengthW CopyFileExW GetModuleHandleExA GetConsoleAliasExesA SetComputerNameExA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement SetDefaultCommConfigW GetSystemWindowsDirectoryW GetProfileSectionA SetConsoleScreenBufferSize WriteConsoleInputA GetComputerNameW GetLogicalDrives FreeEnvironmentStringsA GetProcessPriorityBoost GetModuleHandleW GetTickCount GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA GetPriorityClass GetPrivateProfileIntA GetSystemDirectoryW AddRefActCtx CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW SetSystemTimeAdjustment FormatMessageW GetVersionExW GetFileAttributesA WritePrivateProfileStructW GetConsoleAliasW GetWriteWatch GetBinaryTypeA TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW GetOverlappedResult GetACP lstrcmpW GetVolumePathNameA lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe DeactivateActCtx GetNamedPipeHandleStateW ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA WriteProfileSectionA SetComputerNameA DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA WriteConsoleA ProcessIdToSessionId UnhandledExceptionFilter InterlockedExchangeAdd LocalAlloc SetCalendarInfoW WritePrivateProfileStringA MoveFileA BuildCommDCBAndTimeoutsW SetConsoleOutputCP GetExitCodeThread HeapLock GetTapeParameters FoldStringA SetSystemTime GlobalWire GetOEMCP FindNextFileA EnumDateFormatsA FindFirstChangeNotificationA CreateWaitableTimerW lstrcatW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA CloseHandle GetVersion DeleteFileW GetCurrentProcessId DebugBreak FindActCtxSectionStringW SetUnhandledExceptionFilter WideCharToMultiByte GetStartupInfoW HeapValidate IsBadReadPtr RaiseException Sleep GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteCriticalSection SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW LoadLibraryW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA DeleteFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

28c5a90535ea4107d1d16bb0bc037bbc2585405a32c1d56046a3332c9c446db3

kernel32