da59ff7be9d067e9528370bc27bdd156d87eebfbdd5be2240318c536fcc9fc18

General

Target
da59ff7be9d067e9528370bc27bdd156d87eebfbdd5be2240318c536fcc9fc18
Size 823KB
Sample220521-snar3sdbcj
SHA256 da59ff7be9d067e9528370bc27bdd156d87eebfbdd5be2240318c536fcc9fc18
MD5 a12f4d10ab844aa6b2b0e1f3810208e0
SHA1 f8a0d95c5aaf14dfedc1fc165e0ea69e298f7f1b
SHA512 4c6f8191a8bf5d6a7385eed59c67641828655f5478185502ee37d3f1d6887aee6a15644bd2e63bc61b205857d3cb059de666dd0e6d8bf13104dc7abd6d33f645
SSDEEP 24576:ANdEzfR/4lGfowvmu/Tj7Jr0CCvUC9otAp3:AsxlJ9lQtMCKA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

da59ff7be9d067e9528370bc27bdd156d87eebfbdd5be2240318c536fcc9fc18

.exe 823KB

da59ff7be9d067e9528370bc27bdd156d87eebfbdd5be2240318c536fcc9fc18

IMPHASH d4e9b99e197af343c1eb437e130d2a7e
SHA256 da59ff7be9d067e9528370bc27bdd156d87eebfbdd5be2240318c536fcc9fc18
MD5 a12f4d10ab844aa6b2b0e1f3810208e0
SHA1 f8a0d95c5aaf14dfedc1fc165e0ea69e298f7f1b
SHA512 4c6f8191a8bf5d6a7385eed59c67641828655f5478185502ee37d3f1d6887aee6a15644bd2e63bc61b205857d3cb059de666dd0e6d8bf13104dc7abd6d33f645
SSDEEP 24576:ANdEzfR/4lGfowvmu/Tj7Jr0CCvUC9otAp3:AsxlJ9lQtMCKA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43760

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize SetThreadContext GetConsoleAliasesLengthW CopyFileExW GetModuleHandleExA GetConsoleAliasExesA SetComputerNameExA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement SetDefaultCommConfigW GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetProfileSectionA SetConsoleScreenBufferSize WriteConsoleInputA GetComputerNameW GetLogicalDrives FreeEnvironmentStringsA GetProcessPriorityBoost GetModuleHandleW GetTickCount GetConsoleAliasesLengthA GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA GetDriveTypeA GetPriorityClass GetPrivateProfileIntA GetSystemDirectoryW AddRefActCtx CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW SetSystemTimeAdjustment FormatMessageW GetVersionExW GetFileAttributesA GetConsoleAliasW GetWriteWatch GetBinaryTypeA TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW GetOverlappedResult GetACP lstrcmpW GetVolumePathNameA lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe DeactivateActCtx GetNamedPipeHandleStateW ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA CreateTimerQueueTimer WriteProfileSectionA SetComputerNameA DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA WriteConsoleA ProcessIdToSessionId UnhandledExceptionFilter InterlockedExchangeAdd LocalAlloc SetCalendarInfoW WritePrivateProfileStringA MoveFileA BuildCommDCBAndTimeoutsW SetConsoleOutputCP GetExitCodeThread HeapLock GetTapeParameters FoldStringA SetSystemTime GlobalWire GetOEMCP FindNextFileA EnumDateFormatsA CreateIoCompletionPort FindFirstChangeNotificationA CreateWaitableTimerW lstrcatW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA CloseHandle GetVersion DeleteFileW GetCurrentProcessId DebugBreak FindActCtxSectionStringW SetUnhandledExceptionFilter WideCharToMultiByte GetStartupInfoW HeapValidate IsBadReadPtr RaiseException Sleep GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteCriticalSection SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW LoadLibraryW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA DeleteFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

da59ff7be9d067e9528370bc27bdd156d87eebfbdd5be2240318c536fcc9fc18

kernel32