b18ff2e2a1019eba87c5187ee78bb163c655c27ff5e0b75c5d3c55ca1824b814

General

Target
b18ff2e2a1019eba87c5187ee78bb163c655c27ff5e0b75c5d3c55ca1824b814
Size 823KB
Sample220522-cwjf7aaahn
SHA256 b18ff2e2a1019eba87c5187ee78bb163c655c27ff5e0b75c5d3c55ca1824b814
MD5 0742beddd9a77e1cead1cf361795bfad
SHA1 f7dd89958f8704e3439f2069fcc48e766ae33ba2
SHA512 688bd036577e6fb8198d5b05670e8a1980986be5229140553d75f7f9b637a72672f9f1c72b29116b39e96e9f35023a3e64371a45eb60bde91a3e8dc7fc9c8e87
SSDEEP 24576:2x7VI15EcQEP0A9fdEGPDKbwNt2lfrIK39oSp:2vf5M0A9fdEyKvlfrIFS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b18ff2e2a1019eba87c5187ee78bb163c655c27ff5e0b75c5d3c55ca1824b814

.exe 823KB

b18ff2e2a1019eba87c5187ee78bb163c655c27ff5e0b75c5d3c55ca1824b814

IMPHASH b622727af5b269a1c94420afcaa28e75
SHA256 b18ff2e2a1019eba87c5187ee78bb163c655c27ff5e0b75c5d3c55ca1824b814
MD5 0742beddd9a77e1cead1cf361795bfad
SHA1 f7dd89958f8704e3439f2069fcc48e766ae33ba2
SHA512 688bd036577e6fb8198d5b05670e8a1980986be5229140553d75f7f9b637a72672f9f1c72b29116b39e96e9f35023a3e64371a45eb60bde91a3e8dc7fc9c8e87
SSDEEP 24576:2x7VI15EcQEP0A9fdEGPDKbwNt2lfrIK39oSp:2vf5M0A9fdEyKvlfrIFS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43792

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize SetThreadContext WriteConsoleInputW TryEnterCriticalSection WritePrivateProfileStructA GetConsoleAliasesLengthW CopyFileExW GetModuleHandleExA GetConsoleAliasExesA SetComputerNameExA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource UpdateResourceA InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement ZombifyActCtx SetDefaultCommConfigW GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetProfileSectionA SetConsoleScreenBufferSize WriteConsoleInputA GetComputerNameW GetProcessPriorityBoost GetModuleHandleW GetTickCount GetConsoleAliasesLengthA GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA GetDriveTypeA GetPriorityClass GetPrivateProfileIntA GetSystemDirectoryW CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW SetSystemTimeAdjustment FormatMessageW GetVersionExW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetWriteWatch GetBinaryTypeA WritePrivateProfileSectionW TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW GetOverlappedResult GetACP lstrcmpW GetVolumePathNameA lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe DeactivateActCtx GetNamedPipeHandleStateW ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA CreateTimerQueueTimer WriteProfileSectionA SetComputerNameA DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA WriteConsoleA UnhandledExceptionFilter InterlockedExchangeAdd LocalAlloc SetCalendarInfoW WritePrivateProfileStringA MoveFileA BuildCommDCBAndTimeoutsW SetConsoleOutputCP GetExitCodeThread AddAtomW HeapLock HeapWalk GetTapeParameters FoldStringA SetSystemTime GlobalWire GetPrivateProfileSectionNamesA GetOEMCP FindNextFileA EnumDateFormatsA CreateIoCompletionPort FindFirstChangeNotificationA lstrcatW FreeEnvironmentStringsW FindNextFileW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA CloseHandle GetVersion DeleteFileW GetCurrentProcessId DebugBreak FindActCtxSectionStringW SetUnhandledExceptionFilter WideCharToMultiByte GetStartupInfoW HeapValidate IsBadReadPtr RaiseException Sleep GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteCriticalSection SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW LoadLibraryW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA DeleteFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

b18ff2e2a1019eba87c5187ee78bb163c655c27ff5e0b75c5d3c55ca1824b814

kernel32