ac49d7608b1a57734d349f178364be30ee954e5ddeb10f6d5ebb686d45abb374

General

Target
ac49d7608b1a57734d349f178364be30ee954e5ddeb10f6d5ebb686d45abb374
Size 823KB
Sample220522-e1xkqaaecr
SHA256 ac49d7608b1a57734d349f178364be30ee954e5ddeb10f6d5ebb686d45abb374
MD5 26c91436aacd22e41bd8ac416f492af7
SHA1 c4ed4be67cef1e90a8f4e77c15279d7a230ea2cd
SHA512 6c4aa1c4b1905113917f6f5d1c22eb8843285868dd55d36cc082b3e549737e7bb6bc114ad290399791d68ea7105354eea6244a4cf3f3c2ae5c11c33f4c704a52
SSDEEP 12288:de6dSO0f9J8bpBvAZgIRQliDAdABFzHxdARPsAL3dI1fD+eDZCGXQJ0GMQnn:PL0f9J4qL1DAOFRssg3+1LXqD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ac49d7608b1a57734d349f178364be30ee954e5ddeb10f6d5ebb686d45abb374

.exe 823KB

ac49d7608b1a57734d349f178364be30ee954e5ddeb10f6d5ebb686d45abb374

IMPHASH c5312d1d99deec32097d7de8c9cd7375
SHA256 ac49d7608b1a57734d349f178364be30ee954e5ddeb10f6d5ebb686d45abb374
MD5 26c91436aacd22e41bd8ac416f492af7
SHA1 c4ed4be67cef1e90a8f4e77c15279d7a230ea2cd
SHA512 6c4aa1c4b1905113917f6f5d1c22eb8843285868dd55d36cc082b3e549737e7bb6bc114ad290399791d68ea7105354eea6244a4cf3f3c2ae5c11c33f4c704a52
SSDEEP 12288:de6dSO0f9J8bpBvAZgIRQliDAdABFzHxdARPsAL3dI1fD+eDZCGXQJ0GMQnn:PL0f9J4qL1DAOFRssg3+1LXqD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43792

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize SetThreadContext WriteConsoleInputW TryEnterCriticalSection WritePrivateProfileStructA GetConsoleAliasesLengthW CopyFileExW GetModuleHandleExA GetConsoleAliasExesA SetComputerNameExA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource UpdateResourceA InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement ZombifyActCtx SetDefaultCommConfigW GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetProfileSectionA SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetComputerNameW GetProcessPriorityBoost GetModuleHandleW GetTickCount GetConsoleAliasesLengthA GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA GetDriveTypeA GetPriorityClass GetPrivateProfileIntA GetSystemDirectoryW CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW SetSystemTimeAdjustment FormatMessageW GetVersionExW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetWriteWatch VerifyVersionInfoA GetBinaryTypeA WritePrivateProfileSectionW TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW GetOverlappedResult GetACP lstrcmpW GetVolumePathNameA lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe DeactivateActCtx GetNamedPipeHandleStateW ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA CreateTimerQueueTimer WriteProfileSectionA SetComputerNameA DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA WriteConsoleA UnhandledExceptionFilter InterlockedExchangeAdd LocalAlloc SetCalendarInfoW WritePrivateProfileStringA MoveFileA BuildCommDCBAndTimeoutsW SetConsoleOutputCP GetExitCodeThread AddAtomW HeapLock HeapWalk GetTapeParameters FoldStringA SetSystemTime GlobalWire GetPrivateProfileSectionNamesA GetOEMCP FindNextFileA EnumDateFormatsA CreateIoCompletionPort FindFirstChangeNotificationA lstrcatW FreeEnvironmentStringsW FindNextFileW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA CloseHandle GetVersion DeleteFileW GetCurrentProcessId DebugBreak FindActCtxSectionStringW SetUnhandledExceptionFilter WideCharToMultiByte GetStartupInfoW HeapValidate IsBadReadPtr RaiseException Sleep GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteCriticalSection SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW LoadLibraryW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA DeleteFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

ac49d7608b1a57734d349f178364be30ee954e5ddeb10f6d5ebb686d45abb374

kernel32