049b6a68c223c6d02e6a4163a94edf784b54789a850c7d2d6b3f3d8ea98e1eb3

General

Target
049b6a68c223c6d02e6a4163a94edf784b54789a850c7d2d6b3f3d8ea98e1eb3
Size 823KB
Sample220522-h6e5eacder
SHA256 049b6a68c223c6d02e6a4163a94edf784b54789a850c7d2d6b3f3d8ea98e1eb3
MD5 28f620f7ccbc3789ec05fd2e931a5dd3
SHA1 f22f8fd640b801897c6ac233611d5f71428390da
SHA512 a53e308901dab274c39837463d8bedb4dee1492ae30fe243940216a16e39caa1fdac01d4b760a55e99e25a5e8ebaa1a6c4a64cd83d580f797b1a056970dde873
SSDEEP 24576:q0Z5d391Ug22R/FrDDjS58aU6QiYG+Zw+M4:qEvUg2WhDjSVwJU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

049b6a68c223c6d02e6a4163a94edf784b54789a850c7d2d6b3f3d8ea98e1eb3

.exe 823KB

049b6a68c223c6d02e6a4163a94edf784b54789a850c7d2d6b3f3d8ea98e1eb3

IMPHASH 9bb95bf86a8cf670f8471ed786540749
SHA256 049b6a68c223c6d02e6a4163a94edf784b54789a850c7d2d6b3f3d8ea98e1eb3
MD5 28f620f7ccbc3789ec05fd2e931a5dd3
SHA1 f22f8fd640b801897c6ac233611d5f71428390da
SHA512 a53e308901dab274c39837463d8bedb4dee1492ae30fe243940216a16e39caa1fdac01d4b760a55e99e25a5e8ebaa1a6c4a64cd83d580f797b1a056970dde873
SSDEEP 24576:q0Z5d391Ug22R/FrDDjS58aU6QiYG+Zw+M4:qEvUg2WhDjSVwJU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43936

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize SetThreadContext WriteConsoleInputW TryEnterCriticalSection WritePrivateProfileStructA GetConsoleAliasesLengthW CopyFileExW GetModuleHandleExA GetConsoleAliasExesA SetComputerNameExA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource UpdateResourceA InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement ZombifyActCtx SetDefaultCommConfigW GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetProfileSectionA SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetComputerNameW GetProcessPriorityBoost GetModuleHandleW GetTickCount GetConsoleAliasesLengthA GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA GetDriveTypeA GetPriorityClass GetPrivateProfileIntA GetSystemDirectoryW CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW SetSystemTimeAdjustment GetSystemWindowsDirectoryA FormatMessageW GetVersionExW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetWriteWatch VerifyVersionInfoA GetBinaryTypeA WritePrivateProfileSectionW TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW GetOverlappedResult GetACP lstrcmpW GetVolumePathNameA lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe DeactivateActCtx GetNamedPipeHandleStateW GetConsoleAliasesW ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA CreateTimerQueueTimer WriteProfileSectionA SetComputerNameA VerLanguageNameW GlobalGetAtomNameA DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA WriteConsoleA UnhandledExceptionFilter InterlockedExchangeAdd LocalAlloc SetCalendarInfoW WritePrivateProfileStringA MoveFileA BuildCommDCBAndTimeoutsW SetConsoleOutputCP GetExitCodeThread AddAtomW GetProfileStringA HeapLock GetCommMask HeapWalk GetTapeParameters FoldStringA SetSystemTime GlobalWire GetPrivateProfileSectionNamesA GetOEMCP FindNextFileA EnumDateFormatsA CreateIoCompletionPort FindFirstChangeNotificationA lstrcatW FreeEnvironmentStringsW FindNextFileW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA CloseHandle GetVersion DeleteFileW GetCurrentProcessId MoveFileWithProgressW GetFileInformationByHandle DebugBreak FindActCtxSectionStringW lstrcpyA SetUnhandledExceptionFilter WideCharToMultiByte GetStartupInfoW HeapValidate IsBadReadPtr RaiseException Sleep GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteCriticalSection SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW LoadLibraryW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA DeleteFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

049b6a68c223c6d02e6a4163a94edf784b54789a850c7d2d6b3f3d8ea98e1eb3

kernel32