70a6059ee83d29cfd3dec71f9dabd48d9e0b42c320de2e0e9c0d8034c493daf4

General

Target
70a6059ee83d29cfd3dec71f9dabd48d9e0b42c320de2e0e9c0d8034c493daf4
Size 823KB
Sample220522-nnptsadcar
SHA256 70a6059ee83d29cfd3dec71f9dabd48d9e0b42c320de2e0e9c0d8034c493daf4
MD5 77613f7c9b09ba932c7dbffd76eac3e3
SHA1 e9af58233a3c848f200a59b58e043d5c39798f4c
SHA512 c07efe3961c48a6d0293c2ef4285346961c0526b0aac1346d7192129171b6c7f23938acbbd43a02f68a523bcc6d4f3dbfbfa5a529f0096eb7b547a1e5cd93c48
SSDEEP 12288:5IPD+AZu/VE7XZ/LkvDUtb1jNjdMkWNQAhd9iw/ODa/WaVuywhUzDQ7+QGZJ:t+u/VeMD2hbMkwP9iZapVuThAg6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

70a6059ee83d29cfd3dec71f9dabd48d9e0b42c320de2e0e9c0d8034c493daf4

.exe 823KB

70a6059ee83d29cfd3dec71f9dabd48d9e0b42c320de2e0e9c0d8034c493daf4

IMPHASH 0e837cd9eccfae6a38651c08666c9fa2
SHA256 70a6059ee83d29cfd3dec71f9dabd48d9e0b42c320de2e0e9c0d8034c493daf4
MD5 77613f7c9b09ba932c7dbffd76eac3e3
SHA1 e9af58233a3c848f200a59b58e043d5c39798f4c
SHA512 c07efe3961c48a6d0293c2ef4285346961c0526b0aac1346d7192129171b6c7f23938acbbd43a02f68a523bcc6d4f3dbfbfa5a529f0096eb7b547a1e5cd93c48
SSDEEP 12288:5IPD+AZu/VE7XZ/LkvDUtb1jNjdMkWNQAhd9iw/ODa/WaVuywhUzDQ7+QGZJ:t+u/VeMD2hbMkwP9iZapVuThAg6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43904

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize lstrcmpA WriteConsoleInputW TryEnterCriticalSection WritePrivateProfileStructA GetConsoleAliasesLengthW CopyFileExW GetModuleHandleExA GetConsoleAliasExesA SetComputerNameExA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource UpdateResourceA InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement ZombifyActCtx SetDefaultCommConfigW GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetProfileSectionA SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetComputerNameW GetModuleHandleW GetTickCount VirtualFree GetConsoleAliasesLengthA GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA SetProcessPriorityBoost GetDriveTypeA GetPriorityClass GetVolumePathNameW GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW SetSystemTimeAdjustment GetSystemWindowsDirectoryA FormatMessageW GetVersionExW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetWriteWatch VerifyVersionInfoA GetBinaryTypeA WritePrivateProfileSectionW TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW GetOverlappedResult GetACP lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe DeactivateActCtx GetNamedPipeHandleStateW GetConsoleAliasesW ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA CreateTimerQueueTimer WriteProfileSectionA SetComputerNameA VerLanguageNameW GlobalGetAtomNameA DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA WriteConsoleA UnhandledExceptionFilter InterlockedExchangeAdd SetCalendarInfoW WritePrivateProfileStringA MoveFileA SetConsoleOutputCP GetExitCodeThread AddAtomW GetProfileStringA HeapLock GetCommMask HeapWalk GetTapeParameters FoldStringA SetSystemTime GlobalWire GetPrivateProfileSectionNamesA GetOEMCP FindNextFileA EnumDateFormatsA CreateIoCompletionPort FindFirstChangeNotificationA lstrcatW FreeEnvironmentStringsW FindNextFileW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA CloseHandle GetVersion DeleteFileW GetCurrentProcessId MoveFileWithProgressW GetFileInformationByHandle DebugBreak FindActCtxSectionStringW SuspendThread lstrcpyA SetUnhandledExceptionFilter WideCharToMultiByte GetStartupInfoW HeapValidate IsBadReadPtr RaiseException Sleep GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteCriticalSection SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW LoadLibraryW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA DeleteFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

70a6059ee83d29cfd3dec71f9dabd48d9e0b42c320de2e0e9c0d8034c493daf4

kernel32