2ba6533ebfb9ad813449dd07e4e0d8f9bfd2356166ca9f7d3f52b2c90d5ce65b

General

Target
2ba6533ebfb9ad813449dd07e4e0d8f9bfd2356166ca9f7d3f52b2c90d5ce65b
Size 799KB
Sample220522-zy62laedal
SHA256 2ba6533ebfb9ad813449dd07e4e0d8f9bfd2356166ca9f7d3f52b2c90d5ce65b
MD5 899a2a413c432cc2bb3c9107debe045f
SHA1 c1f6d617ce7e4312493506fa870f67e02c043ea8
SHA512 4088563c333f475bf67037ba500ce528f5958e86a5c0adc6a271e18c5c01e02800a988442b2db8f8a232e035eee26dafd259fe7778e3eba5ff57c224bc7c136e
SSDEEP 12288:G6NZ2pNpfh3u+9qa+NAixq514K/4+CSjYwLBCHlIgjzEXtWAtR2L/naX:rcNZI+ka1ixq5vtt6njgTuL/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2ba6533ebfb9ad813449dd07e4e0d8f9bfd2356166ca9f7d3f52b2c90d5ce65b

.exe 799KB

2ba6533ebfb9ad813449dd07e4e0d8f9bfd2356166ca9f7d3f52b2c90d5ce65b

IMPHASH c4c9f4830a1c7b87925732f4398db2ef
SHA256 2ba6533ebfb9ad813449dd07e4e0d8f9bfd2356166ca9f7d3f52b2c90d5ce65b
MD5 899a2a413c432cc2bb3c9107debe045f
SHA1 c1f6d617ce7e4312493506fa870f67e02c043ea8
SHA512 4088563c333f475bf67037ba500ce528f5958e86a5c0adc6a271e18c5c01e02800a988442b2db8f8a232e035eee26dafd259fe7778e3eba5ff57c224bc7c136e
SSDEEP 12288:G6NZ2pNpfh3u+9qa+NAixq514K/4+CSjYwLBCHlIgjzEXtWAtR2L/naX:rcNZI+ka1ixq5vtt6njgTuL/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41168

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize lstrcmpA WriteConsoleInputW TryEnterCriticalSection WritePrivateProfileStructA GetConsoleAliasesLengthW CopyFileExW GetModuleHandleExA GetConsoleAliasExesA SetComputerNameExA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource UpdateResourceA InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement ZombifyActCtx SetDefaultCommConfigW GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetProfileSectionA SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetComputerNameW GetModuleHandleW GetTickCount VirtualFree GetConsoleAliasesLengthA GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA SetProcessPriorityBoost GetDriveTypeA GetPriorityClass GetVolumePathNameW GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW SetSystemTimeAdjustment GetSystemWindowsDirectoryA FormatMessageW GetVersionExW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetWriteWatch VerifyVersionInfoA WriteConsoleW GetBinaryTypeA WritePrivateProfileSectionW TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW GetOverlappedResult GetACP lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe DeactivateActCtx GetNamedPipeHandleStateW GetConsoleAliasesW ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA CreateTimerQueueTimer WriteProfileSectionA SetComputerNameA VerLanguageNameW GlobalGetAtomNameA DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA UnhandledExceptionFilter InterlockedExchangeAdd SetCalendarInfoW WritePrivateProfileStringA MoveFileA SetConsoleOutputCP GetExitCodeThread AddAtomW GetProfileStringA HeapLock GetCommMask HeapWalk GetTapeParameters FoldStringA SetSystemTime GlobalWire GetPrivateProfileSectionNamesA GetOEMCP FindNextFileA EnumDateFormatsA CreateIoCompletionPort FindFirstChangeNotificationA lstrcatW FreeEnvironmentStringsW FindNextFileW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA GetVersion DeleteFileW GetCurrentProcessId MoveFileWithProgressW GetFileInformationByHandle DebugBreak FindActCtxSectionStringW SuspendThread lstrcpyA SetUnhandledExceptionFilter WideCharToMultiByte GetStartupInfoW HeapValidate IsBadReadPtr RaiseException Sleep GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteCriticalSection SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode OutputDebugStringW LoadLibraryW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle DeleteFileA

Sharing

General

Malware Config

Signatures

File Explorer

2ba6533ebfb9ad813449dd07e4e0d8f9bfd2356166ca9f7d3f52b2c90d5ce65b

kernel32