de14fb91077dc46661df2d71589d51ba5ce02a7b0fae157196cfd0054d4472e5

General

Target
de14fb91077dc46661df2d71589d51ba5ce02a7b0fae157196cfd0054d4472e5
Size 800KB
Sample220523-eyft7afafn
SHA256 de14fb91077dc46661df2d71589d51ba5ce02a7b0fae157196cfd0054d4472e5
MD5 f102c8d9fdbcb234426b7065c6ea73a5
SHA1 97f61401cb37b736203085bbe1fb56cd02491ec8
SHA512 6d5c928ba4e5c6cb554fa2734b9146ba8cd2d8d578e4c3f93dac52db653ded7a55e981597195c4040e606cfe786a68bd4c951b3bb7fc6cc359e72c99edaeffd2
SSDEEP 12288:EhCOzhXjiTihhVc2NkhBifxjGqniNB77bXaR6ysmhajAzRyan0:2FjiMTc2NkEZ6qu7fqR6cajAzgan
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

de14fb91077dc46661df2d71589d51ba5ce02a7b0fae157196cfd0054d4472e5

.exe 800KB

de14fb91077dc46661df2d71589d51ba5ce02a7b0fae157196cfd0054d4472e5

IMPHASH c50819025de770cf1ac6029ef750ef1d
SHA256 de14fb91077dc46661df2d71589d51ba5ce02a7b0fae157196cfd0054d4472e5
MD5 f102c8d9fdbcb234426b7065c6ea73a5
SHA1 97f61401cb37b736203085bbe1fb56cd02491ec8
SHA512 6d5c928ba4e5c6cb554fa2734b9146ba8cd2d8d578e4c3f93dac52db653ded7a55e981597195c4040e606cfe786a68bd4c951b3bb7fc6cc359e72c99edaeffd2
SSDEEP 12288:EhCOzhXjiTihhVc2NkhBifxjGqniNB77bXaR6ysmhajAzRyan0:2FjiMTc2NkEZ6qu7fqR6cajAzgan
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41168

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize lstrcmpA WriteConsoleInputW TryEnterCriticalSection WritePrivateProfileStructA GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA SetComputerNameExA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource UpdateResourceA InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement ZombifyActCtx WritePrivateProfileSectionA SetDefaultCommConfigW GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetProfileSectionA SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetComputerNameW GetModuleHandleW GetTickCount VirtualFree GetConsoleAliasesLengthA GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA SetProcessPriorityBoost GetDriveTypeA GetPriorityClass GetVolumePathNameW GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW SetSystemTimeAdjustment GetSystemWindowsDirectoryA FormatMessageW GetVersionExW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetWriteWatch VerifyVersionInfoA WriteConsoleW GetBinaryTypeA TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW GetOverlappedResult GetACP lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe DeactivateActCtx GetNamedPipeHandleStateW GetConsoleAliasesW ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA CreateTimerQueueTimer WriteProfileSectionA SetComputerNameA VerLanguageNameW GlobalGetAtomNameA DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA UnhandledExceptionFilter InterlockedExchangeAdd SetCalendarInfoW WritePrivateProfileStringA MoveFileA SetConsoleOutputCP GetExitCodeThread AddAtomW GetProfileStringA HeapLock GetCommMask HeapWalk GetTapeParameters FoldStringA SetSystemTime GlobalWire GetModuleFileNameA GetPrivateProfileSectionNamesA GetOEMCP FindNextFileA EnumDateFormatsA CreateIoCompletionPort FindFirstChangeNotificationA lstrcatW FreeEnvironmentStringsW FindNextFileW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA GetVersion DeleteFileW GetCurrentProcessId MoveFileWithProgressW GetFileInformationByHandle DebugBreak FindActCtxSectionStringW SuspendThread lstrcpyA SetUnhandledExceptionFilter WideCharToMultiByte GetStartupInfoW HeapValidate IsBadReadPtr RaiseException Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteCriticalSection SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode OutputDebugStringW LoadLibraryW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle DeleteFileA

Name

.text

Size

166KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

585KB

Virtual Size

841KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tog

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pijuxur

Size

512B

Virtual Size

75B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.jeg

Size

512B

Virtual Size

34B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

de14fb91077dc46661df2d71589d51ba5ce02a7b0fae157196cfd0054d4472e5

kernel32