86ff58151ec691f3072cdf6226c7b356537022a2d1b7a73e63aeee639346933c

General

Target
86ff58151ec691f3072cdf6226c7b356537022a2d1b7a73e63aeee639346933c
Size 215KB
Sample220524-rtbqwsecg4
SHA256 86ff58151ec691f3072cdf6226c7b356537022a2d1b7a73e63aeee639346933c
MD5 e3149d988edfdabe27e8a4902a784d2a
SHA1 ab259a9c37c60698a2544297671b39235df1aaae
SHA512 865e5f67cab098860ac2598831c564691e90966d015080279eac1fac5ee4c73cc85975498da61833a74f0ea03020418c354aa7b96312ca53eed7e331cf658878
SSDEEP 3072:ug/JL3Qf3BSUPD6RrT9cfvQln4Y9yggGBFYM1jt76dKOqyR55gfgqUiT45:ugR3m3BSlZTyfo2Y9yggG/ZjgkbUiT4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

86ff58151ec691f3072cdf6226c7b356537022a2d1b7a73e63aeee639346933c

.exe 215KB

86ff58151ec691f3072cdf6226c7b356537022a2d1b7a73e63aeee639346933c

IMPHASH 9700f01a9230d342fea056edc1b3d932
SHA256 86ff58151ec691f3072cdf6226c7b356537022a2d1b7a73e63aeee639346933c
MD5 e3149d988edfdabe27e8a4902a784d2a
SHA1 ab259a9c37c60698a2544297671b39235df1aaae
SHA512 865e5f67cab098860ac2598831c564691e90966d015080279eac1fac5ee4c73cc85975498da61833a74f0ea03020418c354aa7b96312ca53eed7e331cf658878
SSDEEP 3072:ug/JL3Qf3BSUPD6RrT9cfvQln4Y9yggGBFYM1jt76dKOqyR55gfgqUiT45:ugR3m3BSlZTyfo2Y9yggG/ZjgkbUiT4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

5040

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_SYSTEM

PDB paths

kernel32

GetNamedPipeHandleStateA GetTickCount WriteFile LoadLibraryW SizeofResource GetAtomNameW IsBadStringPtrA GetCurrentProcess EnumSystemLocalesA GetLastError GetProcAddress BackupWrite BuildCommDCBW GlobalFree WriteConsoleA GetProcessId LocalAlloc FindResourceW GetProcessIoCounters lstrlenA lstrcmpA GlobalMemoryStatus CreateFileA GetCommandLineW SetConsoleTitleA DebugActiveProcess GetStartupInfoW HeapValidate IsBadReadPtr RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep InterlockedIncrement InterlockedDecrement ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryA WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

86ff58151ec691f3072cdf6226c7b356537022a2d1b7a73e63aeee639346933c

kernel32