a1f450eddb8dc29892334e6c0c98f060

General

Target
a1f450eddb8dc29892334e6c0c98f060
Size 309KB
Sample220528-vwer4shahl
SHA256 d77ec45e4f5bf4ae2dbcdada8676eadf8ecf888a92e6197802cd075f4d0cb69b
MD5 a1f450eddb8dc29892334e6c0c98f060
SHA1 1f214dbaab244e4d12cc16f9dbb47943cfdac437
SHA512 7ca871418e0e863f8da57522c99a717402a2664d74e1be8f40a1213b4bff31d49923b168160d46a3bea2e2eeff7f801c85a5a300ca848d66ea0969fe0958005d
SSDEEP 6144:y348gAWpQt3G308rnGl5Oemp9bmzfGddMctWTlelYw49:C48Oe2308TGlc9KDkdNcThw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a1f450eddb8dc29892334e6c0c98f060

.exe 309KB

a1f450eddb8dc29892334e6c0c98f060

IMPHASH 35ab1c1a8226968453ac17f61f2ae770
SHA256 d77ec45e4f5bf4ae2dbcdada8676eadf8ecf888a92e6197802cd075f4d0cb69b
MD5 a1f450eddb8dc29892334e6c0c98f060
SHA1 1f214dbaab244e4d12cc16f9dbb47943cfdac437
SHA512 7ca871418e0e863f8da57522c99a717402a2664d74e1be8f40a1213b4bff31d49923b168160d46a3bea2e2eeff7f801c85a5a300ca848d66ea0969fe0958005d
SSDEEP 6144:y348gAWpQt3G308rnGl5Oemp9bmzfGddMctWTlelYw49:C48Oe2308TGlc9KDkdNcThw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

54320

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA FindResourceA lstrcmpA WriteConsoleInputW TryEnterCriticalSection WriteConsoleOutputCharacterW WritePrivateProfileStructA GetConsoleAliasesLengthW GetModuleHandleExA SetComputerNameExA MoveFileExA lstrcpynA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA LoadResource UpdateResourceA _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement ZombifyActCtx WritePrivateProfileSectionA GetNamedPipeHandleStateA GetProfileSectionA InterlockedCompareExchange WriteConsoleInputA GetComputerNameW FlushConsoleInputBuffer ConnectNamedPipe GetModuleHandleW GetTickCount CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA GetCompressedFileSizeW GetConsoleAliasExesW GetDateFormatA FindActCtxSectionStringA GetCommandLineA CreateActCtxW EnumResourceTypesA SetProcessPriorityBoost GetDriveTypeA GetPriorityClass GetVolumePathNameW GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW IsProcessInJob CopyFileW AssignProcessToJobObject GetCalendarInfoW ReadProcessMemory GetSystemWow64DirectoryW GetSystemWindowsDirectoryA ReadConsoleOutputW FormatMessageW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetWriteWatch SetConsoleCursorPosition VerifyVersionInfoA WriteConsoleW GetBinaryTypeA TerminateProcess GetAtomNameW GetMailslotInfo GetTimeZoneInformation CreateFileW lstrcatA GetOverlappedResult GetACP lstrlenW FindNextVolumeMountPointW RaiseException GetStringTypeExA DeactivateActCtx GetNamedPipeHandleStateW GetConsoleAliasesW ReleaseActCtx GetStartupInfoA FillConsoleOutputCharacterW GetHandleInformation GetLastError ChangeTimerQueueTimer GetLongPathNameW ReadConsoleOutputCharacterA VerLanguageNameA DefineDosDeviceW EnumDateFormatsExA SetComputerNameA GlobalGetAtomNameA BuildCommDCBW ResetEvent GetLocalTime LoadLibraryA InterlockedExchangeAdd OpenWaitableTimerW SetCalendarInfoW GetFileType WritePrivateProfileStringA MoveFileA SetConsoleOutputCP GetExitCodeThread AddAtomW SetCurrentDirectoryW GetProfileStringA WriteProfileSectionW VirtualLock HeapLock GetCommMask HeapWalk GetTapeParameters FoldStringW SetSystemTime GlobalWire GetModuleFileNameA GetPrivateProfileSectionNamesA FindNextFileA EnumDateFormatsA FindFirstChangeNotificationA lstrcatW FreeEnvironmentStringsW EnumResourceNamesA FindNextFileW CreateMailslotA GetStringTypeW WriteProfileStringW VirtualProtect OutputDebugStringA GetCPInfoExA SetThreadAffinityMask OpenSemaphoreW EndUpdateResourceA GetVersionExA GetVersion DeleteFileW GetCurrentProcessId MoveFileWithProgressW GetFileInformationByHandle DebugBreak FindActCtxSectionStringW OpenFileMappingA SuspendThread CopyFileExA lstrcpyA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteFileA GetModuleFileNameW HeapValidate IsBadReadPtr RtlUnwind GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError SetHandleCount GetStdHandle WriteFile OutputDebugStringW ExitProcess QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetFilePointer InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

Name

.text

Size

190KB

Virtual Size

190KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

323KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mijoko

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.lorak

Size

512B

Virtual Size

75B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.jarow

Size

512B

Virtual Size

34B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a1f450eddb8dc29892334e6c0c98f060

kernel32