1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353

General

Target
1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353
Size 201KB
Sample220604-mbzmsabce8
SHA256 1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353
MD5 efdad7ac729d27ae2d8e2c62ad1b1bb7
SHA1 6c76e47f29bda5816426c20c0ae3c156a415695b
SHA512 167d1e636898519d569db625e095af15509bf157202f247d32a6950c692547d1bcb4aa317267c580698cb356060b13afa41c5d9c25aa266bb048a787585f8664
SSDEEP 3072:MnHXnyV+DxUgMiANFE3Q6/2fMnFG6V6ZhYi/kf0o25HNvEVYV7R+:MHXnyVwygMjNeh+U9V6tkcooS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353

.exe 201KB

1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353

IMPHASH f7a6e4efb3a11a495e283e14b0c356f3
SHA256 1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353
MD5 efdad7ac729d27ae2d8e2c62ad1b1bb7
SHA1 6c76e47f29bda5816426c20c0ae3c156a415695b
SHA512 167d1e636898519d569db625e095af15509bf157202f247d32a6950c692547d1bcb4aa317267c580698cb356060b13afa41c5d9c25aa266bb048a787585f8664
SSDEEP 3072:MnHXnyV+DxUgMiANFE3Q6/2fMnFG6V6ZhYi/kf0o25HNvEVYV7R+:MHXnyVwygMjNeh+U9V6tkcooS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

7266

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstChangeNotificationW WriteConsoleOutputCharacterW GetCPInfo FreeEnvironmentStringsA LoadLibraryW GetLastError GetCurrentDirectoryW SetLastError LocalAlloc FindNextChangeNotification AddAtomA VirtualProtect FindAtomW GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA ExitProcess HeapSize FlushFileBuffers HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep GetProcAddress WriteFile GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetConsoleCP GetConsoleMode GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount LoadLibraryA CloseHandle CreateFileA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetModuleHandleA

user32

GetMessageExtraInfo SetParent GetMonitorInfoA GetUpdateRect RegisterClassExW GetDesktopWindow GetCaretPos SetThreadDesktop SetProcessDefaultLayout PeekMessageA

shell32

ExtractIconW

Sharing

General

Malware Config

Signatures

File Explorer

1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353

kernel32

user32

shell32