105f02204715074e841169f29794c014b943d8c96914009e54fec3275275944a

General

Target
105f02204715074e841169f29794c014b943d8c96914009e54fec3275275944a
Size 303KB
Sample220604-ptcbbabgcr
SHA256 105f02204715074e841169f29794c014b943d8c96914009e54fec3275275944a
MD5 afda926f5318d9c57115beadb3d23343
SHA1 f325fa7425b50bd16e1b2c9901508e034f42cb97
SHA512 dddff77d22e80bc0a6bbed41172fa0788f9698c75f2e1a65b7496cf78780e6f731e253efb4f60511b1a8e5f9e57d9fe6bd106e3ac4e9f3f4f4f91efb9dc3da71
SSDEEP 6144:7QsL28j6Bal/ybXlLkq/bPGJFO7uXD8sxJ:79LzjZQjlF+JFOi8K
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

105f02204715074e841169f29794c014b943d8c96914009e54fec3275275944a

.exe 303KB

105f02204715074e841169f29794c014b943d8c96914009e54fec3275275944a

IMPHASH 21aad78d8462d44044122dc76fdc550e
SHA256 105f02204715074e841169f29794c014b943d8c96914009e54fec3275275944a
MD5 afda926f5318d9c57115beadb3d23343
SHA1 f325fa7425b50bd16e1b2c9901508e034f42cb97
SHA512 dddff77d22e80bc0a6bbed41172fa0788f9698c75f2e1a65b7496cf78780e6f731e253efb4f60511b1a8e5f9e57d9fe6bd106e3ac4e9f3f4f4f91efb9dc3da71
SSDEEP 6144:7QsL28j6Bal/ybXlLkq/bPGJFO7uXD8sxJ:79LzjZQjlF+JFOi8K
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

105407

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FormatMessageA RemoveVectoredExceptionHandler FindActCtxSectionStringW lstrlenW GlobalAlloc CompareStringA GetTimeZoneInformation GetLocaleInfoW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GlobalMemoryStatus VerSetConditionMask PeekConsoleInputA VirtualProtect LocalAlloc GetFileAttributesExA LockFile CompareStringW DebugActiveProcessStop GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW RtlUnwind RaiseException GetStartupInfoW GetLastError HeapFree EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA VirtualAlloc HeapReAlloc CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA FlushFileBuffers SetStdHandle SetEndOfFile GetProcessHeap MultiByteToWideChar ReadFile WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA SetEnvironmentVariableA

user32

GetMonitorInfoA DestroyMenu DestroyIcon GetDlgItemTextA SetWindowWord LoadImageW

advapi32

RegFlushKey MakeAbsoluteSD AccessCheckByTypeAndAuditAlarmA AreAnyAccessesGranted SetThreadToken RegDeleteKeyW RegCreateKeyExW QueryServiceStatus

winhttp

WinHttpCloseHandle WinHttpSetStatusCallback WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

105f02204715074e841169f29794c014b943d8c96914009e54fec3275275944a

kernel32

user32

advapi32

winhttp