b0e5839f9ef5c172ac7dbb029d12e0c0

Sharing

Copy URL Twitter E-mail

General

Target
b0e5839f9ef5c172ac7dbb029d12e0c0
Size 322KB
Sample220607-kgfezscfc7
SHA256 fe081cfd90bdfd2afc2564cc944631815679802b3e9a48acf888b508d247d7cb
MD5 b0e5839f9ef5c172ac7dbb029d12e0c0
SHA1 df03f872c1ba7b05f9549e161ff13001e402e918
SHA512 037430e2f6e784b1de8a15a0fcd1d95f13688ff4423938c688dd56f8491d250259430c9b46d153e695e5a416b08b2ebf6ed6c660137acc0fb7b68b781eb62a0d
SSDEEP 6144:+la2lBfabRu9+RjzOVzd+bzmLSGPeBZKbu/TxszBfz:+sbYWzOVzM/mLSXBUQTxOfz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b0e5839f9ef5c172ac7dbb029d12e0c0

.exe 322KB

b0e5839f9ef5c172ac7dbb029d12e0c0

IMPHASH f96053cd203622d03998ec2978919d10
SHA256 fe081cfd90bdfd2afc2564cc944631815679802b3e9a48acf888b508d247d7cb
MD5 b0e5839f9ef5c172ac7dbb029d12e0c0
SHA1 df03f872c1ba7b05f9549e161ff13001e402e918
SHA512 037430e2f6e784b1de8a15a0fcd1d95f13688ff4423938c688dd56f8491d250259430c9b46d153e695e5a416b08b2ebf6ed6c660137acc0fb7b68b781eb62a0d
SSDEEP 6144:+la2lBfabRu9+RjzOVzd+bzmLSGPeBZKbu/TxszBfz:+sbYWzOVzM/mLSXBUQTxOfz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

193953

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA GetConsoleAliasesLengthA OpenEventA InterlockedExchange GetLocaleInfoA GetLongPathNameW InterlockedDecrement _lwrite WriteConsoleInputA GetSystemDirectoryW MoveFileExA CreateEventA VerifyVersionInfoW WaitNamedPipeA ReadConsoleInputA GlobalFree GetCPInfoExW BeginUpdateResourceW EnumCalendarInfoExW MoveFileA ReadConsoleOutputCharacterA GetConsoleAliasesLengthW GlobalAlloc GetModuleHandleW EnumResourceNamesW LocalAlloc RemoveDirectoryA GetCalendarInfoA CommConfigDialogW SetFileAttributesA GetCommTimeouts OpenJobObjectA GetAtomNameA GetFileAttributesW SetConsoleTitleW ReplaceFileA CreateJobObjectA GetProcessWorkingSetSize GetBinaryTypeW GetSystemDefaultLangID GetUserDefaultLangID GetConsoleAliasA GetLastError GetCurrentProcess SetLastError GetPrivateProfileIntW FreeLibrary GetEnvironmentStringsW GetFileTime FindResourceExW GetConsoleMode GetDiskFreeSpaceA GetConsoleAliasExesW WaitForMultipleObjects SetDefaultCommConfigA LoadLibraryA GetProcAddress LoadLibraryW GetStringTypeW MultiByteToWideChar LCMapStringW HeapReAlloc RtlUnwind GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent HeapAlloc HeapCreate HeapFree TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId SetUnhandledExceptionFilter ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter IsDebuggerPresent TerminateProcess LeaveCriticalSection EnterCriticalSection Sleep HeapSize

user32

ClientToScreen

advapi32

GetEventLogInformation

ole32

CoRevokeMallocSpy

winhttp

WinHttpCloseHandle

Name

.text

Size

231KB

Virtual Size

230KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

66KB

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.licap

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.joviya

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.dod

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.guw

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jele

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ