23a819e00cbf7fb585363789d4f8345c

Sharing

Copy URL Twitter E-mail

General

Target
23a819e00cbf7fb585363789d4f8345c
Size 176KB
Sample220609-c61hfsfec2
SHA256 2b23d400c5e1977d69e510fd01c2f4fc5fcefddfae6e943e2fc0736e89af3a0e
MD5 23a819e00cbf7fb585363789d4f8345c
SHA1 fe98b36262b8ad02ed808a5f4765f72bf995945e
SHA512 161a54d96398d74217d109b6d84ff03819e03701a0fbbaa5883fa35053f1f2699f1e1beb7bb5cc9030329b1bf9f92a8f298e28e183634b121dbd7c92fd13c66d
SSDEEP 1536:UVk8Mx+5kIMoUHxqZdCKrOoRicBo5IUY5xmFo2vm4zRqPAcuWkhgtAOUzE:UV5UsURmdCcZgcBo5a3mH3rWkh9OUA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

23a819e00cbf7fb585363789d4f8345c

.exe 176KB

23a819e00cbf7fb585363789d4f8345c

IMPHASH 8ecc82a073398bf14d8558eb75c220bf
SHA256 2b23d400c5e1977d69e510fd01c2f4fc5fcefddfae6e943e2fc0736e89af3a0e
MD5 23a819e00cbf7fb585363789d4f8345c
SHA1 fe98b36262b8ad02ed808a5f4765f72bf995945e
SHA512 161a54d96398d74217d109b6d84ff03819e03701a0fbbaa5883fa35053f1f2699f1e1beb7bb5cc9030329b1bf9f92a8f298e28e183634b121dbd7c92fd13c66d
SSDEEP 1536:UVk8Mx+5kIMoUHxqZdCKrOoRicBo5IUY5xmFo2vm4zRqPAcuWkhgtAOUzE:UV5UsURmdCcZgcBo5a3mH3rWkh9OUA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

57872

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA OpenEventA GetLocaleInfoA GetLongPathNameA _lwrite WriteConsoleInputA GetSystemDirectoryW MoveFileExW CreateEventA VerifyVersionInfoA InterlockedExchange ReadConsoleInputA WaitNamedPipeA GlobalFree GetCPInfoExW BeginUpdateResourceA FreeLibraryAndExitThread EnumCalendarInfoExA MoveFileA ReadConsoleOutputCharacterW GetConsoleAliasesLengthW GlobalAlloc GetProcAddress GetCalendarInfoA CommConfigDialogA SetFileAttributesA AreFileApisANSI OpenJobObjectA LCMapStringW GetFileAttributesW SetConsoleTitleA ReplaceFileA GetCurrentProcessId GetLastError GetSystemDefaultLangID SetLastError GetEnvironmentStringsW GetFileTime FindResourceExW GetConsoleMode GetDiskFreeSpaceA GetConsoleAliasExesW WaitForSingleObject SetDefaultCommConfigW LoadLibraryA HeapSize SetFilePointer GetConsoleAliasExesLengthW LoadLibraryW WriteConsoleW HeapReAlloc MultiByteToWideChar RtlUnwind GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetModuleHandleW GetCurrentThreadId HeapAlloc CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetStringTypeW Sleep SetStdHandle GetConsoleCP FlushFileBuffers RaiseException CreateFileW

user32

ClientToScreen

gdi32

GetTextExtentPoint32A

winhttp

WinHttpCloseHandle

Name

.text

Size

87KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

65KB

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.puyipux

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lawac

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pura

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fade

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wikeru

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ