1517567961fdd39a38d45efdf3655e396230c509a910d5277d945f042c4194de

General

Target
1517567961fdd39a38d45efdf3655e396230c509a910d5277d945f042c4194de
Size 466KB
Sample220609-kdkwascgfn
SHA256 1517567961fdd39a38d45efdf3655e396230c509a910d5277d945f042c4194de
MD5 4a6e54e01ebc60f16dfc391595af795d
SHA1 257ba02f122943f7fb53c9c6b077c3ecd383194f
SHA512 d00ce38d5b8611282d6d8a6c981d845f2946861a6ed30ddd2b06e726009b538d3c42baa9fee8b2cdace918d4ab24d25cdbf1c9f8bd82d21860c5a901c3e2b927
SSDEEP 12288:6dkUbLuyppy0iB0bBbT1jM5KQMJ+LSwYhQBADUbLaa8LezOJVv:6ueJ2vwvNsl8+LnBADKJzO/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1517567961fdd39a38d45efdf3655e396230c509a910d5277d945f042c4194de

.exe 466KB

1517567961fdd39a38d45efdf3655e396230c509a910d5277d945f042c4194de

IMPHASH df625292350c65281d1808a853c1039d
SHA256 1517567961fdd39a38d45efdf3655e396230c509a910d5277d945f042c4194de
MD5 4a6e54e01ebc60f16dfc391595af795d
SHA1 257ba02f122943f7fb53c9c6b077c3ecd383194f
SHA512 d00ce38d5b8611282d6d8a6c981d845f2946861a6ed30ddd2b06e726009b538d3c42baa9fee8b2cdace918d4ab24d25cdbf1c9f8bd82d21860c5a901c3e2b927
SSDEEP 12288:6dkUbLuyppy0iB0bBbT1jM5KQMJ+LSwYhQBADUbLaa8LezOJVv:6ueJ2vwvNsl8+LnBADKJzO/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

257386

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileTime FindClose GlobalAlloc VirtualProtect GetModuleHandleA GetSystemDirectoryA GetCommandLineA SetEnvironmentVariableW HeapLock ReplaceFileA EnumTimeFormatsW GetVolumePathNamesForVolumeNameW ReadConsoleA WriteProfileStringA LoadLibraryW IsProcessorFeaturePresent GetTickCount Sleep MoveFileWithProgressA WaitForMultipleObjects WaitForSingleObject FormatMessageA GetStringTypeExA SetCriticalSectionSpinCount IsValidLocale EnumSystemLocalesA GetLastError HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW HeapCreate HeapDestroy HeapAlloc EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess GetProcAddress GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode RaiseException SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc FlushFileBuffers LCMapStringW GetStringTypeW ReadFile SetStdHandle WriteConsoleW HeapSize CloseHandle GetUserDefaultLCID GetLocaleInfoA CreateFileW

msimg32

GradientFill

Name

.text

Size

381KB

Virtual Size

381KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

689KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

1517567961fdd39a38d45efdf3655e396230c509a910d5277d945f042c4194de

kernel32

msimg32