0409b13768d355fe82969a83678df44a

General

Target
0409b13768d355fe82969a83678df44a
Size 308KB
Sample220609-tgryfseaf5
SHA256 2fea32cb89d30feb0410d01ce7f3c5e59e17895a08b5c946e0c1c157e47db978
MD5 0409b13768d355fe82969a83678df44a
SHA1 c7391d38a4c98984517ba05179a52a3b3d73e9b7
SHA512 19d5de2033f2a4012b995c2f57520e6d097e88b01ff0ea96a47743c44abb17eb59492491fe33312c2a69e4d709b7f9d6832db55361f711c278b1e9de920f2f84
SSDEEP 6144:Cal/SYSFwnUnkaeESDfVm2t6POkoqsZrQuWa:Cal6rF7aEEUrOe6rQq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0409b13768d355fe82969a83678df44a

.exe 308KB

0409b13768d355fe82969a83678df44a

IMPHASH 78d26c9d6f2c9d23af6542e6624e3f43
SHA256 2fea32cb89d30feb0410d01ce7f3c5e59e17895a08b5c946e0c1c157e47db978
MD5 0409b13768d355fe82969a83678df44a
SHA1 c7391d38a4c98984517ba05179a52a3b3d73e9b7
SHA512 19d5de2033f2a4012b995c2f57520e6d097e88b01ff0ea96a47743c44abb17eb59492491fe33312c2a69e4d709b7f9d6832db55361f711c278b1e9de920f2f84
SSDEEP 6144:Cal/SYSFwnUnkaeESDfVm2t6POkoqsZrQuWa:Cal6rF7aEEUrOe6rQq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

193648

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA OpenEventA GetLocaleInfoA GetLongPathNameA _lwrite WriteConsoleInputA GetSystemDirectoryW MoveFileExW CreateEventA VerifyVersionInfoA InterlockedExchange ReadConsoleInputA WaitNamedPipeW GlobalFree GetCPInfoExW BeginUpdateResourceA FreeLibraryAndExitThread EnumCalendarInfoExA MoveFileA ReadConsoleOutputCharacterW GetConsoleAliasesLengthW GlobalAlloc GetProcAddress GetCalendarInfoA CommConfigDialogA SetFileAttributesA AreFileApisANSI OpenJobObjectA LCMapStringW GetFileAttributesA SetConsoleTitleA ReplaceFileA SetLastError GetCurrentProcessId GetSystemDefaultLangID GetEnvironmentStringsW GetFileTime FindResourceExW GetConsoleMode GetDiskFreeSpaceW GetConsoleAliasExesW WaitForSingleObject SetDefaultCommConfigW LoadLibraryA HeapSize SetFilePointer GetConsoleAliasExesLengthW LoadLibraryW CreateFileW WriteConsoleW MultiByteToWideChar RtlUnwind GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetModuleHandleW GetCurrentThreadId HeapAlloc CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetStringTypeW Sleep SetStdHandle GetConsoleCP FlushFileBuffers RaiseException HeapReAlloc

user32

ClientToScreen

gdi32

GetTextExtentPoint32A

winhttp

WinHttpCloseHandle

Name

.text

Size

220KB

Virtual Size

219KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

65KB

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.molipeg

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kapoza

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.peduhav

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.necatu

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0409b13768d355fe82969a83678df44a

kernel32

user32

gdi32

winhttp