2b54528c6bd185b8ca01db6f9e9f9bfbaf8aedcf7e9b02e959b8e6ef93a693d6

General

Target
2b54528c6bd185b8ca01db6f9e9f9bfbaf8aedcf7e9b02e959b8e6ef93a693d6
Size 362KB
Sample220615-c2tt4sdbc3
SHA256 2b54528c6bd185b8ca01db6f9e9f9bfbaf8aedcf7e9b02e959b8e6ef93a693d6
MD5 0a0c4acc35ac87df533f3f56e3effd68
SHA1 a6dcca97f3b4250281bbdcc969a83ae7f32a0b4d
SHA512 3b0a3b3ce241e8e244647777d3c457bcb6af85dabf19f3e13a7c556b20cbe5fdff6a2d676087c452de8b2911a08b2a566840a5c5882176f66e61d0ad9fcf8cd3
SSDEEP 6144:G1r34gMaKK+ULjOBMprgdW/qcTeaW6/vxEocpgP+QMj7Hf60DWgQcN+:GKgM1XKyKpgW/qcTeqxEoccDGrtQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2b54528c6bd185b8ca01db6f9e9f9bfbaf8aedcf7e9b02e959b8e6ef93a693d6

.exe 362KB

2b54528c6bd185b8ca01db6f9e9f9bfbaf8aedcf7e9b02e959b8e6ef93a693d6

IMPHASH 63f9a18a26e146489d4459889103d05c
SHA256 2b54528c6bd185b8ca01db6f9e9f9bfbaf8aedcf7e9b02e959b8e6ef93a693d6
MD5 0a0c4acc35ac87df533f3f56e3effd68
SHA1 a6dcca97f3b4250281bbdcc969a83ae7f32a0b4d
SHA512 3b0a3b3ce241e8e244647777d3c457bcb6af85dabf19f3e13a7c556b20cbe5fdff6a2d676087c452de8b2911a08b2a566840a5c5882176f66e61d0ad9fcf8cd3
SSDEEP 6144:G1r34gMaKK+ULjOBMprgdW/qcTeaW6/vxEocpgP+QMj7Hf60DWgQcN+:GKgM1XKyKpgW/qcTeqxEoccDGrtQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45632

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToDosDateTime TerminateProcess ReleaseActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigW SetCommConfig GetDriveTypeA FreeEnvironmentStringsW CreateTimerQueue FindNextVolumeW InitializeCriticalSectionAndSpinCount ReadConsoleInputW TlsGetValue SetComputerNameExA FindAtomW BuildCommDCBAndTimeoutsA LoadLibraryA GlobalAlloc InitializeCriticalSection GetCommandLineA InterlockedIncrement CopyFileA ZombifyActCtx OutputDebugStringW FormatMessageA GetPriorityClass WritePrivateProfileStringA ExitThread GlobalUnfix HeapCompact GetStartupInfoW CreatePipe GetCPInfoExA GetWindowsDirectoryA GetSystemWow64DirectoryA SetLastError WriteProfileSectionW GetCalendarInfoW ResumeThread SetConsoleCursorInfo GetLastError DebugActiveProcess lstrcmpA WriteFile GetNumberOfConsoleInputEvents GetProcAddress GetSystemWindowsDirectoryA FindCloseChangeNotification CreateActCtxA GetPrivateProfileIntW _lread InterlockedDecrement DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceW WriteConsoleA VirtualProtect InterlockedPushEntrySList DeleteCriticalSection GetFileAttributesExW FileTimeToSystemTime GetVolumePathNameW GetConsoleMode HeapSetInformation GetComputerNameA FindActCtxSectionStringW WriteProcessMemory MoveFileExA DisableThreadLibraryCalls GlobalCompact UnregisterWait DeleteAtom FatalExit InterlockedCompareExchange WaitNamedPipeW FindResourceExA EnumDateFormatsA GetSystemTime GetSystemInfo EnumCalendarInfoExW GetPrivateProfileStructA OpenSemaphoreW GetMailslotInfo lstrcpyA VerLanguageNameA SetThreadExecutionState SetSystemTime GetFileType GetConsoleCP GetConsoleAliasA GetLargestConsoleWindowSize GetConsoleAliasExesLengthA CreateMailslotA EnumDateFormatsW SetCommState LockFile _lclose GetConsoleAliasExesLengthW ResetWriteWatch CreateConsoleScreenBuffer ClearCommBreak GetOverlappedResult WriteConsoleInputW ChangeTimerQueueTimer HeapSize GetConsoleDisplayMode GetStringTypeA SetFilePointer PostQueuedCompletionStatus SetFileApisToOEM OpenWaitableTimerW GetProcessId GetNamedPipeHandleStateA FillConsoleOutputCharacterW FindNextVolumeMountPointA WriteProfileStringA GlobalAddAtomA WriteConsoleOutputCharacterW TerminateJobObject QueryDosDeviceA InitAtomTable GetBinaryTypeA LeaveCriticalSection VirtualAlloc CreateFileA MoveFileA RaiseException HeapValidate IsBadReadPtr EnterCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetHandleCount GetStdHandle GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc HeapReAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW LoadLibraryW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle CloseHandle

user32

OemToCharA

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

2b54528c6bd185b8ca01db6f9e9f9bfbaf8aedcf7e9b02e959b8e6ef93a693d6

kernel32

user32

winhttp