29fc9e60d4b92944739c3cef4ad4bb781d4ef4549c1f49a2d33e940bd0f6c62d

General

Target
29fc9e60d4b92944739c3cef4ad4bb781d4ef4549c1f49a2d33e940bd0f6c62d
Size 444KB
Sample220615-jbqs4afgb2
SHA256 29fc9e60d4b92944739c3cef4ad4bb781d4ef4549c1f49a2d33e940bd0f6c62d
MD5 6a52bc5eb7167b1b9388750a87a37459
SHA1 08eee7cd20b0bb9d1097357a8bcc877be72c6010
SHA512 e3155809ded9a013f7388650a0be5cd2a02d5286287fadaf541aea89926cef68ec0167dd6bdb28634c098c91b7bab3908960ff4eef6efd8b97508f955d05c376
SSDEEP 12288:efdgTBtlvcWmxZ1S9nTQD6erx3fuwBdCnkNTDevWh:eFg9tcXS9cxPuJnkZD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

29fc9e60d4b92944739c3cef4ad4bb781d4ef4549c1f49a2d33e940bd0f6c62d

.exe 444KB

29fc9e60d4b92944739c3cef4ad4bb781d4ef4549c1f49a2d33e940bd0f6c62d

IMPHASH 4af4742906d30c7889c195169379a2f9
SHA256 29fc9e60d4b92944739c3cef4ad4bb781d4ef4549c1f49a2d33e940bd0f6c62d
MD5 6a52bc5eb7167b1b9388750a87a37459
SHA1 08eee7cd20b0bb9d1097357a8bcc877be72c6010
SHA512 e3155809ded9a013f7388650a0be5cd2a02d5286287fadaf541aea89926cef68ec0167dd6bdb28634c098c91b7bab3908960ff4eef6efd8b97508f955d05c376
SSDEEP 12288:efdgTBtlvcWmxZ1S9nTQD6erx3fuwBdCnkNTDevWh:eFg9tcXS9cxPuJnkZD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

240384

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SearchPathW GetConsoleAliasesLengthW GetCPInfo InterlockedDecrement AddConsoleAliasW FreeEnvironmentStringsA GetModuleHandleW GetTickCount SetFileTime CreateActCtxW GlobalAlloc SetFileShortNameW GetConsoleMode TerminateThread IsBadWritePtr GetEnvironmentVariableA CompareStringW ExitThread lstrlenW VerifyVersionInfoW GetStartupInfoA FindFirstFileExA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress CopyFileA LockFileEx OpenWaitableTimerA ProcessIdToSessionId MoveFileA SetCurrentDirectoryW WriteProfileSectionW GlobalGetAtomNameW GetModuleFileNameA WriteProfileStringA GetModuleHandleA GetProcessShutdownParameters FreeEnvironmentStringsW ScrollConsoleScreenBufferA GetVersionExA TlsAlloc GetWindowsDirectoryW DeleteFileW LocalFileTimeToFileTime InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetCommandLineA HeapValidate IsBadReadPtr RaiseException RtlUnwind WideCharToMultiByte MultiByteToWideChar LCMapStringA GetLastError LCMapStringW ExitProcess WriteFile GetStdHandle TlsGetValue TlsSetValue GetCurrentThreadId TlsFree DebugBreak OutputDebugStringA WriteConsoleW GetFileType OutputDebugStringW LoadLibraryW SetHandleCount GetACP GetOEMCP IsValidCodePage QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetStringTypeA GetStringTypeW GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer SetStdHandle WriteConsoleA GetConsoleOutputCP GetLocaleInfoW CloseHandle CreateFileA

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

29fc9e60d4b92944739c3cef4ad4bb781d4ef4549c1f49a2d33e940bd0f6c62d

kernel32

winhttp