39e3c00cae06c253e615ed4cc6efc51e

General

Target
39e3c00cae06c253e615ed4cc6efc51e
Size 389KB
Sample220616-219avaheek
SHA256 d881bfb3c1dd896f2ff9677b56a5aa3c19f99403494b2d5c34ddd68c7ed95875
MD5 39e3c00cae06c253e615ed4cc6efc51e
SHA1 13c56e383e0865f2bd3f9b44450d792f129b63fe
SHA512 be2aae4acb01451e32fd782c8cbc9a2ec578b22e21b1898fcab334dce5ce7d0dbd95ffc91012502f36e72ec9d8f0e67b0316b5b39a46903fcf3379c924f877dd
SSDEEP 12288:kFoXghNf+vUT7fjiNirNOkPZR50DWIfyFemFMCeoOdxzmG6Y0VV:03PXBIfyHehmGCV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

39e3c00cae06c253e615ed4cc6efc51e

.exe 389KB

39e3c00cae06c253e615ed4cc6efc51e

IMPHASH dfa9ab0f51703f95459c376ce6b04c56
SHA256 d881bfb3c1dd896f2ff9677b56a5aa3c19f99403494b2d5c34ddd68c7ed95875
MD5 39e3c00cae06c253e615ed4cc6efc51e
SHA1 13c56e383e0865f2bd3f9b44450d792f129b63fe
SHA512 be2aae4acb01451e32fd782c8cbc9a2ec578b22e21b1898fcab334dce5ce7d0dbd95ffc91012502f36e72ec9d8f0e67b0316b5b39a46903fcf3379c924f877dd
SSDEEP 12288:kFoXghNf+vUT7fjiNirNOkPZR50DWIfyFemFMCeoOdxzmG6Y0VV:03PXBIfyHehmGCV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

54592

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatA FindFirstChangeNotificationA GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterW DisableThreadLibraryCalls TerminateProcess GetProcessId VerifyVersionInfoW EnumDateFormatsW FindNextFileW CopyFileExA BuildCommDCBAndTimeoutsA VirtualUnlock WriteProfileStringA SetProcessPriorityBoost GetDriveTypeW FindFirstChangeNotificationW SetPriorityClass GetCompressedFileSizeA FindNextVolumeMountPointA OutputDebugStringA ResetWriteWatch WriteConsoleInputA WriteConsoleInputW GetConsoleTitleA SetComputerNameExW GetTimeZoneInformation LoadLibraryA GetSystemDirectoryA GetDriveTypeA GetShortPathNameW ActivateActCtx GetProfileSectionA DeleteFileW GetCommandLineW InterlockedExchangeAdd AddRefActCtx FindResourceW FormatMessageA GetModuleFileNameW CreateJobObjectA InitializeCriticalSection SetFirmwareEnvironmentVariableW GetDllDirectoryA GetExitCodeThread WritePrivateProfileStringW GetConsoleAliasesLengthW WriteProfileSectionW AddAtomW UpdateResourceW InterlockedDecrement GetVersionExA HeapSize _hwrite InterlockedExchange GetStartupInfoW DisconnectNamedPipe GetCPInfoExW GetSystemWow64DirectoryW SetLastError GetConsoleAliasExesA DebugBreak EndUpdateResourceW GetLastError GetStringTypeW GetConsoleAliasesLengthA DeleteVolumeMountPointA OpenFileMappingA SetDefaultCommConfigA VirtualAlloc GetACP GetConsoleAliasA _lwrite GetQueuedCompletionStatus GetNamedPipeHandleStateA GetDiskFreeSpaceExA AddVectoredExceptionHandler WriteConsoleA VirtualProtect ReadConsoleOutputA GetThreadContext BuildCommDCBA ReleaseActCtx GetHandleInformation GetComputerNameA WritePrivateProfileSectionW TryEnterCriticalSection GetPrivateProfileSectionNamesA OpenWaitableTimerA CopyFileW MoveFileW GetVolumePathNameA SetConsoleMode HeapWalk SetComputerNameA FindNextFileA SetEvent UnlockFileEx GetProcAddress DeleteTimerQueueTimer MoveFileA GlobalAlloc SetCommMask SetFileShortNameA FreeEnvironmentStringsW FindActCtxSectionStringW GetSystemWindowsDirectoryA GetProfileStringW GlobalGetAtomNameA SetComputerNameW GetConsoleAliasesA CreateMailslotA GetConsoleOutputCP MoveFileWithProgressW GetFileInformationByHandle SetLocalTime FoldStringA CallNamedPipeA GetConsoleAliasExesLengthW FindActCtxSectionStringA OpenSemaphoreW GetModuleHandleExA AddAtomA LoadLibraryW WriteConsoleOutputCharacterW GetFileAttributesA GetTickCount LocalUnlock GetFileTime EnumResourceNamesW OpenFileMappingW GetFileType RaiseException ReadConsoleA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteFileA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsDebuggerPresent GetModuleHandleA TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetOEMCP GetCPInfo IsValidCodePage SetHandleCount GetStdHandle GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapReAlloc FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeA GetLocaleInfoA LCMapStringA LCMapStringW SetFilePointer SetStdHandle ReadFile CloseHandle CreateFileA

user32

CharUpperA

Sharing

General

Malware Config

Signatures

File Explorer

39e3c00cae06c253e615ed4cc6efc51e

kernel32

user32