0918580c2b042d3349d6cf2c53f88b0b

General

Target
0918580c2b042d3349d6cf2c53f88b0b
Size 390KB
Sample220616-jn9fzaccd2
SHA256 dc598f9de8139e8eb4d6db7f9e49b847f17b2dc1d8674a3b4eb047b0ceb4f011
MD5 0918580c2b042d3349d6cf2c53f88b0b
SHA1 272ed8c0352dfcc1255cc4a87c96cef8c3164d4d
SHA512 2b435a24333049af2e328108fde7bfe18b01920a2daae71f4ba53bf5efa21583c9eaf1428dcc0276c7d8a422479c43c85a8330459194ee3e03f3e89d62e2d3cd
SSDEEP 6144:ym04//dwbxXbrUajPF2N7pMogDvLxxX5v1r5HVTLN+bc7fi+E1nO:ymDdwbxXbrU2y6jDv3d1dVUed
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0918580c2b042d3349d6cf2c53f88b0b

.exe 390KB

0918580c2b042d3349d6cf2c53f88b0b

IMPHASH 12a660ec02c5f1f370d2b42a8031f3e8
SHA256 dc598f9de8139e8eb4d6db7f9e49b847f17b2dc1d8674a3b4eb047b0ceb4f011
MD5 0918580c2b042d3349d6cf2c53f88b0b
SHA1 272ed8c0352dfcc1255cc4a87c96cef8c3164d4d
SHA512 2b435a24333049af2e328108fde7bfe18b01920a2daae71f4ba53bf5efa21583c9eaf1428dcc0276c7d8a422479c43c85a8330459194ee3e03f3e89d62e2d3cd
SSDEEP 6144:ym04//dwbxXbrUajPF2N7pMogDvLxxX5v1r5HVTLN+bc7fi+E1nO:ymDdwbxXbrU2y6jDv3d1dVUed
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

54528

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatA FindFirstChangeNotificationW GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterA DisableThreadLibraryCalls TerminateProcess GetCurrentProcessId GetVersionExA EnumDateFormatsW FindNextFileW CopyFileExA BuildCommDCBAndTimeoutsA VirtualUnlock WriteProfileStringA VerifyVersionInfoA SetProcessPriorityBoost GetDriveTypeW GetPriorityClass GetCompressedFileSizeA FindNextVolumeMountPointW OutputDebugStringA GetWriteWatch WriteConsoleInputA WriteConsoleInputW GetConsoleTitleA SetComputerNameExW GetTimeZoneInformation LoadLibraryA GetSystemDirectoryA GetDriveTypeA GetShortPathNameW ActivateActCtx GetProfileSectionW DeleteFileW GetCommandLineA InterlockedExchangeAdd ReleaseActCtx FindResourceW FormatMessageA GetModuleFileNameW CreateJobObjectA InitializeCriticalSection SetFirmwareEnvironmentVariableW GetDllDirectoryA GetExitCodeThread GetNamedPipeHandleStateA WritePrivateProfileStringW GetConsoleAliasesLengthW WriteProfileSectionW AddAtomA UpdateResourceW InterlockedDecrement HeapSize _hwrite InterlockedExchange GetStartupInfoW DisconnectNamedPipe GetCPInfoExW GetSystemWow64DirectoryW SetLastError GetConsoleAliasExesA DebugBreak EndUpdateResourceW GetLastError GetStringTypeExW GetConsoleAliasesLengthA DeleteVolumeMountPointW FatalAppExitA ProcessIdToSessionId lstrcmpW SetConsoleCursorPosition SetDefaultCommConfigA VirtualAlloc GetACP CreateActCtxW GetMailslotInfo GetConsoleAliasA _lwrite GetQueuedCompletionStatus GetDiskFreeSpaceExA AddVectoredExceptionHandler WriteConsoleA VirtualProtect ReadConsoleOutputW GetThreadContext BuildCommDCBA GetHandleInformation GetComputerNameA WritePrivateProfileSectionW TryEnterCriticalSection GetPrivateProfileSectionNamesA OpenWaitableTimerA CopyFileW MoveFileW GetVolumePathNameA SetConsoleMode HeapWalk SetComputerNameA FindNextFileA SetEvent UnlockFileEx MoveFileA GetProcAddress DeleteTimerQueueTimer VerifyVersionInfoW GlobalAlloc SetCommMask SetFileShortNameA FreeEnvironmentStringsW FindActCtxSectionStringW GetSystemWindowsDirectoryA GetProfileStringW GlobalGetAtomNameA SetComputerNameW GetConsoleAliasesA CreateMailslotA GetConsoleOutputCP MoveFileWithProgressA GetFileInformationByHandle SetLocalTime FoldStringA CallNamedPipeA GetConsoleAliasExesLengthW FindActCtxSectionStringA OpenSemaphoreW GetModuleHandleExA LoadLibraryW WriteConsoleOutputCharacterA GetFileAttributesA GetTickCount LocalUnlock GetFileTime EnumResourceNamesW OpenFileMappingA GetFileType RaiseException ReadConsoleA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteFileA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsDebuggerPresent GetModuleHandleA TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetOEMCP GetCPInfo IsValidCodePage SetHandleCount GetStdHandle GetStartupInfoA QueryPerformanceCounter GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapReAlloc FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringA LCMapStringW SetFilePointer SetStdHandle ReadFile CloseHandle CreateFileA

user32

CharUpperA

Sharing

General

Malware Config

Signatures

File Explorer

0918580c2b042d3349d6cf2c53f88b0b

kernel32

user32