9a2f69da06c694d0f380cae6df185165

General

Target
9a2f69da06c694d0f380cae6df185165
Size 412KB
Sample220623-lbbehsfbg4
SHA256 3b4c19970875da5f70690fd8fb319b3a9d62f3476ece49dcc95140d037bf148b
MD5 9a2f69da06c694d0f380cae6df185165
SHA1 681c907ae5776dbdba6e3dc9299f21547236e118
SHA512 e305dc59aa6b4c6e8510331b271c9fc9c7f0182a57328f741bd045b252ccff22102b69919f03f73b0be48df1ce8cb07a42ee83a348b46c2eef76e75f7cf5b706
SSDEEP 12288:S/2PB8OGr0+BJsqmJ7Hv5GUXAQO8eOStS:rGoi255GUQQheQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9a2f69da06c694d0f380cae6df185165

.exe 412KB

9a2f69da06c694d0f380cae6df185165

IMPHASH 927ae337b8ac2552bae9fd0b2ef78d45
SHA256 3b4c19970875da5f70690fd8fb319b3a9d62f3476ece49dcc95140d037bf148b
MD5 9a2f69da06c694d0f380cae6df185165
SHA1 681c907ae5776dbdba6e3dc9299f21547236e118
SHA512 e305dc59aa6b4c6e8510331b271c9fc9c7f0182a57328f741bd045b252ccff22102b69919f03f73b0be48df1ce8cb07a42ee83a348b46c2eef76e75f7cf5b706
SSDEEP 12288:S/2PB8OGr0+BJsqmJ7Hv5GUXAQO8eOStS:rGoi255GUQQheQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

59584

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugBreakProcess FindFirstChangeNotificationA GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterW DisableThreadLibraryCalls TerminateProcess GetProcessId VerifyVersionInfoW EnumDateFormatsW FindNextFileW CopyFileExA BuildCommDCBAndTimeoutsW VirtualUnlock WriteProfileStringA VerifyVersionInfoA SetProcessPriorityBoost FindFirstChangeNotificationW GetFileType DeleteFileA FindNextVolumeMountPointA OutputDebugStringA ResetWriteWatch WriteConsoleInputA WriteConsoleInputW GetConsoleTitleW SetComputerNameExW GetTimeZoneInformation LoadLibraryA GetSystemDirectoryA GetDriveTypeW BuildCommDCBAndTimeoutsA GetShortPathNameW ActivateActCtx GetProfileSectionA DeleteFileW GetCommandLineW InterlockedIncrement InterlockedExchangeAdd AddRefActCtx FindResourceA FormatMessageA GetModuleFileNameW CreateJobObjectW InitializeCriticalSection SetFirmwareEnvironmentVariableW GetDllDirectoryA GetExitCodeThread WritePrivateProfileStringW GetConsoleAliasesLengthW WriteProfileSectionW AddAtomA UpdateResourceW InterlockedDecrement GetVersionExA HeapSize _hwrite InterlockedExchange GetStartupInfoW DisconnectNamedPipe GetCPInfoExW GetSystemWow64DirectoryW SetLastError GetPrivateProfileIntA GetConsoleAliasExesW DebugBreak EndUpdateResourceW GetLastError GetStringTypeW DeleteVolumeMountPointA OpenFileMappingA SetDefaultCommConfigW VirtualAlloc lstrcpyA TerminateThread GetACP lstrcatA GetConsoleAliasA _lwrite GetQueuedCompletionStatus GetNamedPipeHandleStateA GetDiskFreeSpaceExW RemoveVectoredExceptionHandler WriteConsoleW VirtualProtect ReadConsoleOutputA SetThreadContext BuildCommDCBA ReleaseActCtx GetHandleInformation GetComputerNameW WritePrivateProfileSectionW TryEnterCriticalSection GetPrivateProfileSectionNamesA OpenWaitableTimerW CopyFileW GetVolumePathNameA SetConsoleMode HeapSetInformation SetComputerNameA FindNextFileA SetEvent UnlockFileEx GetProcAddress DeleteTimerQueueTimer MoveFileA GlobalAlloc SetCommMask SetFileShortNameA FreeEnvironmentStringsW FindActCtxSectionStringW GetSystemWindowsDirectoryA GetProfileStringA GetConsoleTitleA GlobalGetAtomNameA SetComputerNameW GetConsoleAliasesA CreateMailslotA GetConsoleOutputCP MoveFileWithProgressW GetFileInformationByHandle SetLocalTime FoldStringA CallNamedPipeA GetConsoleAliasExesLengthW GetCurrentActCtx OpenSemaphoreW GetModuleHandleExA LoadLibraryW GetFileAttributesA GetTickCount GetConsoleAliasesLengthA LocalUnlock GetFileTime EnumResourceNamesW OpenFileMappingW UnhandledExceptionFilter GetCompressedFileSizeW GetThreadPriority ReadConsoleA WriteConsoleOutputCharacterW AssignProcessToJobObject EnumDateFormatsA Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind WideCharToMultiByte HeapValidate IsBadReadPtr SetUnhandledExceptionFilter GetCurrentProcess IsDebuggerPresent GetModuleHandleA TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetOEMCP GetCPInfo IsValidCodePage SetStdHandle WriteFile GetConsoleCP GetConsoleMode QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetStartupInfoA HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc HeapReAlloc FlushFileBuffers OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeA GetLocaleInfoA LCMapStringA LCMapStringW WriteConsoleA SetFilePointer CreateFileA CloseHandle

user32

CharUpperA

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

9a2f69da06c694d0f380cae6df185165

kernel32

user32

winhttp