e3c48c72d0d090ac01bff8bf6d54c08a6fedcda2e527d424d6f64a70016d2ba6

General

Target
e3c48c72d0d090ac01bff8bf6d54c08a6fedcda2e527d424d6f64a70016d2ba6
Size 364KB
Sample220625-c2aq8saggp
SHA256 e3c48c72d0d090ac01bff8bf6d54c08a6fedcda2e527d424d6f64a70016d2ba6
MD5 d00f0818093c5960cb3ea0de3b93f341
SHA1 a7bdf8da3a30ac98a0df9fd0bd50f61a330056f1
SHA512 681fe9460252b315e6bc976793b0a594cfc501ad574b03525597aa0d5342201672811cf6bd86b5412d9a43df5500e43f28bdab1e5ca361e431532ecce5e5ca05
SSDEEP 6144:gzAILNLdvVA988yVzjtSYnY8NcE2mzWHRYLk1KZELZkwhg2x9xbYn4g2zlw:gLZ6lyVJnNNjzW9wZELOqc4g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e3c48c72d0d090ac01bff8bf6d54c08a6fedcda2e527d424d6f64a70016d2ba6

.dll 364KB

e3c48c72d0d090ac01bff8bf6d54c08a6fedcda2e527d424d6f64a70016d2ba6

IMPHASH 2577f2cf193fc75add086dfe65bc3c0d
SHA256 e3c48c72d0d090ac01bff8bf6d54c08a6fedcda2e527d424d6f64a70016d2ba6
MD5 d00f0818093c5960cb3ea0de3b93f341
SHA1 a7bdf8da3a30ac98a0df9fd0bd50f61a330056f1
SHA512 681fe9460252b315e6bc976793b0a594cfc501ad574b03525597aa0d5342201672811cf6bd86b5412d9a43df5500e43f28bdab1e5ca361e431532ecce5e5ca05
SSDEEP 6144:gzAILNLdvVA988yVzjtSYnY8NcE2mzWHRYLk1KZELZkwhg2x9xbYn4g2zlw:gLZ6lyVJnNNjzW9wZELOqc4g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

125192

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId CloseHandle TlsAlloc GetModuleFileNameA LoadLibraryA VirtualProtectEx Sleep WideCharToMultiByte TlsSetValue ExitProcess HeapSize GetLastError HeapFree HeapAlloc GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetProcAddress GetModuleHandleA WriteFile GetStdHandle GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP TlsGetValue TlsFree SetLastError MultiByteToWideChar LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime RaiseException InitializeCriticalSection RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA

advapi32

RegisterServiceCtrlHandlerA RegCloseKey RegEnumKeyA RegOpenKeyA FreeSid OpenSCManagerA SetSecurityDescriptorOwner SetServiceStatus AllocateAndInitializeSid QueryServiceStatus RegOpenKeyExA OpenServiceA OpenProcessToken StartServiceCtrlDispatcherA OpenThreadToken SetSecurityDescriptorGroup RegSetValueExA RegQueryValueExA RegDeleteKeyA InitializeSecurityDescriptor SetSecurityDescriptorDacl LookupPrivilegeValueA RegCreateKeyExA

mswsock

EnumProtocolsA GetNameByTypeA SetServiceA

comsvcs

MTSCreateActivity

Sharing

General

Malware Config

Signatures

File Explorer

e3c48c72d0d090ac01bff8bf6d54c08a6fedcda2e527d424d6f64a70016d2ba6

kernel32

advapi32

mswsock

comsvcs