862e22c2c3fad4741c689f93686cec6d

General

Target
862e22c2c3fad4741c689f93686cec6d
Size 428KB
Sample220629-ldmkkaaba3
SHA256 539b93f7453bae7aa4bb960cdca9cf90d3b94ca64c0e90b96e4c1b150e843d84
MD5 862e22c2c3fad4741c689f93686cec6d
SHA1 616999ca7eea175abcea017ecd5cd219a2050da7
SHA512 655c27ff3db5829783cac40f0651dc03c382f5eaf65c5aa770dc829125d6d3d2dc7764e583ddc43d655d66d166628413b1703fa524392c4c24d483a9d9da8e00
SSDEEP 6144:Qsp9ErD03svy+zGEMrDwyKJPUpge5vyfxN9ROH8C1mdEFQETNdITUC/CK96ouQEF:QPDzzjMnwhJPcgYvyfD9JWTNrC/d1E
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

862e22c2c3fad4741c689f93686cec6d

.dll 428KB

862e22c2c3fad4741c689f93686cec6d

IMPHASH 90744814dc538303afb767d2b0a66a6b
SHA256 539b93f7453bae7aa4bb960cdca9cf90d3b94ca64c0e90b96e4c1b150e843d84
MD5 862e22c2c3fad4741c689f93686cec6d
SHA1 616999ca7eea175abcea017ecd5cd219a2050da7
SHA512 655c27ff3db5829783cac40f0651dc03c382f5eaf65c5aa770dc829125d6d3d2dc7764e583ddc43d655d66d166628413b1703fa524392c4c24d483a9d9da8e00
SSDEEP 6144:Qsp9ErD03svy+zGEMrDwyKJPUpge5vyfxN9ROH8C1mdEFQETNdITUC/CK96ouQEF:QPDzzjMnwhJPcgYvyfD9JWTNrC/d1E
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

5168

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetMenuContextHelpId GetThreadDesktop DialogBoxParamA LoadCursorA GetClipCursor GetWindowRgn GetTabbedTextExtentA GetClassNameA GetCaretPos LoadBitmapW LoadKeyboardLayoutA GetWindowThreadProcessId GetMenuItemCount GetMenuItemInfoA EnumWindows GetKeyNameTextA LoadStringW IsWinEventHookInstalled

gdi32

GetROP2 FillPath GetTextCharsetInfo GetDIBits GdiFlush GetCurrentPositionEx

secur32

InitializeSecurityContextW GetUserNameExA FreeCredentialsHandle

msvcrt

strcoll vfwprintf fgetwc fgetws fputws fputwc

winspool.drv

FindClosePrinterChangeNotification

wininet

FindFirstUrlCacheEntryExW FindCloseUrlCache

comdlg32

GetFileTitleA

kernel32

GetStartupInfoA GetCurrencyFormatA GetPrivateProfileSectionA GlobalLock GetThreadPriority GetConsoleScreenBufferInfo GetPriorityClass GetPrivateProfileSectionNamesW VirtualQueryEx LocalLock FindActCtxSectionStringW GetFileType ExpandEnvironmentStringsA ExitProcess GetTapePosition lstrcpynW GetBinaryTypeA GlobalAddAtomW GetModuleFileNameA GetVolumePathNameW

powrprof

GetCurrentPowerPolicies

advapi32

GetSecurityDescriptorControl RegGetValueA

version

GetFileVersionInfoA

ws2_32

shutdown

Name

.text

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

188KB

Virtual Size

187KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

76KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.crt1

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.crt

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

888B

Characteristics

IMAGE_SCN_MEM_READ

Name

.reloc

Size

28KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

862e22c2c3fad4741c689f93686cec6d

user32

gdi32

secur32

msvcrt

winspool.drv

wininet

comdlg32

kernel32

powrprof

advapi32

version

ws2_32