matanbuchus | 266c03f3b522ed19de27183fdf1bd951a27c8a50c667005c3ac6da869965a86d

General

Target
266c03f3b522ed19de27183fdf1bd951a27c8a50c667005c3ac6da869965a86d
Size 487KB
Sample220629-t4elmsbbbm
SHA256 266c03f3b522ed19de27183fdf1bd951a27c8a50c667005c3ac6da869965a86d
MD5 2233ff739449364c83d9b678e9dcd051
SHA1 83debcd6fa9e07ce1c8bfdcaeb03e0eeb9018b08
SHA512 eb244bea7788e3a84a7cfd84406f456c8a2bcbebf58008b569ebc21aeec7f606110f46a12bd1a1b4a00ef4fb76c8c20655f0267587f10a4c7fe5fd8d84fe1b35
SSDEEP 12288:xmLS4RjiZ4FjyVWFEPNjiwBpA2gKEf985Bjl:xm2IjiZ4FyAFEF5ptZRB
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

matanbuchus

Malware Config

Signatures

Matanbuchus family
matanbuchus

File Explorer

266c03f3b522ed19de27183fdf1bd951a27c8a50c667005c3ac6da869965a86d

.dll 487KB

266c03f3b522ed19de27183fdf1bd951a27c8a50c667005c3ac6da869965a86d

IMPHASH 792c2d440bb7605db782bd8a356a6323
SHA256 266c03f3b522ed19de27183fdf1bd951a27c8a50c667005c3ac6da869965a86d
MD5 2233ff739449364c83d9b678e9dcd051
SHA1 83debcd6fa9e07ce1c8bfdcaeb03e0eeb9018b08
SHA512 eb244bea7788e3a84a7cfd84406f456c8a2bcbebf58008b569ebc21aeec7f606110f46a12bd1a1b4a00ef4fb76c8c20655f0267587f10a4c7fe5fd8d84fe1b35
SSDEEP 12288:xmLS4RjiZ4FjyVWFEPNjiwBpA2gKEf985Bjl:xm2IjiZ4FyAFEF5ptZRB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

376313

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OutputDebugStringA DecodePointer RaiseException GetLastError HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSectionEx DeleteCriticalSection ExitProcess VirtualAlloc CreateFileW CloseHandle GetStringTypeW SetFilePointerEx SetStdHandle GetConsoleMode IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess OutputDebugStringW EnterCriticalSection LeaveCriticalSection RtlUnwind InterlockedFlushSList SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetModuleHandleExW GetModuleFileNameW LCMapStringW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW FlushFileBuffers WriteFile GetConsoleOutputCP WriteConsoleW LoadLibraryA

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

wininet

InternetCloseHandle

kernelbase

FlsAlloc FlsSetValue InitializeCriticalSectionEx

Sharing