861db49bb2e1608fd6532aa7490a94a9

General

Target
861db49bb2e1608fd6532aa7490a94a9
Size 192KB
Sample220714-ftt2paaac4
SHA256 149f548d6b138e57f21181866fb0e89dfe1ec7961aa8e2b4931f6da58fe4f1bf
MD5 861db49bb2e1608fd6532aa7490a94a9
SHA1 e547a39f87a6bf86feb16d7ad81e6466b1c0e02e
SHA512 34d1a995648121239d1127afbed7341012ae4dfcf6645be7a70f16cd021f2e21d4c6091fe21fd98f2dbe6a42346564bcd3472e74e35cb4848a9538195d2d8c2f
SSDEEP 3072:8n8BhMDlXy1TcOMhM3Ec9q1pl7i+EPz0Ro3dO9NcsxkgaBCha:ZIRQcO4M8nl2+c0Rr5iga
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

861db49bb2e1608fd6532aa7490a94a9

.exe 192KB

861db49bb2e1608fd6532aa7490a94a9

IMPHASH 3344a4363933f71c47bcc2c247390173
SHA256 149f548d6b138e57f21181866fb0e89dfe1ec7961aa8e2b4931f6da58fe4f1bf
MD5 861db49bb2e1608fd6532aa7490a94a9
SHA1 e547a39f87a6bf86feb16d7ad81e6466b1c0e02e
SHA512 34d1a995648121239d1127afbed7341012ae4dfcf6645be7a70f16cd021f2e21d4c6091fe21fd98f2dbe6a42346564bcd3472e74e35cb4848a9538195d2d8c2f
SSDEEP 3072:8n8BhMDlXy1TcOMhM3Ec9q1pl7i+EPz0Ro3dO9NcsxkgaBCha:ZIRQcO4M8nl2+c0Rr5iga
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

80797

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoW _lwrite GetCommTimeouts GetSystemDirectoryW CreateEventA WriteConsoleW VerifyVersionInfoA BuildCommDCBA AddConsoleAliasW HeapLock PeekConsoleInputW EnumDateFormatsW ResetEvent UnregisterWaitEx LoadLibraryA InterlockedDecrement WaitNamedPipeA FindResourceExW DeleteTimerQueueEx GetFirmwareEnvironmentVariableW GetModuleFileNameW BeginUpdateResourceA GetConsoleAliasExesLengthW UnhandledExceptionFilter DeleteFileA WriteConsoleOutputCharacterW WriteConsoleA LocalAlloc GetProcAddress GetConsoleAliasesLengthA GetSystemWindowsDirectoryA FindFirstChangeNotificationW GlobalAddAtomW WritePrivateProfileStringA EnumResourceNamesW SearchPathA CreateDirectoryA RemoveDirectoryW SetFileApisToOEM GetCurrentDirectoryA SetFileAttributesW CreateMutexA SetProcessWorkingSetSize GetLongPathNameA GetUserDefaultLangID SetLastError GetCurrentProcessId GetComputerNameExA FindFirstFileW BuildCommDCBAndTimeoutsW EnterCriticalSection EnumCalendarInfoA GetDllDirectoryW GetConsoleAliasExesW GlobalMemoryStatus ReadConsoleOutputCharacterW EnumSystemLocalesW GetComputerNameA GetLastError EnumTimeFormatsA LoadLibraryW HeapFree HeapAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent SetFilePointer LeaveCriticalSection SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess InitializeCriticalSectionAndSpinCount RtlUnwind HeapCreate WriteFile GetStdHandle DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId ReadFile WideCharToMultiByte GetConsoleCP GetConsoleMode SetHandleCount GetFileType CloseHandle FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime SetStdHandle FlushFileBuffers Sleep CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize MultiByteToWideChar HeapReAlloc SetEndOfFile GetProcessHeap LCMapStringW GetStringTypeW CreateFileW

gdi32

GetTextExtentExPointW

Sharing

General

Malware Config

Signatures

File Explorer

861db49bb2e1608fd6532aa7490a94a9

kernel32

gdi32