9bb68c424f5f4219917ee6455a8149d3

General

Target
9bb68c424f5f4219917ee6455a8149d3
Size 261KB
Sample220714-hfa3rsdef5
SHA256 fddf631af17ddfa39077e7a3a2e837fe5120177e8c2727d809ce0561bef339f1
MD5 9bb68c424f5f4219917ee6455a8149d3
SHA1 70b79231bd4b1654fdbacd1c8b1107fed3257e0b
SHA512 4a95cd404c94ef272979d048e480e55acc11f111d658c2818547df56d95246784a5b0f3fc4ec5ea23aa642caef50fd8a3fbe4742b486555941b4f5fd26f3ac65
SSDEEP 6144:8W9d2eoUXBQgBT3q8AclCpFtU9GND2qH5mWdX:8W9Qe1Rr3q8Ae4ttSwX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9bb68c424f5f4219917ee6455a8149d3

.exe 261KB

9bb68c424f5f4219917ee6455a8149d3

IMPHASH b88da3f1e73518bb3e8d17092b704138
SHA256 fddf631af17ddfa39077e7a3a2e837fe5120177e8c2727d809ce0561bef339f1
MD5 9bb68c424f5f4219917ee6455a8149d3
SHA1 70b79231bd4b1654fdbacd1c8b1107fed3257e0b
SHA512 4a95cd404c94ef272979d048e480e55acc11f111d658c2818547df56d95246784a5b0f3fc4ec5ea23aa642caef50fd8a3fbe4742b486555941b4f5fd26f3ac65
SSDEEP 6144:8W9d2eoUXBQgBT3q8AclCpFtU9GND2qH5mWdX:8W9Qe1Rr3q8Ae4ttSwX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

60304

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatA FindFirstChangeNotificationW GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterA DisableThreadLibraryCalls TerminateProcess GetCurrentProcessId GetVersionExA EnumDateFormatsA FindNextFileW CopyFileExA BuildCommDCBAndTimeoutsA VirtualUnlock WriteProfileStringA VerifyVersionInfoA SetProcessPriorityBoost GetDriveTypeW GetPriorityClass GetCompressedFileSizeA FindNextVolumeMountPointW OutputDebugStringA GetWriteWatch WriteConsoleInputA WriteConsoleInputW GetConsoleTitleA SetComputerNameExA GetTimeZoneInformation LoadLibraryW GetSystemDirectoryA GetDriveTypeA LoadLibraryA GetShortPathNameA ActivateActCtx GetProfileSectionA DeleteFileW GetCommandLineA InterlockedExchangeAdd ReleaseActCtx FindResourceW FormatMessageA GetModuleFileNameW CreateJobObjectW InitializeCriticalSection SetFirmwareEnvironmentVariableW GetDllDirectoryW GetExitCodeThread GetNamedPipeHandleStateA WritePrivateProfileStringW GetConsoleAliasesLengthW WriteProfileSectionA AddAtomA UpdateResourceW InterlockedDecrement HeapSize _hwrite InterlockedExchange GetStartupInfoW DisconnectNamedPipe GetCPInfoExA GetSystemWow64DirectoryW SetLastError GetConsoleAliasExesA DebugBreak EndUpdateResourceW GetLastError GetStringTypeExW GetConsoleAliasesLengthA DeleteVolumeMountPointW FatalAppExitA ProcessIdToSessionId lstrcmpW SetConsoleCursorPosition SetDefaultCommConfigA VirtualAlloc GetOEMCP CreateActCtxW GetMailslotInfo GetConsoleAliasW _lwrite GetDiskFreeSpaceExA AddVectoredExceptionHandler WriteConsoleA VirtualProtect ReadConsoleOutputW GetThreadContext BuildCommDCBA WritePrivateProfileStringA GetHandleInformation GetComputerNameA WritePrivateProfileSectionW TryEnterCriticalSection GetPrivateProfileSectionNamesA OpenWaitableTimerW CopyFileW MoveFileW GetVolumePathNameA GetConsoleMode HeapWalk SetComputerNameA FindNextFileA ResetEvent UnlockFileEx MoveFileA GetProcAddress GetOverlappedResult ChangeTimerQueueTimer VerifyVersionInfoW GlobalAlloc SetCommMask SetFileShortNameW FreeEnvironmentStringsW FindActCtxSectionStringW GetSystemWindowsDirectoryA GetProfileStringW GlobalGetAtomNameA SetComputerNameW GetConsoleAliasesA CreateMailslotW EnumDateFormatsW GetConsoleOutputCP MoveFileWithProgressA SetLocalTime FoldStringA CallNamedPipeA GetConsoleAliasExesLengthW FindActCtxSectionStringA CopyFileExW OpenSemaphoreA GetModuleHandleExA WriteConsoleOutputCharacterA GetFileAttributesA GetTickCount LocalUnlock GetFileTime EnumResourceNamesW OpenFileMappingA GetFileType RaiseException ReadConsoleA GetFileInformationByHandle InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind DeleteFileA HeapValidate IsBadReadPtr TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW OutputDebugStringW ExitProcess GetACP GetCPInfo IsValidCodePage SetHandleCount GetStartupInfoA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringA LCMapStringW SetFilePointer SetStdHandle ReadFile CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

9bb68c424f5f4219917ee6455a8149d3

kernel32