629935fbf7e8f375c8820050573e84b3

Sharing

Copy URL Twitter E-mail

General

Target
629935fbf7e8f375c8820050573e84b3
Size 179KB
Sample220714-hfxxjadfa4
SHA256 76f375cb470ac2091675d70952b1f19c28dd5264f09593ee4cea90e47f084fbd
MD5 629935fbf7e8f375c8820050573e84b3
SHA1 5ead478e1acc98b25cd5fc6bf9fe493c0d1ca39b
SHA512 6454b32791e2a62e096299441c3deb7ef2abe13ebe4279bed8ff7c283f29b2bdac6b97c1f4d990c2a826f4d5da9a0331fcfcf271f9208b5dd1ab8bf25a8bd3f9
SSDEEP 1536:Gn9yZtyTPhdsWMuR7Xd2SqXEEuoEqr0P1XZ5dDxrnQ3tk6wsaOSVAz:O9yZ0TrsWM2Ztq1u4QPJMlaH+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

629935fbf7e8f375c8820050573e84b3

.exe 179KB

629935fbf7e8f375c8820050573e84b3

IMPHASH 871cb2437d28ce529ddfbb3879adedb2
SHA256 76f375cb470ac2091675d70952b1f19c28dd5264f09593ee4cea90e47f084fbd
MD5 629935fbf7e8f375c8820050573e84b3
SHA1 5ead478e1acc98b25cd5fc6bf9fe493c0d1ca39b
SHA512 6454b32791e2a62e096299441c3deb7ef2abe13ebe4279bed8ff7c283f29b2bdac6b97c1f4d990c2a826f4d5da9a0331fcfcf271f9208b5dd1ab8bf25a8bd3f9
SSDEEP 1536:Gn9yZtyTPhdsWMuR7Xd2SqXEEuoEqr0P1XZ5dDxrnQ3tk6wsaOSVAz:O9yZ0TrsWM2Ztq1u4QPJMlaH+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

53732

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthA OpenEventW InterlockedExchange GetLocaleInfoA GetLongPathNameW InterlockedDecrement _lwrite WriteConsoleInputA GetSystemDirectoryW MoveFileExA CreateEventA VerifyVersionInfoW WaitNamedPipeA ReadConsoleInputA GlobalFree GetCPInfoExW BeginUpdateResourceW EnumCalendarInfoExW MoveFileA ReadConsoleOutputCharacterA GetConsoleAliasesLengthW GlobalAlloc GetModuleHandleW EnumResourceNamesW LocalAlloc RemoveDirectoryA GetCalendarInfoA CommConfigDialogW SetFileAttributesA GetCommTimeouts OpenJobObjectA LCMapStringW GetAtomNameA GetFileAttributesW SetConsoleTitleW ReplaceFileA CreateJobObjectW GetProcessWorkingSetSize GetBinaryTypeA GetSystemDefaultLangID GetUserDefaultLangID GetConsoleAliasA GetTickCount GetCurrentProcess SetLastError GetPrivateProfileIntA FreeLibrary GetEnvironmentStringsW GetFileTime FindResourceExW GetConsoleMode GetDiskFreeSpaceA GetConsoleAliasExesW WaitForMultipleObjects SetDefaultCommConfigA LoadLibraryA GetProcAddress LoadLibraryW GetStringTypeW MultiByteToWideChar WideCharToMultiByte GetLastError HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent HeapAlloc HeapCreate HeapFree SetUnhandledExceptionFilter ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter IsDebuggerPresent TerminateProcess LeaveCriticalSection EnterCriticalSection Sleep RtlUnwind HeapSize

user32

ClientToScreen

gdi32

GetFontUnicodeRanges

ole32

CoRevokeMallocSpy

winhttp

WinHttpOpen

Name

.text

Size

90KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

66KB

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.hake

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kicebuz

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lutujan

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hijiloc

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ