20648da93a448a50c0b70dbec844eec2

General

Target
20648da93a448a50c0b70dbec844eec2
Size 287KB
Sample220714-jc4rcafdh6
SHA256 23828ba619b892cb1dbd2d3bc43b3ebe0e03aa28137b717fbbac26e4f871d70e
MD5 20648da93a448a50c0b70dbec844eec2
SHA1 684f7623cae65bbbc2acbd0b45e9161c75d3e756
SHA512 82c6fdb4ad5dcb1f6be398a0c12db94a515b5035244cfca2bf885fc4df5dc4475544cb77f9d0959a2b0c93a9fb663e6217b359e82af8cdd225865d3a64eaf440
SSDEEP 6144:7RPH/moELWh1q2FNSETLD7LeDRk38084g:7R/JELWho2FlnLfs08
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

20648da93a448a50c0b70dbec844eec2

.exe 287KB

20648da93a448a50c0b70dbec844eec2

IMPHASH 12a660ec02c5f1f370d2b42a8031f3e8
SHA256 23828ba619b892cb1dbd2d3bc43b3ebe0e03aa28137b717fbbac26e4f871d70e
MD5 20648da93a448a50c0b70dbec844eec2
SHA1 684f7623cae65bbbc2acbd0b45e9161c75d3e756
SHA512 82c6fdb4ad5dcb1f6be398a0c12db94a515b5035244cfca2bf885fc4df5dc4475544cb77f9d0959a2b0c93a9fb663e6217b359e82af8cdd225865d3a64eaf440
SSDEEP 6144:7RPH/moELWh1q2FNSETLD7LeDRk38084g:7R/JELWho2FlnLfs08
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

54528

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatA FindFirstChangeNotificationW GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterA DisableThreadLibraryCalls TerminateProcess GetCurrentProcessId GetVersionExA EnumDateFormatsW FindNextFileW CopyFileExA BuildCommDCBAndTimeoutsA VirtualUnlock WriteProfileStringA VerifyVersionInfoA SetProcessPriorityBoost GetDriveTypeW GetPriorityClass GetCompressedFileSizeA FindNextVolumeMountPointW OutputDebugStringA GetWriteWatch WriteConsoleInputA WriteConsoleInputW GetConsoleTitleA SetComputerNameExW GetTimeZoneInformation LoadLibraryA GetSystemDirectoryA GetDriveTypeA GetShortPathNameW ActivateActCtx GetProfileSectionW DeleteFileW GetCommandLineA InterlockedExchangeAdd ReleaseActCtx FindResourceW FormatMessageA GetModuleFileNameW CreateJobObjectA InitializeCriticalSection SetFirmwareEnvironmentVariableW GetDllDirectoryA GetExitCodeThread GetNamedPipeHandleStateA WritePrivateProfileStringW GetConsoleAliasesLengthW WriteProfileSectionW AddAtomA UpdateResourceW InterlockedDecrement HeapSize _hwrite InterlockedExchange GetStartupInfoW DisconnectNamedPipe GetCPInfoExW GetSystemWow64DirectoryW SetLastError GetConsoleAliasExesA DebugBreak EndUpdateResourceW GetLastError GetStringTypeExW GetConsoleAliasesLengthA DeleteVolumeMountPointW FatalAppExitA ProcessIdToSessionId lstrcmpW SetConsoleCursorPosition SetDefaultCommConfigA VirtualAlloc GetACP CreateActCtxW GetMailslotInfo GetConsoleAliasA _lwrite GetQueuedCompletionStatus GetDiskFreeSpaceExA AddVectoredExceptionHandler WriteConsoleA VirtualProtect ReadConsoleOutputW GetThreadContext BuildCommDCBA GetHandleInformation GetComputerNameA WritePrivateProfileSectionW TryEnterCriticalSection GetPrivateProfileSectionNamesA OpenWaitableTimerA CopyFileW MoveFileW GetVolumePathNameA SetConsoleMode HeapWalk SetComputerNameA FindNextFileA SetEvent UnlockFileEx MoveFileA GetProcAddress DeleteTimerQueueTimer VerifyVersionInfoW GlobalAlloc SetCommMask SetFileShortNameA FreeEnvironmentStringsW FindActCtxSectionStringW GetSystemWindowsDirectoryA GetProfileStringW GlobalGetAtomNameA SetComputerNameW GetConsoleAliasesA CreateMailslotA GetConsoleOutputCP MoveFileWithProgressA GetFileInformationByHandle SetLocalTime FoldStringA CallNamedPipeA GetConsoleAliasExesLengthW FindActCtxSectionStringA OpenSemaphoreW GetModuleHandleExA LoadLibraryW WriteConsoleOutputCharacterA GetFileAttributesA GetTickCount LocalUnlock GetFileTime EnumResourceNamesW OpenFileMappingA GetFileType RaiseException ReadConsoleA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteFileA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsDebuggerPresent GetModuleHandleA TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetOEMCP GetCPInfo IsValidCodePage SetHandleCount GetStdHandle GetStartupInfoA QueryPerformanceCounter GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapReAlloc FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringA LCMapStringW SetFilePointer SetStdHandle ReadFile CloseHandle CreateFileA

user32

CharUpperA

Sharing

General

Malware Config

Signatures

File Explorer

20648da93a448a50c0b70dbec844eec2

kernel32

user32