6206b5fd4a594971cb2dfd54acb5812f

General

Target
6206b5fd4a594971cb2dfd54acb5812f
Size 322KB
Sample220715-d642badcan
SHA256 d45c0b79f446e702f1cc3cdd54dbf2cecbe6757941ea9b2707458e1c0334d7ec
MD5 6206b5fd4a594971cb2dfd54acb5812f
SHA1 9ba58ede1db8c4ea2921fdb570ea16ee0a0a5b0f
SHA512 915451af41b5069cf47109c8c15cdd1ab112f3b9acdc0246eaea84cdd6ff4e62e63f8c63548492f9a918d813059b7e73c787d4cef56fd871df85039120b1e846
SSDEEP 6144:9x5ov4DJxkWWtX+k1q1JCezZBwzgcZdAqlAAGVMc:poW3Lgucq1JCezbSZdT70t
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6206b5fd4a594971cb2dfd54acb5812f

.exe 322KB

6206b5fd4a594971cb2dfd54acb5812f

IMPHASH 66bf435feaaa12e148aa302420048fbf
SHA256 d45c0b79f446e702f1cc3cdd54dbf2cecbe6757941ea9b2707458e1c0334d7ec
MD5 6206b5fd4a594971cb2dfd54acb5812f
SHA1 9ba58ede1db8c4ea2921fdb570ea16ee0a0a5b0f
SHA512 915451af41b5069cf47109c8c15cdd1ab112f3b9acdc0246eaea84cdd6ff4e62e63f8c63548492f9a918d813059b7e73c787d4cef56fd871df85039120b1e846
SSDEEP 6144:9x5ov4DJxkWWtX+k1q1JCezZBwzgcZdAqlAAGVMc:poW3Lgucq1JCezbSZdT70t
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

55232

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW GetNamedPipeHandleStateW GetQueuedCompletionStatus FillConsoleOutputCharacterW EnumSystemCodePagesA LocalSize GetVolumeNameForVolumeMountPointA WriteConsoleInputA EnumDateFormatsW FindNextFileA CopyFileExA BuildCommDCBAndTimeoutsW VerifyVersionInfoA VirtualLock SetVolumeLabelW UnlockFile GetProfileSectionA VerifyVersionInfoW IsSystemResumeAutomatic GetProcessPriorityBoost GlobalGetAtomNameW DeleteFileW FindNextVolumeMountPointW TlsSetValue LoadResource GetConsoleTitleA GetComputerNameExW OpenEventW GetModuleHandleA GetSystemDirectoryW GetDriveTypeW BuildCommDCBAndTimeoutsA GetShortPathNameW ReleaseActCtx GetCommandLineA InterlockedExchange CopyFileW CreateActCtxW FormatMessageW GetModuleFileNameA EnterCriticalSection FindNextVolumeW GetExitCodeThread LoadLibraryA CreateNamedPipeW GetUserDefaultLCID GetConsoleAliasesLengthA WriteProfileSectionW AddAtomA InterlockedDecrement HeapSize _hread InterlockedCompareExchange GetStartupInfoA CreateMailslotW GetCPInfoExA GetSystemWow64DirectoryW SetLastError GetPrivateProfileIntW GetConsoleAliasExesLengthA DebugBreak EndUpdateResourceA GetTickCount OpenFileMappingA GetDefaultCommConfigA VirtualAlloc TerminateThread GetACP GetDiskFreeSpaceExW DefineDosDeviceW TerminateProcess EnumResourceLanguagesW GetCPInfoExW SetConsoleTextAttribute GlobalGetAtomNameA IsProcessInJob MoveFileA WriteConsoleW GetProcAddress lstrcatA WriteConsoleOutputA WritePrivateProfileStructW GetDriveTypeA GetFileAttributesA CopyFileA GetComputerNameExA ResetEvent MoveFileW FreeLibrary GetCommState InterlockedExchangeAdd DeleteFiber EnumDateFormatsA SetVolumeMountPointA GetOverlappedResult GlobalAlloc SetThreadPriorityBoost SetFileShortNameW GetFileAttributesW SetCalendarInfoA ConvertFiberToThread SetComputerNameA GetConsoleAliasesA EnumDateFormatsExW SetTimeZoneInformation GetConsoleOutputCP MoveFileWithProgressA GetStdHandle SetLocalTime GetStringTypeW EnumSystemLocalesA GetConsoleAliasesLengthW CreateMemoryResourceNotification OpenSemaphoreW GetModuleHandleExA LoadLibraryW GetCurrentActCtx SetFileTime GetFileType GetNamedPipeHandleStateA UnhandledExceptionFilter SetProcessShutdownParameters lstrcpynA GlobalUnWire FillConsoleOutputCharacterA GetCompressedFileSizeW ReadConsoleA MapUserPhysicalPages WriteConsoleOutputCharacterW OpenJobObjectW CreateFileW SetTimerQueueTimer GetFileInformationByHandle SetUnhandledExceptionFilter RaiseException HeapValidate IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetCurrentProcess IsDebuggerPresent GetLastError SetFilePointer SetStdHandle WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode InterlockedIncrement GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree Sleep ExitProcess SetHandleCount QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA OutputDebugStringW FlushFileBuffers WriteConsoleA MultiByteToWideChar GetStringTypeA LCMapStringA LCMapStringW GetLocaleInfoA CreateFileA CloseHandle ReadFile DeleteFileA

user32

CharUpperA

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

6206b5fd4a594971cb2dfd54acb5812f

kernel32

user32

winhttp