47dadba7201b4ee3f6785d3c8e81a114

General

Target
47dadba7201b4ee3f6785d3c8e81a114
Size 308KB
Sample220715-efpdlsgch8
SHA256 6dfa4121e1ebe944db220df67476e41fe613dd649836b2f529121749f94db57d
MD5 47dadba7201b4ee3f6785d3c8e81a114
SHA1 9bca75174022c0d6f7fb768e4bb956d0773ecbcd
SHA512 9e83eef72b9418ca3ac4d1effc8cb5047941ff4013fb639b221689ecf518c9b2a5ed5ea247d845fd21d023e489e4fcf0ae25bdf8d6cd95ee08459c56af088908
SSDEEP 6144:GwCw8Zy/M+sDSFOmpNKNPYUXFMT+enZdIf2iumFnVoQl:BNHWmACNKNPYUX3eZdJzmRh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

47dadba7201b4ee3f6785d3c8e81a114

.exe 308KB

47dadba7201b4ee3f6785d3c8e81a114

IMPHASH d402223c1c399d65c68ec4ec74929f01
SHA256 6dfa4121e1ebe944db220df67476e41fe613dd649836b2f529121749f94db57d
MD5 47dadba7201b4ee3f6785d3c8e81a114
SHA1 9bca75174022c0d6f7fb768e4bb956d0773ecbcd
SHA512 9e83eef72b9418ca3ac4d1effc8cb5047941ff4013fb639b221689ecf518c9b2a5ed5ea247d845fd21d023e489e4fcf0ae25bdf8d6cd95ee08459c56af088908
SSDEEP 6144:GwCw8Zy/M+sDSFOmpNKNPYUXFMT+enZdIf2iumFnVoQl:BNHWmACNKNPYUX3eZdJzmRh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

46832

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNamedPipeHandleStateW GetQueuedCompletionStatus FillConsoleOutputCharacterW EnumSystemCodePagesW LocalSize GetVolumeNameForVolumeMountPointA WriteConsoleInputA EnumDateFormatsW FindNextFileA CopyFileExA BuildCommDCBAndTimeoutsW VerifyVersionInfoA VirtualLock SetVolumeLabelW UnlockFile GetProfileSectionA VerifyVersionInfoW IsSystemResumeAutomatic GetProcessPriorityBoost GlobalGetAtomNameW DeleteFileW FindNextVolumeMountPointW TlsSetValue LoadResource GetConsoleTitleA GetComputerNameExW OpenEventW GetModuleHandleA GetSystemDirectoryW GetDriveTypeW BuildCommDCBAndTimeoutsA GetShortPathNameW ReleaseActCtx GetCommandLineA InterlockedExchange CopyFileW CreateActCtxW FormatMessageW GetModuleFileNameW EnterCriticalSection FindNextVolumeW GetExitCodeThread LoadLibraryA CreateNamedPipeW GetUserDefaultLCID GetConsoleAliasesLengthA WriteProfileSectionW AddAtomA InterlockedDecrement HeapSize _hread InterlockedCompareExchange GetStartupInfoA CreateMailslotW GetCPInfoExA GetSystemWow64DirectoryW SetLastError GetPrivateProfileIntA DebugBreak EndUpdateResourceA GetTickCount OpenFileMappingA GetDefaultCommConfigA VirtualAlloc TerminateThread GetACP GetDiskFreeSpaceExW DefineDosDeviceW TerminateProcess EnumResourceLanguagesW GetCPInfoExW SetConsoleTextAttribute GetConsoleAliasExesLengthW IsProcessInJob MoveFileA lstrcpynA WriteConsoleW GetProcAddress lstrcatA WriteConsoleOutputA SetHandleInformation GetPrivateProfileStringA GetComputerNameW CreatePipe WritePrivateProfileSectionA WritePrivateProfileStructW GetPrivateProfileSectionNamesW GetDriveTypeA GetFileAttributesA CopyFileA GetComputerNameExA GlobalMemoryStatus SetTapeParameters lstrcmpW ResetEvent MoveFileW FreeLibrary GetCommState InterlockedExchangeAdd DeleteFiber EnumDateFormatsA SetVolumeMountPointA GetOverlappedResult GlobalAlloc SetThreadPriorityBoost SetFileShortNameW GetFileAttributesW SetCalendarInfoA ConvertFiberToThread SetComputerNameA GetConsoleAliasesA EnumDateFormatsExW GetTimeZoneInformation GetConsoleOutputCP MoveFileWithProgressA GetStdHandle SetLocalTime GetStringTypeW EnumSystemLocalesA GetConsoleAliasesLengthW CreateMemoryResourceNotification OpenSemaphoreW GetModuleHandleExA LoadLibraryW GetCurrentActCtx SetFileTime GetFileType GetNamedPipeHandleStateA UnhandledExceptionFilter SetProcessShutdownParameters lstrcpynW GlobalUnWire FillConsoleOutputCharacterA GetCompressedFileSizeA GetFullPathNameA ReadConsoleW MapUserPhysicalPages WriteConsoleOutputCharacterW OpenJobObjectA CreateFileW SetTimerQueueTimer GetFileInformationByHandle GlobalGetAtomNameA OpenMutexA GetLastError RaiseException HeapValidate IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent SetFilePointer SetStdHandle WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode InterlockedIncrement GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA OutputDebugStringW FlushFileBuffers WriteConsoleA MultiByteToWideChar GetStringTypeA LCMapStringA LCMapStringW GetLocaleInfoA CreateFileA CloseHandle ReadFile DeleteFileA

user32

CharUpperA GetMessageTime

gdi32

GetCharWidth32A

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

47dadba7201b4ee3f6785d3c8e81a114

kernel32

user32

gdi32

winhttp