dfa7af3f385d3ff7fd4176189b0db6a5

General

Target
dfa7af3f385d3ff7fd4176189b0db6a5
Size 186KB
Sample220722-nc5e4aegc8
SHA256 ae6b46a27289111ac808b947ad26c5e028ff2eff709fb2fbf3bcad7fef2ea7c3
MD5 dfa7af3f385d3ff7fd4176189b0db6a5
SHA1 d79babff67131844fd4f607a0b485c5dabd5da26
SHA512 162d529b9f077c6aacf6d09489c9d5160b781f171896514122e8151bec886c370c81a8c5b5878fdf390292303c811750f386c7afd3352d85d30f19b2c7b2e3eb
SSDEEP 3072:k4Y5kfwdbkgxWIrEJnyWgwvH9i/+XDE+surtFfP09j:UdblFenOKH9imTE+suZFfP0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

dfa7af3f385d3ff7fd4176189b0db6a5

.exe 186KB

dfa7af3f385d3ff7fd4176189b0db6a5

IMPHASH 085db6b068e0ab532921326907b886ab
SHA256 ae6b46a27289111ac808b947ad26c5e028ff2eff709fb2fbf3bcad7fef2ea7c3
MD5 dfa7af3f385d3ff7fd4176189b0db6a5
SHA1 d79babff67131844fd4f607a0b485c5dabd5da26
SHA512 162d529b9f077c6aacf6d09489c9d5160b781f171896514122e8151bec886c370c81a8c5b5878fdf390292303c811750f386c7afd3352d85d30f19b2c7b2e3eb
SSDEEP 3072:k4Y5kfwdbkgxWIrEJnyWgwvH9i/+XDE+surtFfP09j:UdblFenOKH9imTE+suZFfP0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

94991

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW UnhandledExceptionFilter GetModuleFileNameA HeapUnlock GetLocaleInfoW _hread GetCommTimeouts GetSystemDirectoryA CreateEventW WriteConsoleA BuildCommDCBW AddConsoleAliasW PeekConsoleInputW EnumDateFormatsW ResetEvent UnregisterWait LoadLibraryA InterlockedDecrement VerifyVersionInfoW WaitNamedPipeA FindResourceExW VirtualProtect GetFirmwareEnvironmentVariableW BeginUpdateResourceA GetConsoleAliasExesLengthW EnumTimeFormatsA DeleteFileA WriteConsoleOutputCharacterA WriteConsoleW GetProcAddress GetUserDefaultLangID GetConsoleAliasW GetSystemWindowsDirectoryA FindFirstChangeNotificationW GlobalAddAtomW WritePrivateProfileStringW EnumResourceNamesA CreateDirectoryA RemoveDirectoryA AreFileApisANSI GetCurrentDirectoryW SetFileAttributesW SetConsoleTitleA GetNumaHighestNodeNumber GetLongPathNameW GlobalAlloc GetThreadLocale GetSystemDefaultLangID SetLastError GetCommMask GetComputerNameExW FindNextFileW InitializeCriticalSection EnumCalendarInfoW _lopen ReadConsoleOutputCharacterW EnumSystemLocalesW GetComputerNameA GetLastError HeapReAlloc ReadFile RaiseException RtlUnwind MultiByteToWideChar GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EncodePointer HeapAlloc HeapFree DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection CloseHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapSize SetStdHandle FlushFileBuffers LCMapStringW GetStringTypeW CreateFileW

ole32

OleQueryLinkFromData

Sharing

General

Malware Config

Signatures

File Explorer

dfa7af3f385d3ff7fd4176189b0db6a5

kernel32

ole32