596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f

General

Target
596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f
Size 691KB
Sample220724-ejx5xsedhk
SHA256 596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f
MD5 560c9dcf5ba659df8ea53859dd0abffe
SHA1 4cbcba149ddd94cdcd07b7a2f5a71df5e1b6530b
SHA512 a3d0ca2fd7c3f0dc5301aaf5ef22212d54c2a23790152ab3c31d2710569213352e91a7345f4bc47a084ecc5095e0474ba9a7be410adce898da33c2f43cf8a3d3
SSDEEP 12288:4HKHMbFUaFkx3BBrtZtFzb3H+SEPWYd4Q:/82aYl5+SEPWYd4Q
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f

.exe 691KB

596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f

IMPHASH f49939c5fa1bba8216e84cfa595e6b9f
SHA256 596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f
MD5 560c9dcf5ba659df8ea53859dd0abffe
SHA1 4cbcba149ddd94cdcd07b7a2f5a71df5e1b6530b
SHA512 a3d0ca2fd7c3f0dc5301aaf5ef22212d54c2a23790152ab3c31d2710569213352e91a7345f4bc47a084ecc5095e0474ba9a7be410adce898da33c2f43cf8a3d3
SSDEEP 12288:4HKHMbFUaFkx3BBrtZtFzb3H+SEPWYd4Q:/82aYl5+SEPWYd4Q
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

653056

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA

kernel32

GetLocaleInfoA Sleep EnterCriticalSection LoadLibraryA InitializeCriticalSection VirtualAlloc HeapReAlloc RtlUnwind HeapSize GlobalAlloc GlobalFlags VirtualAllocEx OpenProcess GetCurrentProcessId DeleteCriticalSection CreateThread ReadFile UnhandledExceptionFilter CloseHandle FindClose lstrcatA DeleteFileA FindFirstFileA FindNextFileA SetFilePointer MulDiv WriteFile GetPrivateProfileStringA WritePrivateProfileStringA MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryExA GetModuleHandleA GetExitCodeProcess WaitForSingleObject GlobalFree ExpandEnvironmentStringsA lstrcmpA lstrcmpiA GetVersion GetSystemDirectoryA lstrlenA GetTempFileNameA RemoveDirectoryA CreateProcessA GlobalLock GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetLastError TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW LeaveCriticalSection

Sharing

General

Malware Config

Signatures

File Explorer

596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f

user32

kernel32