c1484b89c452ce79c2ce3f80675aec6c

General

Target
c1484b89c452ce79c2ce3f80675aec6c
Size 299KB
Sample220726-m2tjfscbf2
SHA256 29fa967456a686990c411c90db5a89f2d2bdb75ff5d1e266ca30501c4395987e
MD5 c1484b89c452ce79c2ce3f80675aec6c
SHA1 754774711bc79f50892948d2646a9d7ab0366d2a
SHA512 3d4dd91235074cec527ee328038b363c215964aab8a04c7507923932dc93da583416bb4a4620101ce59597b98990e3fe8db09eaccba69d052ef8384e59423e11
SSDEEP 3072:G7NSNW1Me1jmxzUsFAf3i22mD7m6MPoqDZqlLGME/6eyBmwCMj4uB4hcgZq+ziF2:I1jmxzUsF2i2p3MPoqDoIbyCk4uqlab
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

c1484b89c452ce79c2ce3f80675aec6c

.exe 299KB

c1484b89c452ce79c2ce3f80675aec6c

IMPHASH 9f971d78258087988285d908160f80ff
SHA256 29fa967456a686990c411c90db5a89f2d2bdb75ff5d1e266ca30501c4395987e
MD5 c1484b89c452ce79c2ce3f80675aec6c
SHA1 754774711bc79f50892948d2646a9d7ab0366d2a
SHA512 3d4dd91235074cec527ee328038b363c215964aab8a04c7507923932dc93da583416bb4a4620101ce59597b98990e3fe8db09eaccba69d052ef8384e59423e11
SSDEEP 3072:G7NSNW1Me1jmxzUsFAf3i22mD7m6MPoqDZqlLGME/6eyBmwCMj4uB4hcgZq+ziF2:I1jmxzUsF2i2p3MPoqDoIbyCk4uqlab
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41968

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNamedPipeHandleStateW LocalFree WriteConsoleInputA EnumDateFormatsW CopyFileExW DnsHostnameToComputerNameW VerifyVersionInfoA FindNextFileW VirtualUnlock LockFile GetProfileSectionW RequestWakeupLatency GetProcessPriorityBoost GlobalGetAtomNameW DeleteFileW FindNextVolumeMountPointA TlsSetValue LoadResource WriteConsoleInputW GetConsoleTitleA GetComputerNameExW OpenEventW CallNamedPipeW GetModuleHandleA GetSystemDirectoryA GetDriveTypeA BuildCommDCBAndTimeoutsW GetProcAddress GetShortPathNameA ZombifyActCtx DeleteFileA GetCommandLineW InterlockedIncrement GetConsoleTitleW CopyFileW CreateActCtxW FormatMessageA EnterCriticalSection FindNextVolumeA CreateIoCompletionPort LoadLibraryA CreateNamedPipeA GetSystemDefaultLCID GetConsoleAliasesLengthW WriteProfileSectionA AddAtomW InterlockedDecrement HeapFree _hread InterlockedCompareExchange GetStartupInfoW CreateMailslotA GetCPInfoExA GetSystemWow64DirectoryW GetLastError GetPrivateProfileIntA GetConsoleAliasExesLengthW WaitForDebugEvent EndUpdateResourceW SetLastError LoadLibraryW OpenFileMappingA GetDefaultCommConfigA VirtualAlloc GetACP lstrcatW GetConsoleAliasA GetDiskFreeSpaceExA DefineDosDeviceA TerminateProcess EnumResourceLanguagesW GetCPInfoExW SetConsoleTextAttribute CreateJobSet WriteConsoleW SetCriticalSectionSpinCount GetComputerNameW EnumSystemLocalesA WritePrivateProfileSectionW WritePrivateProfileStructA GetPrivateProfileSectionNamesW FileTimeToSystemTime SetTapeParameters lstrcmpW SetEvent FreeLibrary FindResourceW GetCommState FormatMessageW CreateFiber EnumDateFormatsA GetConsoleFontSize MoveFileA LocalAlloc SetFileShortNameW lstrcpyA HeapUnlock SetCalendarInfoW SetComputerNameW GetConsoleAliasesW EnumDateFormatsExA GetConsoleOutputCP LocalSize SetStdHandle GetLocalTime GetStringTypeA FindActCtxSectionStringA FreeEnvironmentStringsA GetModuleHandleExW GetBinaryTypeA GetFileAttributesA GetSystemWindowsDirectoryW LocalFlags GetSystemTimeAdjustment SetProcessShutdownParameters lstrcpynA GlobalWire FillConsoleOutputCharacterA GetCompressedFileSizeA GetFullPathNameW ReadConsoleW FreeUserPhysicalPages WriteConsoleOutputCharacterA OpenJobObjectW CreateFileW DeleteTimerQueueTimer SetCurrentDirectoryW GetNamedPipeHandleStateA CreateFileA CloseHandle WideCharToMultiByte RaiseException HeapValidate IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetFilePointer QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW MultiByteToWideChar GetStringTypeW GetLocaleInfoA LCMapStringA LCMapStringW FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleA

user32

LoadMenuW CharUpperW GetMenuInfo

msimg32

TransparentBlt AlphaBlend

Name

.text

Size

168KB

Virtual Size

167KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.deki

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gujafi

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.citis

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c1484b89c452ce79c2ce3f80675aec6c

kernel32

user32

msimg32