99802519b61ef7030edaed827c56bbb9[.]exe

General

Target
99802519b61ef7030edaed827c56bbb9.exe
Size 400KB
Sample220730-pl6vysahe3
SHA256 30e41f3fbec0edd2937b7d1aa461fd9d3e3b8928ffbda3a98629140b89ec5085
MD5 99802519b61ef7030edaed827c56bbb9
SHA1 c7fc404e653ed735758a4fd95e6dd49f6e0d4ad4
SHA512 37ad4af3c6dcd8b7a135b8dfb11cb40ebd63a12c0b1d88d9cc14d854dcaee974bdc7ac81f1b3ed1bb71936580f2bc5e052f0cd572791fca896870a0b0d2db0d6
SSDEEP 6144:8nxCpn/8T2nrPtAbOKgtvfGWDUr/Y7er4abrLR0DpjGzeHJ0wdGjI:o6/e2nrPtAbO3fxYrGI1b3R0DIzE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

99802519b61ef7030edaed827c56bbb9.exe

.exe 400KB

99802519b61ef7030edaed827c56bbb9.exe

IMPHASH dc0513b2e8e866ceee30009dd51093dc
SHA256 30e41f3fbec0edd2937b7d1aa461fd9d3e3b8928ffbda3a98629140b89ec5085
MD5 99802519b61ef7030edaed827c56bbb9
SHA1 c7fc404e653ed735758a4fd95e6dd49f6e0d4ad4
SHA512 37ad4af3c6dcd8b7a135b8dfb11cb40ebd63a12c0b1d88d9cc14d854dcaee974bdc7ac81f1b3ed1bb71936580f2bc5e052f0cd572791fca896870a0b0d2db0d6
SSDEEP 6144:8nxCpn/8T2nrPtAbOKgtvfGWDUr/Y7er4abrLR0DpjGzeHJ0wdGjI:o6/e2nrPtAbO3fxYrGI1b3R0DIzE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45744

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerifyVersionInfoW WriteConsoleInputA EnumDateFormatsW CopyFileExW DnsHostnameToComputerNameW FindNextFileW ReadConsoleOutputCharacterW SetConsoleActiveScreenBuffer LockFile GetProfileSectionA QueryDosDeviceW RequestWakeupLatency GetProcessPriorityBoost GetDriveTypeW GlobalGetAtomNameA DeleteFileW FindNextVolumeMountPointW TlsSetValue SizeofResource WriteConsoleInputW GetConsoleTitleW GetComputerNameExW OpenEventA CallNamedPipeA GetModuleHandleW GetSystemDirectoryA GetDriveTypeA BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA GetShortPathNameA DeleteFileA GetCommandLineW InterlockedIncrement InterlockedExchange CopyFileW CreateActCtxW FormatMessageW EnterCriticalSection FindNextVolumeA CreateIoCompletionPort LoadLibraryA CreateNamedPipeW GetSystemDefaultLangID GetConsoleAliasesLengthA WriteProfileSectionW AddAtomW InterlockedDecrement HeapFree _hwrite InterlockedCompareExchange GetStartupInfoW CreateMailslotW GetCPInfoExW GetSystemWow64DirectoryW GetLastError GetPrivateProfileIntW GetConsoleAliasExesLengthW WaitForDebugEvent SetLastError LoadLibraryW VerifyVersionInfoA VirtualAlloc GetACP lstrcpyA GetConsoleAliasA GetDiskFreeSpaceExA TerminateProcess EnumResourceLanguagesA SetConsoleTextAttribute GlobalGetAtomNameW CreateJobSet MoveFileW lstrcpynA EnumSystemLocalesA GetPrivateProfileSectionNamesW GetFileAttributesW FileTimeToSystemTime GetTapeParameters lstrcmpW SetEvent MoveFileA CreateMutexA FindResourceW GetCommState FormatMessageA CreateFiber GetConsoleFontSize LocalAlloc SetFileShortNameA lstrcpyW HeapLock GetFileAttributesA SetCalendarInfoW GetSystemWindowsDirectoryW GetConsoleAliasesW EnumDateFormatsExW GetComputerNameW GetPrivateProfileStructW _hread LocalFlags OpenWaitableTimerA EnumResourceNamesW CreateFileMappingW SetProcessShutdownParameters lstrcpynW GetFullPathNameW WriteConsoleW FreeUserPhysicalPages WriteConsoleOutputCharacterW OpenJobObjectW CreateFileW SetCurrentDirectoryA GlobalWire GetFileInformationByHandle GetProfileSectionW CommConfigDialogW CreateFileA GetDefaultCommConfigA LocalFree Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind WideCharToMultiByte GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc GetCurrentThreadId TlsFree GetOEMCP GetCPInfo IsValidCodePage SetFilePointer QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle

user32

CharToOemBuffW CharUpperW GetMessageTime LoadMenuA

advapi32

AbortSystemShutdownW

Name

.text

Size

198KB

Virtual Size

197KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

172KB

Virtual Size

208KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vabub

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.lux

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.cunoni

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

99802519b61ef7030edaed827c56bbb9.exe

kernel32

user32

advapi32