21f198a3621f539d1cdfe3f75096fa79

General

Target
21f198a3621f539d1cdfe3f75096fa79
Size 193KB
Sample220815-rdt8asbegr
SHA256 44dcc0e960aa0d4f02002d9f77c54fbc851d5839d3724f22fdaa0831204d2fea
MD5 21f198a3621f539d1cdfe3f75096fa79
SHA1 365fc2957b374d892dc8571a7ac5dec0ebdc86c8
SHA512 90aa06606d5e6713307e3c9bdb3933457d607c76bfd666378b6ec36a10134b01bf66eef89d8685baca64cf3f5770b07c35f4b01da8be6a99a782377c0dfcab47
SSDEEP 3072:ZKk2tXl9a5CDz9p0e/lOwxEIykDGFub0aESSM/h3:cVtXlQkDzHxEFBg9ER
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

21f198a3621f539d1cdfe3f75096fa79

.exe 193KB

21f198a3621f539d1cdfe3f75096fa79

IMPHASH 6a68d89fb0d9e3b290afc9246ae33003
SHA256 44dcc0e960aa0d4f02002d9f77c54fbc851d5839d3724f22fdaa0831204d2fea
MD5 21f198a3621f539d1cdfe3f75096fa79
SHA1 365fc2957b374d892dc8571a7ac5dec0ebdc86c8
SHA512 90aa06606d5e6713307e3c9bdb3933457d607c76bfd666378b6ec36a10134b01bf66eef89d8685baca64cf3f5770b07c35f4b01da8be6a99a782377c0dfcab47
SSDEEP 3072:ZKk2tXl9a5CDz9p0e/lOwxEIykDGFub0aESSM/h3:cVtXlQkDzHxEFBg9ER
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25145

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement _hread CancelWaitableTimer WaitNamedPipeW BuildCommDCBA GetConsoleAliasExesLengthA PeekConsoleInputW CreateFileW RegisterWaitForSingleObject LoadLibraryW EnumResourceTypesW GetCPInfoExW GetFirmwareEnvironmentVariableA GetModuleFileNameA BeginUpdateResourceW GetConsoleAliasExesLengthW WriteConsoleA WriteConsoleW DeleteFileA FillConsoleOutputCharacterA GetProcAddress GetUserDefaultLCID GetConsoleAliasA FindFirstChangeNotificationA GlobalReAlloc RemoveDirectoryW lstrcpynW FindFirstFileExW AreFileApisANSI GetCurrentDirectoryW SetConsoleTitleW GlobalAlloc FindNextFileA OpenJobObjectW _lopen FoldStringA GetComputerNameW SetThreadLocale GetSystemDefaultLCID GetCurrentProcess LoadLibraryA TlsGetValue TlsSetValue GetFileAttributesExA SetComputerNameW GetFileAttributesW InitializeCriticalSection GetVolumePathNameA GetDiskFreeSpaceW RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent GetLastError HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess HeapAlloc TlsAlloc TlsFree InterlockedIncrement GetModuleHandleW SetLastError GetCurrentThreadId MultiByteToWideChar ReadFile ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException SetStdHandle HeapReAlloc FlushFileBuffers SetEndOfFile GetProcessHeap LCMapStringW GetStringTypeW HeapSize

user32

ScreenToClient

advapi32

GetEventLogInformation

Sharing

General

Malware Config

Signatures

File Explorer

21f198a3621f539d1cdfe3f75096fa79

kernel32

user32

advapi32