file

General

Target
file
Size 131KB
Sample220827-l83j9saed7
SHA256 61e79ef0d82801ff988f19bbb50d8b9da99e12d86ad16f2ebfdd8a34f38583b1
MD5 712ea118568e036d884f2586596bbea5
SHA1 a0a6232b14730a5fd3fc6a6227785032de2a7a7a
SHA512 4b1dbf48e902f11da34f476783465efbfbc4fa2a883f0e236c1552293bd0bd7183e301cc6e735c7a4d1779dabb1404c37a84636d9af7231ac3c56395f576d6a6
SSDEEP 3072:JjrXUajFQ7cQyFYhVDYoNehNSwQDxrNbsMMiuJIx/ZNlq:ZXjjFQ7cQXl1cmw2Po1FiHj
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file

.exe 131KB

IMPHASH f142f7df0d22f3cd28526f3a68235bdf
SHA256 61e79ef0d82801ff988f19bbb50d8b9da99e12d86ad16f2ebfdd8a34f38583b1
MD5 712ea118568e036d884f2586596bbea5
SHA1 a0a6232b14730a5fd3fc6a6227785032de2a7a7a
SHA512 4b1dbf48e902f11da34f476783465efbfbc4fa2a883f0e236c1552293bd0bd7183e301cc6e735c7a4d1779dabb1404c37a84636d9af7231ac3c56395f576d6a6
SSDEEP 3072:JjrXUajFQ7cQyFYhVDYoNehNSwQDxrNbsMMiuJIx/ZNlq:ZXjjFQ7cQXl1cmw2Po1FiHj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16015

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement SetWaitableTimer WaitNamedPipeA BuildCommDCBW GetSystemTimeAdjustment ReadConsoleInputA CreateFileW SearchPathA EnumResourceTypesA GetCPInfoExW ExpandEnvironmentStringsW GetModuleFileNameW BeginUpdateResourceW GetConsoleAliasExesLengthA WriteConsoleOutputCharacterW WriteConsoleW DeleteFileW FoldStringA LocalAlloc GetProcAddress GetModuleHandleW AddRefActCtx GetConsoleAliasW GetSystemWindowsDirectoryW FindFirstChangeNotificationA GlobalAddAtomA WritePrivateProfileStringW EnumResourceNamesA SearchPathW lstrcpynW FindFirstFileExA GetVolumeInformationA GetCurrentDirectoryA GetConsoleAliasesLengthW AllocConsole GetConsoleTitleW SetPriorityClass OpenJobObjectW _lclose CreateDirectoryExW FillConsoleOutputCharacterW HeapReAlloc HeapAlloc MultiByteToWideChar GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree SetLastError GetCurrentThreadId GetLastError SetUnhandledExceptionFilter ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetStringTypeW LeaveCriticalSection EnterCriticalSection HeapFree Sleep UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LoadLibraryW RtlUnwind IsProcessorFeaturePresent HeapSize

gdi32

GetCharWidthFloatW GetFontUnicodeRanges

advapi32

CloseEventLog DeregisterEventSource BackupEventLogA GetNumberOfEventLogRecords BackupEventLogW

winhttp

WinHttpReadData

Sharing