ea3bac4910e939df0f0ea046400ee909fef5c81cfac46e2052475b73a6673c8e

Sharing

Copy URL Twitter E-mail

General

Target
ea3bac4910e939df0f0ea046400ee909fef5c81cfac46e2052475b73a6673c8e
Size 466KB
Sample221002-25cgnsgagk
SHA256 ea3bac4910e939df0f0ea046400ee909fef5c81cfac46e2052475b73a6673c8e
MD5 6652e5311f8634a155e0a1e85d641247
SHA1 7d8eeb7a09ae58077fbce8938f8fcffb78f257ac
SHA512 cad22461a366e908452296c3dae6b52909decaf541ea35ccad4e4ed2dd9a5f88e16e5e6fb3162bce55eea713671e7449e1d3d93e50bd5132263733db5781ae14
SSDEEP 6144:XAcOoDE/uV4vdBX2+hGcw/Ng+BuHf3E36tvfg+MSkZtSW+:JOME/u+vdBHQjBuHfNtA+MSdX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ea3bac4910e939df0f0ea046400ee909fef5c81cfac46e2052475b73a6673c8e

.exe 466KB

ea3bac4910e939df0f0ea046400ee909fef5c81cfac46e2052475b73a6673c8e

IMPHASH 8599736b312e3e2a493c00e632c104f5
SHA256 ea3bac4910e939df0f0ea046400ee909fef5c81cfac46e2052475b73a6673c8e
MD5 6652e5311f8634a155e0a1e85d641247
SHA1 7d8eeb7a09ae58077fbce8938f8fcffb78f257ac
SHA512 cad22461a366e908452296c3dae6b52909decaf541ea35ccad4e4ed2dd9a5f88e16e5e6fb3162bce55eea713671e7449e1d3d93e50bd5132263733db5781ae14
SSDEEP 6144:XAcOoDE/uV4vdBX2+hGcw/Ng+BuHf3E36tvfg+MSkZtSW+:JOME/u+vdBHQjBuHfNtA+MSdX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24358

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_BIND

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_AGGRESIVE_WS_TRIM IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

kernel32

GetConsoleMode GetConsoleCP SetFilePointer HeapSize GetStringTypeW LCMapStringW RtlUnwind GetSystemTimeAsFileTime GetCurrentProcessId LoadLibraryW QueryPerformanceCounter DeleteCriticalSection GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount SetPriorityClass WideCharToMultiByte FreeEnvironmentStringsW GetModuleFileNameA GetModuleFileNameW GetStdHandle WriteFile ExitProcess TerminateProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter HeapReAlloc SetStdHandle WriteConsoleW FlushFileBuffers CreateFileW EnterCriticalSection LeaveCriticalSection GetLastError HeapCreate GetProcessHeap OpenProcess HeapAlloc lstrlenA GetConsoleWindow Sleep GetTickCount GetCurrentProcess GetPriorityClass GetComputerNameA GetProcAddress GetCurrentThreadId CloseHandle SetLastError GetModuleHandleW TlsFree DecodePointer TlsSetValue TlsGetValue TlsAlloc IsValidCodePage lstrcpyW GetModuleHandleA GetEnvironmentStringsW GetOEMCP GetACP InterlockedDecrement InterlockedIncrement MultiByteToWideChar RaiseException HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer IsProcessorFeaturePresent GetCPInfo

user32

IsClipboardFormatAvailable DrawMenuBar SendDlgItemMessageW EnumDisplaySettingsA SendMessageA GetClientRect InvalidateRect SetRect SetRectEmpty UnionRect BroadcastSystemMessageA FindWindowA GetWindowThreadProcessId DefWindowProcA GetSysColor SetSysColors GetWindowLongA PostQuitMessage GetMenu GetMenuState CheckMenuItem ShowWindow GetWindowRect SetWindowPos CreateWindowExA GetWindow DefFrameProcA LoadIconA LoadCursorA RegisterClassExA LoadBitmapA GetDC wsprintfA ReleaseDC LoadImageA BeginPaint SetScrollRange EndPaint IsIconic EnumWindows SetScrollPos SetMenuItemInfoA

gdi32

DeleteObject ChoosePixelFormat SetPixelFormat GetObjectA CreateSolidBrush SelectObject TextOutA Rectangle CreateCompatibleDC BitBlt DeleteDC CreatePen MoveToEx LineTo CreateFontIndirectA

comdlg32

FindTextW

advapi32

CredEnumerateA

shell32

SHGetFileInfoA

ole32

CoInitialize CoCreateInstance CoUninitialize

odbc32

ord36

netapi32

NetUserEnum

psapi

GetProcessMemoryInfo

comctl32

ImageList_GetImageCount ImageList_AddMasked ImageList_Create

rpcrt4

UuidCreate UuidToStringA RpcStringFreeA

Name

.text

Size

70KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

255KB

Virtual Size

254KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

125KB

Virtual Size

124KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ