199533bcd751d398fbb6e385cdce41cb02fcff9f06d620bd0acb5704c440f58a

Sharing

Copy URL Twitter E-mail

General

Target
199533bcd751d398fbb6e385cdce41cb02fcff9f06d620bd0acb5704c440f58a
Size 855KB
Sample221011-de7ccsbge5
SHA256 199533bcd751d398fbb6e385cdce41cb02fcff9f06d620bd0acb5704c440f58a
MD5 63ca3d50b1462bc606984f61ffddf2fd
SHA1 1b9c9feadc850c73e3f0124f91577c5c31625a19
SHA512 1781d7fabcc1f1f06ab81578db880194dcb7a902becbde8878e662753c57f165824a6bb596d4c543f5d26690a24a45f3521e34b5f6b3c67ae796220a208aa67e
SSDEEP 24576:OEk0gaO1ncNx544YCvGSBw7cCmSb5tBmF+Du:OwgaOqx544w7cCmSb5LmF+i
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

199533bcd751d398fbb6e385cdce41cb02fcff9f06d620bd0acb5704c440f58a

.exe 855KB

199533bcd751d398fbb6e385cdce41cb02fcff9f06d620bd0acb5704c440f58a

IMPHASH f6743739617163a90319f1080a10bc89
SHA256 199533bcd751d398fbb6e385cdce41cb02fcff9f06d620bd0acb5704c440f58a
MD5 63ca3d50b1462bc606984f61ffddf2fd
SHA1 1b9c9feadc850c73e3f0124f91577c5c31625a19
SHA512 1781d7fabcc1f1f06ab81578db880194dcb7a902becbde8878e662753c57f165824a6bb596d4c543f5d26690a24a45f3521e34b5f6b3c67ae796220a208aa67e
SSDEEP 24576:OEk0gaO1ncNx544YCvGSBw7cCmSb5tBmF+Du:OwgaOqx544w7cCmSb5LmF+i
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

GetUserNameA RegCloseKey RegOpenKeyExA RegQueryValueExA

kernel32

CloseHandle CreateFileA CreateFileW CreateProcessA CreateToolhelp32Snapshot DeleteCriticalSection EnterCriticalSection EnumCalendarInfoA ExitProcess FindClose FindFirstFileA FreeLibrary GetACP GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentThreadId GetDiskFreeSpaceA GetEnvironmentStrings GetFileAttributesA GetFileAttributesW GetFileSize GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetThreadContext GetThreadLocale GetUserDefaultLCID GetVersion GetVersionExA HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedExchange InterlockedIncrement IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LoadLibraryExA LocalAlloc LocalFree MultiByteToWideChar Process32First Process32Next RaiseException ReadFile ReadProcessMemory ResumeThread RtlUnwind SetConsoleCtrlHandler SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetFilePointer SetHandleCount SetLastError SetThreadContext SetThreadLocale TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualAllocEx VirtualFree VirtualQuery WideCharToMultiByte WriteFile WriteProcessMemory lstrcpyA lstrcpynA lstrlenA

user32

CharNextA EnumThreadWindows GetKeyboardType GetSystemMetrics LoadStringA MessageBoxA wsprintfA

oleaut32

SysAllocStringLen SysFreeString SysStringLen VariantChangeTypeEx VariantClear VariantCopyInd

Name

.text

Size

139KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

48KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ