8c340810b289bb9addfc9edb7c6dcd47d9f990135bac7b43406a985383b71da1

General

Target
8c340810b289bb9addfc9edb7c6dcd47d9f990135bac7b43406a985383b71da1
Size 237KB
Sample221012-25grdsgdbp
SHA256 8c340810b289bb9addfc9edb7c6dcd47d9f990135bac7b43406a985383b71da1
MD5 7828f04aee05ad7e4347a68c431b1fb1
SHA1 1ef468bd21702883264cf01fc7412ba681713ccc
SHA512 953d1d7cab60bf73b840a4c5c7b0f24ffc8f7a3cca62595ba933a9a4a590f7549a62fc839ebfdab2d152804b3f1eb876c47553e05451d71f5ac1d7bb9cdbef4c
SSDEEP 6144:1QmqVJbaflmsnFJlJfn5WsR4t5n3jJ9ZMjvA5wG:1GnKF1f5W24t5t9Z2vA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

8c340810b289bb9addfc9edb7c6dcd47d9f990135bac7b43406a985383b71da1

.exe 237KB

8c340810b289bb9addfc9edb7c6dcd47d9f990135bac7b43406a985383b71da1

IMPHASH 2113d481ec339de1cce3359f567f893f
SHA256 8c340810b289bb9addfc9edb7c6dcd47d9f990135bac7b43406a985383b71da1
MD5 7828f04aee05ad7e4347a68c431b1fb1
SHA1 1ef468bd21702883264cf01fc7412ba681713ccc
SHA512 953d1d7cab60bf73b840a4c5c7b0f24ffc8f7a3cca62595ba933a9a4a590f7549a62fc839ebfdab2d152804b3f1eb876c47553e05451d71f5ac1d7bb9cdbef4c
SSDEEP 6144:1QmqVJbaflmsnFJlJfn5WsR4t5n3jJ9ZMjvA5wG:1GnKF1f5W24t5t9Z2vA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17635

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ntdll

RtlUnwind memmove

shlwapi

StrStrW PathStripPathW PathFileExistsW PathSkipRootW PathAddExtensionW PathAppendW

kernel32

GetStringTypeW MultiByteToWideChar WideCharToMultiByte CreateMutexW lstrcmpA OutputDebugStringW GetModuleHandleW GetTickCount Sleep lstrlenW LocalAlloc GetModuleFileNameW LoadLibraryW HeapSize EnterCriticalSection LeaveCriticalSection LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo IsProcessorFeaturePresent GetSystemTimeAsFileTime LocalFree SetUnhandledExceptionFilter GetCurrentProcessId lstrcpynA VirtualQuery HeapAlloc HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter HeapReAlloc IsDebuggerPresent GetLastError EncodePointer DecodePointer GetProcAddress ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter

user32

CharLowerW RegisterClassExW LoadIconW LoadCursorW GetCursorPos DialogBoxParamW CreateWindowExW PrintWindow UpdateWindow GetFocus GetDlgItem GetClientRect ReleaseDC ShowWindow

gdi32

CreateCompatibleDC

Name

.text

Size

36KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

512B

Virtual Size

137B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

173KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8c340810b289bb9addfc9edb7c6dcd47d9f990135bac7b43406a985383b71da1

ntdll

shlwapi

kernel32

user32

gdi32