d9fa6f5a862198a9ece58e94c1970c53fd6552213d2645a3a94e9527559aec41

General

Target
d9fa6f5a862198a9ece58e94c1970c53fd6552213d2645a3a94e9527559aec41
Size 229KB
Sample221020-b8llmshdhp
SHA256 d9fa6f5a862198a9ece58e94c1970c53fd6552213d2645a3a94e9527559aec41
MD5 0b8e16e838139e8802182f91ef58949a
SHA1 3939a917a798adac9fd146cda75596d2464e0925
SHA512 eee03807e1a35becc1c7511e629bb1791820654f61e0aa9d2883726ff8315a17e14ff3fab1b5e269cc41f3d3ce8a0804b1fcc78d4da1c817c970266319506d78
SSDEEP 3072:ev2JhZXdPDgrc/BLqRykU3WFiVm9yyXpxgDZtZmctqdO8O:ev8XqrcZLPkU3l+qDZf9qdO8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d9fa6f5a862198a9ece58e94c1970c53fd6552213d2645a3a94e9527559aec41

.exe 229KB

d9fa6f5a862198a9ece58e94c1970c53fd6552213d2645a3a94e9527559aec41

IMPHASH 01398082e8bfbed2eb9e8d68648bfc54
SHA256 d9fa6f5a862198a9ece58e94c1970c53fd6552213d2645a3a94e9527559aec41
MD5 0b8e16e838139e8802182f91ef58949a
SHA1 3939a917a798adac9fd146cda75596d2464e0925
SHA512 eee03807e1a35becc1c7511e629bb1791820654f61e0aa9d2883726ff8315a17e14ff3fab1b5e269cc41f3d3ce8a0804b1fcc78d4da1c817c970266319506d78
SSDEEP 3072:ev2JhZXdPDgrc/BLqRykU3WFiVm9yyXpxgDZtZmctqdO8O:ev8XqrcZLPkU3l+qDZf9qdO8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44150

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameW LocalSize InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW FindNextFileW CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW IsBadWritePtr FindResourceA GetComputerNameExA GetProcAddress LocalAlloc GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructA GetACP GetProcessAffinityMask GlobalFindAtomW WriteConsoleW InterlockedIncrement CreateActCtxA InitializeCriticalSection GetStringTypeExA OpenMutexA CancelDeviceWakeupRequest RtlCaptureContext EnterCriticalSection GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange EnumDateFormatsA EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA CreateTimerQueue GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

d9fa6f5a862198a9ece58e94c1970c53fd6552213d2645a3a94e9527559aec41

kernel32