778d9325e4a7558e47c677cebc89d63d89b4f55161d1b83d37813ad832a32b64

General

Target
778d9325e4a7558e47c677cebc89d63d89b4f55161d1b83d37813ad832a32b64
Size 228KB
Sample221020-dzeg3sccfl
SHA256 778d9325e4a7558e47c677cebc89d63d89b4f55161d1b83d37813ad832a32b64
MD5 801bdf759b8c48afaa446dc9c5d013b0
SHA1 b940960e72db37198424b6e16ead5510126b0470
SHA512 f7d4db15cc6eca5db1a71ec3660697071c6e1f1ac66d9441b4fcfca5c1660a5f72fd029e2cc6160f1ce5afb7a011eae22b0a7ad24051df797e0c124800c714ad
SSDEEP 6144:GUO4l00B1hqZ6orCbuCPRso6RDtCzW7jsxWf7FO:lOi00BmZ6eEuC6buzWvsAfxO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

778d9325e4a7558e47c677cebc89d63d89b4f55161d1b83d37813ad832a32b64

.dll 228KB

778d9325e4a7558e47c677cebc89d63d89b4f55161d1b83d37813ad832a32b64

IMPHASH a75fae54c1e1f631cb497bdbcbb7aa68
SHA256 778d9325e4a7558e47c677cebc89d63d89b4f55161d1b83d37813ad832a32b64
MD5 801bdf759b8c48afaa446dc9c5d013b0
SHA1 b940960e72db37198424b6e16ead5510126b0470
SHA512 f7d4db15cc6eca5db1a71ec3660697071c6e1f1ac66d9441b4fcfca5c1660a5f72fd029e2cc6160f1ce5afb7a011eae22b0a7ad24051df797e0c124800c714ad
SSDEEP 6144:GUO4l00B1hqZ6orCbuCPRso6RDtCzW7jsxWf7FO:lOi00BmZ6eEuC6buzWvsAfxO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

217088

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileType CreateFileA CreateFileW ReadFile GetStdHandle WriteFile GetProcAddress GetModuleHandleW GetFileAttributesA GetFileAttributesW SetFileAttributesA SetFileAttributesW DeleteFileA DeleteFileW DeviceIoControl CreateDirectoryA CreateDirectoryW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW GetVersionExW GetModuleFileNameA CompareStringA LocalFileTimeToFileTime SystemTimeToFileTime FileTimeToSystemTime FileTimeToLocalFileTime GetSystemTime WideCharToMultiByte MultiByteToWideChar CompareStringW IsDBCSLeadByte GetCPInfo GetConsoleOutputCP WriteConsoleA SetStdHandle GetConsoleMode GetConsoleCP SetEndOfFile SetFilePointer FlushFileBuffers MoveFileW SetFileTime GetCurrentProcess GetLastError Sleep CloseHandle GetFullPathNameA GetLocaleInfoA GetStringTypeW RtlUnwind HeapAlloc HeapFree HeapReAlloc RaiseException GetModuleHandleA ExitProcess GetSystemTimeAsFileTime GetCurrentThreadId GetCommandLineA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapCreate HeapDestroy GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA GetVersion InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetStringTypeA WriteConsoleW

user32

CharLowerW CharLowerA CharToOemA CharUpperW CharToOemBuffW OemToCharA OemToCharBuffA CharUpperA

advapi32

SetFileSecurityW SetFileSecurityA OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges

Name

.text

Size

139KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rmnet

Size

56KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

778d9325e4a7558e47c677cebc89d63d89b4f55161d1b83d37813ad832a32b64

kernel32

user32

advapi32