835c3e0d5840f48dfc256878b8de00dd2d295e85fe1cf1515ae9483b093c2231

Sharing

Copy URL Twitter E-mail

General

Target
835c3e0d5840f48dfc256878b8de00dd2d295e85fe1cf1515ae9483b093c2231
Size 199KB
Sample221020-nb12aabch8
SHA256 835c3e0d5840f48dfc256878b8de00dd2d295e85fe1cf1515ae9483b093c2231
MD5 4126e32a311e752451ffa613017018e0
SHA1 f652ba18e709b1a9d970895b8aa89b2a53395cbc
SHA512 de0700275e36a39ac75c90867f39cd6127b0a7f86aaca21f633545d1e4546436cbd1c7600315f0f1c0386b88caed5ff23c1620050cbb0a7109ee88629e715121
SSDEEP 6144:/IAc44Z3lRGOUZGKc4YFnwjCpWSb5e9d:6X3lRkRc4YFwjsWSNG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

835c3e0d5840f48dfc256878b8de00dd2d295e85fe1cf1515ae9483b093c2231

.exe 199KB

835c3e0d5840f48dfc256878b8de00dd2d295e85fe1cf1515ae9483b093c2231

IMPHASH c6be910da0707f87de7b5801f87f4bc9
SHA256 835c3e0d5840f48dfc256878b8de00dd2d295e85fe1cf1515ae9483b093c2231
MD5 4126e32a311e752451ffa613017018e0
SHA1 f652ba18e709b1a9d970895b8aa89b2a53395cbc
SHA512 de0700275e36a39ac75c90867f39cd6127b0a7f86aaca21f633545d1e4546436cbd1c7600315f0f1c0386b88caed5ff23c1620050cbb0a7109ee88629e715121
SSDEEP 6144:/IAc44Z3lRGOUZGKc4YFnwjCpWSb5e9d:6X3lRkRc4YFwjsWSNG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

211205

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

TraceMessage GetTraceEnableFlags GetTraceEnableLevel GetTraceLoggerHandle RegisterTraceGuidsW UnregisterTraceGuids RegCloseKey ConvertStringSecurityDescriptorToSecurityDescriptorW CloseTrace RegCreateKeyExW RegQueryValueExW RegOpenKeyExW StartTraceW EnableTrace ControlTraceW

kernel32

DeleteCriticalSection FreeLibrary LoadLibraryExW GetVolumePathNameW GetVolumeNameForVolumeMountPointW GetVolumePathNamesForVolumeNameW ExpandEnvironmentStringsW GetVolumeInformationW MoveFileExW DeviceIoControl FindFirstFileW FindNextFileW FindClose FormatMessageW UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter GetModuleHandleA SetUnhandledExceptionFilter InterlockedCompareExchange InterlockedExchange CloseHandle InterlockedIncrement InterlockedDecrement LocalFree GetLastError CreateDirectoryW DeleteFileW GetFileAttributesW InitializeCriticalSection CreateEventW CreateThread WaitForMultipleObjects ResetEvent Sleep EnterCriticalSection LeaveCriticalSection WaitForSingleObject SetEvent InterlockedPopEntrySList InitializeSListHead RtlCaptureStackBackTrace InterlockedPushEntrySList GetModuleHandleW GetProcessHeap HeapSetInformation GetConsoleOutputCP SetThreadUILanguage CreateFileW OpenProcess DuplicateHandle GetCurrentProcess SetConsoleCtrlHandler

msvcrt

_vscwprintf _controlfp _except_handler4_common ?terminate@@YAXXZ _onexit _lock __dllonexit _unlock __set_app_type __p__fmode __p__commode __setusermatherr _amsg_exit _initterm exit _XcptFilter _exit _cexit __wgetmainargs memset localeconv mbtowc _wsetlocale swscanf_s ??2@YAPAXI@Z wprintf _vsnwprintf ??3@YAXPAX@Z wcschr memcpy memmove iswspace

ntdll

RtlAllocateHeap RtlFreeHeap EtwTraceMessage RtlNtStatusToDosError RtlGetLastNtStatus RtlSetThreadErrorMode

ole32

CoCreateInstance CoUninitialize CoTaskMemFree CoTaskMemAlloc CoInitializeEx CoDisconnectObject

virtdisk

GetStorageDependencyInformation

sxshared

SxTracerGetThreadContextRetail SxTracerDebuggerBreak SxTracerShouldTrackFailure

user32

LoadStringW