a5a6972af8b6bb2e6ddedf0df66bb0e4773e734b52f984b16417d5922b9649ce

General

Target
a5a6972af8b6bb2e6ddedf0df66bb0e4773e734b52f984b16417d5922b9649ce
Size 714KB
Sample221020-wpfaqsgfbm
SHA256 a5a6972af8b6bb2e6ddedf0df66bb0e4773e734b52f984b16417d5922b9649ce
MD5 376d57b7355be9b79b6d0cdf415dca65
SHA1 993fca4b5c857bc3c62f7a8aad77d5c5c50f339f
SHA512 77a68c7f4b4fa8f86ab260f3843e09bcca6bcaf919828f1b6383276421e5b5f09f5c3c48a8868a5f7d5a6ec95ea137cb8f0d221156ec0ffb6225a1543aa798f1
SSDEEP 12288:EGjkUBiPcTUy+E7lZotjOYF8g1JhBhlHQ0V2fP2xKygpIwqu7UJoHesi:EtDY5/otjOYR1JnjHz2fexKygpuuoo+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a5a6972af8b6bb2e6ddedf0df66bb0e4773e734b52f984b16417d5922b9649ce

.exe 714KB

a5a6972af8b6bb2e6ddedf0df66bb0e4773e734b52f984b16417d5922b9649ce

IMPHASH e4b99358328fcacc555af9020f811827
SHA256 a5a6972af8b6bb2e6ddedf0df66bb0e4773e734b52f984b16417d5922b9649ce
MD5 376d57b7355be9b79b6d0cdf415dca65
SHA1 993fca4b5c857bc3c62f7a8aad77d5c5c50f339f
SHA512 77a68c7f4b4fa8f86ab260f3843e09bcca6bcaf919828f1b6383276421e5b5f09f5c3c48a8868a5f7d5a6ec95ea137cb8f0d221156ec0ffb6225a1543aa798f1
SSDEEP 12288:EGjkUBiPcTUy+E7lZotjOYF8g1JhBhlHQ0V2fP2xKygpIwqu7UJoHesi:EtDY5/otjOYR1JnjHz2fexKygpuuoo+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21637

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID CreateMutexW InterlockedIncrement VerSetConditionMask GetConsoleAliasA WaitNamedPipeA SetFirmwareEnvironmentVariableA HeapFree SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GlobalAlloc LoadLibraryW Sleep GetFileAttributesA GetConsoleAliasW WriteConsoleW GetGeoInfoA RaiseException LCMapStringA GetLastError SetLastError GetProcAddress VirtualAlloc IsValidCodePage LoadLibraryA LocalAlloc AddAtomW FoldStringA FindNextFileA GetModuleHandleA GetFileAttributesExW SetFileShortNameA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA CloseHandle

user32

WindowFromDC

Sharing

General

Malware Config

Signatures

File Explorer

a5a6972af8b6bb2e6ddedf0df66bb0e4773e734b52f984b16417d5922b9649ce

kernel32

user32