0e838b395404d359011a9cf94aae59522fd53cab335d82ecd8db831f6f17eee1

General

Target
0e838b395404d359011a9cf94aae59522fd53cab335d82ecd8db831f6f17eee1
Size 222KB
Sample221026-ljjqvsfcb2
SHA256 0e838b395404d359011a9cf94aae59522fd53cab335d82ecd8db831f6f17eee1
MD5 11a56eaa628aa4a2576a0e7fb15a52c7
SHA1 2dcd5ba47e7f7b74f22a6af3b7f25351a4972c65
SHA512 d561f647dfa02ad889042f2a06660aa281f041b63782e2b4f15a60ccb570f8ca89c367ae8a8fe028badc4ff247a33e1b3ca618a92d1d9e6b779770f17931bad2
SSDEEP 6144:fvv9Ys47b5LdRIF646yNyIG44ixdKbcAQ:fvv9Yt79ZRI6cN4rRHQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0e838b395404d359011a9cf94aae59522fd53cab335d82ecd8db831f6f17eee1

.exe 222KB

0e838b395404d359011a9cf94aae59522fd53cab335d82ecd8db831f6f17eee1

IMPHASH b62bd316acc88af39325b14542024bbc
SHA256 0e838b395404d359011a9cf94aae59522fd53cab335d82ecd8db831f6f17eee1
MD5 11a56eaa628aa4a2576a0e7fb15a52c7
SHA1 2dcd5ba47e7f7b74f22a6af3b7f25351a4972c65
SHA512 d561f647dfa02ad889042f2a06660aa281f041b63782e2b4f15a60ccb570f8ca89c367ae8a8fe028badc4ff247a33e1b3ca618a92d1d9e6b779770f17931bad2
SSDEEP 6144:fvv9Ys47b5LdRIF646yNyIG44ixdKbcAQ:fvv9Yt79ZRI6cN4rRHQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44614

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationW GetComputerNameA LocalSize InterlockedDecrement SetSystemTimeAdjustment FindNextVolumeA GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleA lstrlenW FindResourceW GetComputerNameExA GetProcAddress GlobalAlloc WriteConsoleW GetFileTime GetConsoleAliasesLengthA GetOEMCP GetProcessAffinityMask GlobalFindAtomA VerifyVersionInfoA CreateActCtxW GetModuleHandleW FindNextVolumeW InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo InterlockedExchange EnterCriticalSection InterlockedCompareExchange EnumCalendarInfoA GetPrivateProfileStructW GetNamedPipeHandleStateA AreFileApisANSI LoadLibraryW GetTickCount SetLastError FoldStringW LoadLibraryA WideCharToMultiByte InterlockedIncrement MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthA

Sharing

General

Malware Config

Signatures

File Explorer

0e838b395404d359011a9cf94aae59522fd53cab335d82ecd8db831f6f17eee1

kernel32

gdi32